Skip to content
Noroxi

Opera records

311 published records for vendor Opera. 0 of them have been exploited in the wild (listed in CISA KEV) and 3 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 1%
Pre-auth RCE
57
With a fix record
1.9%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

311 records
  • CVE-2015-4000
    60This week

    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_E

    LowCVSS 3.7WeaponizedEPSS 99%

    openssl · opensslMay 20, 2015

  • CVE-2008-5178
    46Plan

    Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.

    CriticalCVSS 9.3Proof of conceptEPSS 31%

    opera · operaNov 20, 2008

  • CVE-2010-1349
    46Plan

    Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trig

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    opera · opera browserApr 12, 2010

  • CVE-2011-2628
    44Plan

    Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    opera · opera browserJul 1, 2011

  • CVE-2007-5476
    43Plan

    Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Sev

    CriticalCVSS 10.0No exploitEPSS 9%

    adobe · flash playerOct 17, 2007

  • CVE-2013-1489
    42Plan

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windo

    CriticalCVSS 10.0No exploitEPSS 7%

    oracle · jdkJan 31, 2013

  • CVE-2011-4684
    42Plan

    Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corne

    CriticalCVSS 10.0Proof of conceptEPSS 5%

    opera · opera browserDec 7, 2011

  • CVE-2012-3561
    42Plan

    Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a den

    CriticalCVSS 10.0No exploitEPSS 5%

    opera · opera browserJun 14, 2012

  • CVE-2007-6521
    42Plan

    Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.

    CriticalCVSS 10.0No exploitEPSS 5%

    opera · opera browserDec 24, 2007

  • CVE-2008-4293
    41Plan

    Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial

    CriticalCVSS 10.0No exploitEPSS 4%

    opera · operaSep 27, 2008

  • CVE-2008-3079
    41Plan

    Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · operaJul 8, 2008

  • CVE-2009-0916
    41Plan

    Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserMar 16, 2009

  • CVE-2009-4072
    41Plan

    Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserNov 24, 2009

  • CVE-2010-2421
    41Plan

    Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "hi

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserJun 22, 2010

  • CVE-2005-3059
    41Plan

    Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserSep 26, 2005

  • CVE-2012-4145
    41Plan

    Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserAug 6, 2012

  • CVE-2011-2610
    41Plan

    Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserJul 1, 2011

  • CVE-2010-4581
    41Plan

    Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserDec 21, 2010

  • CVE-2010-4586
    41Plan

    The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, po

    CriticalCVSS 10.0No exploitEPSS 2%

    opera · opera browserDec 21, 2010

  • CVE-2011-4683
    41Plan

    Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."

    CriticalCVSS 10.0No exploitEPSS 1%

    opera · opera browserDec 7, 2011

  • CVE-2008-4292
    41Plan

    Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vect

    CriticalCVSS 10.0No exploitEPSS 1%

    opera · opera browserSep 27, 2008

  • CVE-2013-3211
    41Plan

    Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."

    CriticalCVSS 10.0No exploitEPSS 1%

    opera · opera browserApr 19, 2013

  • CVE-2011-3389
    40Plan

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op

    MediumCVSS 4.3WeaponizedEPSS 73%

    google · chromeSep 6, 2011

  • CVE-2008-4696
    40Plan

    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 4.3WeaponizedEPSS 45%

    opera · operaOct 23, 2008

  • CVE-2007-0126
    40Plan

    Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index b

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    opera · opera browserJan 8, 2007