Vulnerabilities > Opera > Opera Browser > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-07-08 | CVE-2010-2662 | Permissions, Privileges, and Access Controls vulnerability in Opera Browser Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click." | 4.3 |
| 2010-07-08 | CVE-2010-2661 | Permissions, Privileges, and Access Controls vulnerability in Opera Browser Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict access to the full pathname of a file selected for upload, which allows remote attackers to obtain potentially sensitive information via unspecified DOM manipulations. | 4.3 |
| 2010-07-08 | CVE-2010-2660 | Permissions, Privileges, and Access Controls vulnerability in Opera Browser Opera before 10.54 on Windows and Mac OS X, and before 10.60 on UNIX platforms, does not properly restrict certain uses of homograph characters in domain names, which makes it easier for remote attackers to spoof IDN domains via unspecified choices of characters. | 4.3 |
| 2010-07-08 | CVE-2010-2659 | Information Exposure vulnerability in Opera Browser Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site. | 4.3 |
| 2010-07-08 | CVE-2010-2658 | Improper Input Validation vulnerability in Opera Browser Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers to trigger the uploading of arbitrary files via a crafted web site. | 4.3 |
| 2010-06-25 | CVE-2010-2455 | Permissions, Privileges, and Access Controls vulnerability in Opera Browser Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206. | 4.3 |
| 2010-06-01 | CVE-2010-2121 | Resource Management Errors vulnerability in Opera Browser 9.52 Opera 9.52 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid (1) news:// or (2) nntp:// URIs. | 4.3 |
| 2010-05-20 | CVE-2010-1993 | Resource Management Errors vulnerability in Opera Browser 9.52 Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements. | 5.0 |
| 2010-05-20 | CVE-2010-1989 | Resource Management Errors vulnerability in Opera Browser 9.52 Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images, a related issue to CVE-2010-0181. | 5.0 |
| 2010-04-08 | CVE-2010-1310 | Information Exposure vulnerability in Opera Browser 10.50 Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages. | 5.0 |