CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 2CVE-2002-2312 – Opera 6.0.1 / Microsoft Internet Explorer 5/6 - JavaScript Modifier Keypress Event Subversion
https://notcve.org/view.php?id=CVE-2002-2312
Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. • https://www.exploit-db.com/exploits/21636 http://online.securityfocus.com/archive/1/283866 http://online.securityfocus.com/archive/1/284096 http://www.securityfocus.com/bid/5290 •
CVSS: 4.3EPSS: 1%CPEs: 2EXPL: 0CVE-2002-2414
https://notcve.org/view.php?id=CVE-2002-2414
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash). • http://marc.info/?l=full-disclosure&m=103783186608438&w=2 http://www.iss.net/security_center/static/10673.php http://www.securityfocus.com/bid/6218 •