CVSS: 7.5EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6461 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6461
02 Jan 2013 — The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service. La funcionalidad de validación de certificado X.509 en la implementación de https en Opera antes de v12.10 permite a atacantes remotos provocar una falsa indicación de comprobación exitosa causando un fallo de un servicio de control simple. Multiple vulnerabilities hav... • http://www.opera.com/docs/changelogs/unified/1210 • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 8%CPEs: 168EXPL: 0CVE-2012-6468 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6468
02 Jan 2013 — Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response. Un desbordamiento de búfer basado en memoria dinámica ('heap') en Opera antes de v12.11 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (por corrupción de la memoria) a través de una respuesta HTTP demasiado larga. Multiple vulnerabilities have been found in Opera, the worst of which may al... • http://www.opera.com/docs/changelogs/unified/1211 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.1EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6464 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6464
02 Jan 2013 — Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript code that overrides methods of unspecified native objects in documents that have different origins. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Opera antes de v12.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través código JavaScript que reemplaza los métodos de objetos nativos no especificados en los do... • http://www.opera.com/docs/changelogs/unified/1210 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 169EXPL: 0CVE-2012-6471 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6471
02 Jan 2013 — Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests. Opera antes de v12.12 permite a atacantes remotos falsificar el campo de la dirección a través de una alta tasa de peticiones HTTP. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://www.opera.com/docs/changelogs/unified/1212 •
CVSS: 6.1EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6463 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6463
02 Jan 2013 — Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Opera antes de v12.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados que involucran una secuencia de carga de documentos y carga de URLs del tipo 'data:' .... • http://www.opera.com/docs/changelogs/unified/1210 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 165EXPL: 0CVE-2012-6460
https://notcve.org/view.php?id=CVE-2012-6460
02 Jan 2013 — Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site. Opera v11.67 y anteriores y v12.x antes de v12.02, permite a atacantes remotos provocar el truncamiento de un diálogo, y posiblemente provocar la descarga y ejecución de programas de su elección, a través de un sitio web diseñado para tal fin. • http://www.opera.com/docs/changelogs/unified/1202 •
CVSS: 4.7EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6467 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6467
02 Jan 2013 — Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012. Opera antes de v12.10 sigue accesos directos de Internet que son referenciados por elementos (1) IMG o (2) otro elemento en línea ('inline'), lo que hace que sea más fácil para los atacantes remotos a la hora de realizar ataques de phishing a través de un si... • http://www.opera.com/docs/changelogs/unified/1210 •
CVSS: 5.3EPSS: 0%CPEs: 168EXPL: 0CVE-2012-6469 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6469
02 Jan 2013 — Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page. Opera antes de v12.11 permite a atacantes remotos determinat la existencia de archivos locales de su elección a través de vectores que implican secuencias de comandos web en una página de error. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://www.opera.com/docs/changelogs/unified/1211 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.1EPSS: 0%CPEs: 170EXPL: 0CVE-2012-6472 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6472
02 Jan 2013 — Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file. Opera antes de v12.12 en UNIX utiliza permisos débiles para el directorio de perfiles, lo que permite a usuarios locales obtener información sensible mediante (1) la lectura de un archivo de caché, (2) el archivo de contra... • http://www.opera.com/docs/changelogs/unified/1212 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.8EPSS: 4%CPEs: 167EXPL: 0CVE-2012-6465 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6465
02 Jan 2013 — Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG image. Opera antes de v12.10 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (por caída de la aplicación) a través de una imagen SVG mal formada. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://www.opera.com/docs/changelogs/unified/1210 • CWE-94: Improper Control of Generation of Code ('Code Injection') •