← Back

Opera

opera

308 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Opera
opera
Opera Mini
opera_mini
Mini
mini
Opera Mobile
opera_mobile
Opera Mail
opera_mail
Opera Touch
opera_touch

CVEs (308)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Opera
1Opera Browser
Apr 16, 2026
Feb 11, 2004
N/A· v4
N/A· v3
2.6 LOW· v2
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File...Show more
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."Show less
1Opera
1Opera
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Opera 6.0 through 7.0 with automatic redirection disabled allows remote attackers to inject arbitrary web script or HTML via the HTTP Location header.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.
1Opera
1Opera Browser
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.
1Opera
1Opera Browser
Apr 16, 2026
Nov 17, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.