CVSS: 10.0EPSS: 0%CPEs: 173EXPL: 0CVE-2013-3211
https://notcve.org/view.php?id=CVE-2013-3211
19 Apr 2013 — Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue." Vulnerabilidad no especificada en Opera antes de v12.15 tiene un impacto y vectores de ataque desconocidos, relacionado con un "problema de moderada severidad". • http://www.opera.com/docs/changelogs/unified/1215 •
CVSS: 5.3EPSS: 0%CPEs: 176EXPL: 0CVE-2013-3210
https://notcve.org/view.php?id=CVE-2013-3210
19 Apr 2013 — Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain. Opera antes de v12.15 no bloquea adecuadamente dominios de nivel superior en los encabezados Set-Cookie, lo que permite a atacantes remotos obtener información sensible mediante el aprovechamiento de control de un sitio web diferente en el mismo dominio de nivel superior. • http://www.opera.com/docs/changelogs/unified/1215 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.9EPSS: 0%CPEs: 8EXPL: 0CVE-2013-1618 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2013-1618
08 Feb 2013 — The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169. La implementación de TLS en Opera antes de v12.13 no se tienen debidamente en cuenta tiempos de canal lateral, ataques a una operación de comprobació... • http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html • CWE-310: Cryptographic Issues •
CVSS: 9.8EPSS: 30%CPEs: 8EXPL: 1CVE-2013-1638 – Opera SVG - Use-After-Free
https://notcve.org/view.php?id=CVE-2013-1638
08 Feb 2013 — Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. Opera antes de v12.13 permite a atacantes remotos ejecutar código a través de clipPaths diseñado en un documento SVG. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • https://www.exploit-db.com/exploits/24448 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.8EPSS: 5%CPEs: 8EXPL: 0CVE-2013-1637 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2013-1637
08 Feb 2013 — Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events. Opera antes de 12.13 permite a atacantes remotos ejecutar código arbitrario a través de vectores relacionados con eventos DOM. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0CVE-2013-1639 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2013-1639
08 Feb 2013 — Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request. Opera anterior a v12.13 no envía las peticiones CORS del tipo "preflight" en todos los casos que se requiere, lo que permite a atacantes remotos evitar el mecanismo de protección CSRF a través de un un sitio web manipulado que provoca una petición CORS. Multiple vulnerabilities have been found in Opera, the wo... • http://lists.opensuse.org/opensuse-updates/2013-02/msg00038.html • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 10.0EPSS: 21%CPEs: 8EXPL: 0CVE-2013-1489 – 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)
https://notcve.org/view.php?id=CVE-2013-1489
31 Jan 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability. Una Vulnerabilidad no especificada en el componente Java Runtime Environment (... • http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53 •
CVSS: 9.8EPSS: 4%CPEs: 167EXPL: 0CVE-2012-6465 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6465
02 Jan 2013 — Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG image. Opera antes de v12.10 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (por caída de la aplicación) a través de una imagen SVG mal formada. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://www.opera.com/docs/changelogs/unified/1210 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 165EXPL: 0CVE-2012-6460
https://notcve.org/view.php?id=CVE-2012-6460
02 Jan 2013 — Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site. Opera v11.67 y anteriores y v12.x antes de v12.02, permite a atacantes remotos provocar el truncamiento de un diálogo, y posiblemente provocar la descarga y ejecución de programas de su elección, a través de un sitio web diseñado para tal fin. • http://www.opera.com/docs/changelogs/unified/1202 •
CVSS: 9.8EPSS: 8%CPEs: 168EXPL: 0CVE-2012-6468 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6468
02 Jan 2013 — Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response. Un desbordamiento de búfer basado en memoria dinámica ('heap') en Opera antes de v12.11 permite a atacantes remotos ejecutar código de su elección o causar una denegación de servicio (por corrupción de la memoria) a través de una respuesta HTTP demasiado larga. Multiple vulnerabilities have been found in Opera, the worst of which may al... • http://www.opera.com/docs/changelogs/unified/1211 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •