Opera kayıtları
Opera üreticisine ait 311 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 3 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 3 · %1
- Pre-auth RCE
- 57
- Düzeltme kaydı olan
- %1,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-20 Improper Input Validation30
- CWE-264 Permissions, Privileges, and Access Controls28
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')28
- CWE-399 Resource Management Errors26
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor25
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer14
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
311 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
60Bu hafta | CVE-2015-4000Silahlaştırılmış | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_Eopenssl · openssl · CWE-310 | Düşük3,7 | %99,820 May 2015 |
46Planlayın | CVE-2008-5178Kavram kanıtı | Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.opera · opera · CWE-119 | Kritik9,3 | %31,520 Kas 2008 |
46Planlayın | CVE-2010-1349Kavram kanıtı | Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trigopera · opera browser · CWE-189 | Kritik10,0 | %19,712 Nis 2010 |
44Planlayın | CVE-2011-2628Kavram kanıtı | Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial opera · opera browser · CWE-20 | Kritik10,0 | %13,61 Tem 2011 |
43Planlayın | CVE-2007-5476İstismar yok | Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Sevadobe · flash player | Kritik10,0 | %9,017 Eki 2007 |
42Planlayın | CVE-2013-1489İstismar yok | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windooracle · jdk | Kritik10,0 | %7,631 Oca 2013 |
42Planlayın | CVE-2011-4684Kavram kanıtı | Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corneopera · opera browser · CWE-310 | Kritik10,0 | %5,47 Ara 2011 |
42Planlayın | CVE-2012-3561İstismar yok | Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denopera · opera browser · CWE-119 | Kritik10,0 | %5,114 Haz 2012 |
42Planlayın | CVE-2007-6521İstismar yok | Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.opera · opera browser · CWE-310 | Kritik10,0 | %5,024 Ara 2007 |
41Planlayın | CVE-2008-4293İstismar yok | Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial opera · opera | Kritik10,0 | %4,527 Eyl 2008 |
41Planlayın | CVE-2008-3079İstismar yok | Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.opera · opera | Kritik10,0 | %2,98 Tem 2008 |
41Planlayın | CVE-2009-0916İstismar yok | Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."opera · opera browser | Kritik10,0 | %2,616 Mar 2009 |
41Planlayın | CVE-2009-4072İstismar yok | Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."opera · opera browser | Kritik10,0 | %2,324 Kas 2009 |
41Planlayın | CVE-2010-2421İstismar yok | Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "hiopera · opera browser | Kritik10,0 | %2,222 Haz 2010 |
41Planlayın | CVE-2005-3059İstismar yok | Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling ofopera · opera browser | Kritik10,0 | %2,226 Eyl 2005 |
41Planlayın | CVE-2012-4145İstismar yok | Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact opera · opera browser | Kritik10,0 | %2,16 Ağu 2012 |
41Planlayın | CVE-2011-2610İstismar yok | Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."opera · opera browser | Kritik10,0 | %2,11 Tem 2011 |
41Planlayın | CVE-2010-4581İstismar yok | Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."opera · opera browser | Kritik10,0 | %2,021 Ara 2010 |
41Planlayın | CVE-2010-4586İstismar yok | The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, poopera · opera browser · CWE-16 | Kritik10,0 | %2,021 Ara 2010 |
41Planlayın | CVE-2011-4683İstismar yok | Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."opera · opera browser | Kritik10,0 | %1,97 Ara 2011 |
41Planlayın | CVE-2008-4292İstismar yok | Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectopera · opera browser · CWE-255 | Kritik10,0 | %1,927 Eyl 2008 |
41Planlayın | CVE-2013-3211İstismar yok | Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."opera · opera browser | Kritik10,0 | %1,719 Nis 2013 |
40Planlayın | CVE-2011-3389Silahlaştırılmış | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opgoogle · chrome · CWE-326 | Orta4,3 | %73,36 Eyl 2011 |
40Planlayın | CVE-2008-4696Silahlaştırılmış | Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML viopera · opera · CWE-79 | Orta4,3 | %45,723 Eki 2008 |
40Planlayın | CVE-2007-0126Kavram kanıtı | Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bopera · opera browser · CWE-119 | Kritik9,3 | %11,38 Oca 2007 |
- CVE-2015-400060Bu hafta
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_E
DüşükCVSS 3,7SilahlaştırılmışEPSS %99openssl · openssl20 May 2015
- CVE-2008-517846Planlayın
Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.
