CVSS: 9.1EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6462 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6462
02 Jan 2013 — Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request. Opera antes de v12.10 no implementa correctamente la especificición de compartición de recursos de origen cruzado (Cross-Origin Resource Sharing - CORS), la cual permite a atacantes remotos evitar restricciones de acceso a contenidos de páginas a través de una petición hecha a mano. Multiple vulnerabilities ha... • http://www.opera.com/docs/changelogs/unified/1210 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 167EXPL: 0CVE-2012-6463 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6463
02 Jan 2013 — Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en Opera antes de v12.10 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados que involucran una secuencia de carga de documentos y carga de URLs del tipo 'data:' .... • http://www.opera.com/docs/changelogs/unified/1210 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 169EXPL: 0CVE-2012-6471 – Gentoo Linux Security Advisory 201406-14
https://notcve.org/view.php?id=CVE-2012-6471
02 Jan 2013 — Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests. Opera antes de v12.12 permite a atacantes remotos falsificar el campo de la dirección a través de una alta tasa de peticiones HTTP. Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code. Versions less than 12.13_p1734 are affected. • http://www.opera.com/docs/changelogs/unified/1212 •
CVSS: 7.5EPSS: 0%CPEs: 124EXPL: 0CVE-2012-4010
https://notcve.org/view.php?id=CVE-2012-4010
30 Aug 2012 — Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660. Opera anterior a v11.60 permite a atacantes remotos suplantar la barra de direcciones a través de caracteres homógrafos no especificados, una vulnerabilidad diferente a CVE-2010-2660. • http://jvn.jp/en/jp/JVN69880570/index.html •
CVSS: 6.8EPSS: 0%CPEs: 48EXPL: 0CVE-2012-4143
https://notcve.org/view.php?id=CVE-2012-4143
06 Aug 2012 — Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924. Opera anteriores a v12.01 en Windows y UNIX, y anteriores a v11.66 y v12.x anteriores a v12.01 en Mac OS X, permite a atacantes remotos asistidos por usuarios, a engañar a usuarios para que descarguen y ejecuten ficheros a través ... • http://www.opera.com/docs/changelogs/mac/1166 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 0%CPEs: 48EXPL: 0CVE-2012-4145
https://notcve.org/view.php?id=CVE-2012-4145
06 Aug 2012 — Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact and attack vectors, related to a "low severity issue." Vulnerabilidad no especificada en Opera anteriores a v12.01 en Windows y UNIX, y anteriores a v11.66 y 12.x anteriores a v12.01 en Mac OS X, tiene un impacto y vectores de ataque desconocidos, relacionado con una característica "low severity issue." • http://www.opera.com/docs/changelogs/mac/1166 •
CVSS: 6.1EPSS: 0%CPEs: 48EXPL: 0CVE-2012-4142
https://notcve.org/view.php?id=CVE-2012-4142
06 Aug 2012 — Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document. Opera anterior a v12,01 en Windows y UNIX, y anterior a v11.66, v12.x y 12.01 en Mac OS X, hace caso omiso de algunos personajes en los documentos HTML en circunstancias no especificadas, lo que hace que sea más fácil para los atacante... • http://www.opera.com/docs/changelogs/mac/1166 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 160EXPL: 0CVE-2012-4146
https://notcve.org/view.php?id=CVE-2012-4146
06 Aug 2012 — Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site, as demonstrated by the Lenovo "Shop now" page. El navegador Opera anterior a v12.01, permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de un sitio web diseñado, como lo demuestra el Lenovo "Comprar ahora" de la página. • http://www.opera.com/docs/changelogs/mac/1201 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.1EPSS: 1%CPEs: 48EXPL: 0CVE-2012-4144
https://notcve.org/view.php?id=CVE-2012-4144
06 Aug 2012 — Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document. El navegador Opera anterior a v12,01 en Windows y UNIX, y anterior a v11.66, v12.x y v12.01 en Mac OS X, no se trata correctamente los caracteres de escape de los elementos DOM, lo que hace que sea más fácil para los atacantes remotos e... • http://www.opera.com/docs/changelogs/mac/1166 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.6EPSS: 5%CPEs: 127EXPL: 0CVE-2012-3555
https://notcve.org/view.php?id=CVE-2012-3555
14 Jun 2012 — Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue. Opera antes de v11.65 no garantiza que las secuencias del teclado estén asociados con una ventana visible, lo que hace que sea más fácil para los atacantes remotos (con cierta ayuda del usuario local) a la hora de... • http://www.opera.com/docs/changelogs/mac/1165 •