KritikCVSS 9,3Kavram kanıtıEPSS %31opera · opera20 Kas 2008
- CVE-2010-134946Planlayın
Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which trig
KritikCVSS 10,0Kavram kanıtıEPSS %19opera · opera browser12 Nis 2010
- CVE-2011-262844Planlayın
Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial
KritikCVSS 10,0Kavram kanıtıEPSS %13opera · opera browser1 Tem 2011
- CVE-2007-547643Planlayın
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Sev
KritikCVSS 10,0İstismar yokEPSS %9adobe · flash player17 Eki 2007
- CVE-2013-148942Planlayın
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windo
KritikCVSS 10,0İstismar yokEPSS %7oracle · jdk31 Oca 2013
- CVE-2011-468442Planlayın
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corne
KritikCVSS 10,0Kavram kanıtıEPSS %5opera · opera browser7 Ara 2011
- CVE-2012-356142Planlayın
Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a den
KritikCVSS 10,0İstismar yokEPSS %5opera · opera browser14 Haz 2012
- CVE-2007-652142Planlayın
Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
KritikCVSS 10,0İstismar yokEPSS %5opera · opera browser24 Ara 2007
- CVE-2008-429341Planlayın
Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial
KritikCVSS 10,0İstismar yokEPSS %4opera · opera27 Eyl 2008
- CVE-2008-307941Planlayın
Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors.
KritikCVSS 10,0İstismar yokEPSS %2opera · opera8 Tem 2008
- CVE-2009-091641Planlayın
Unspecified vulnerability in Opera before 9.64 has unknown impact and attack vectors, related to a "moderately severe issue."
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser16 Mar 2009
- CVE-2009-407241Planlayın
Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser24 Kas 2009
- CVE-2010-242141Planlayın
Multiple unspecified vulnerabilities in Opera before 10.54 have unknown impact and attack vectors related to (1) "extremely severe," (2) "hi
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser22 Haz 2010
- CVE-2005-305941Planlayın
Multiple unspecified vulnerabilities in Opera 8.50 on Linux and Windows have unknown impact and attack vectors, related to (1) " handling of
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser26 Eyl 2005
- CVE-2012-414541Planlayın
Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser6 Ağu 2012
- CVE-2011-261041Planlayın
Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser1 Tem 2011
- CVE-2010-458141Planlayın
Unspecified vulnerability in Opera before 11.00 has unknown impact and attack vectors, related to "a high severity issue."
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser21 Ara 2010
- CVE-2010-458641Planlayın
The default configuration of Opera before 11.00 enables WebSockets functionality, which has unspecified impact and remote attack vectors, po
KritikCVSS 10,0İstismar yokEPSS %2opera · opera browser21 Ara 2010
- CVE-2011-468341Planlayın
Unspecified vulnerability in Opera before 11.60 has unknown impact and attack vectors, related to a "moderately severe issue."
KritikCVSS 10,0İstismar yokEPSS %1opera · opera browser7 Ara 2011
- CVE-2008-429241Planlayın
Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vect
KritikCVSS 10,0İstismar yokEPSS %1opera · opera browser27 Eyl 2008
- CVE-2013-321141Planlayın
Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue."
KritikCVSS 10,0İstismar yokEPSS %1opera · opera browser19 Nis 2013
- CVE-2011-338940Planlayın
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Op
OrtaCVSS 4,3SilahlaştırılmışEPSS %73google · chrome6 Eyl 2011
- CVE-2008-469640Planlayın
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML vi
OrtaCVSS 4,3SilahlaştırılmışEPSS %45opera · opera23 Eki 2008
- CVE-2007-012640Planlayın
Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index b
KritikCVSS 9,3Kavram kanıtıEPSS %11opera · opera browser8 Oca 2007