) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:opera:opera_browser:6.0:tp2
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2006-6955 |
Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee tags, a related issue to CVE-2006-2723. Published: January 29, 2007; 11:28:00 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2007-0127 |
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be referenced during the virtual function call. Published: January 08, 2007; 9:28:00 PM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2006-1834 |
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings. Published: April 19, 2006; 12:06:00 PM -0400 |
V3.x:(not available) V2.0: 5.1 MEDIUM |
| CVE-2005-3006 |
The mail client in Opera before 8.50 opens attached files from the user's cache directory without warning the user, which might allow remote attackers to inject arbitrary web script and spoof attachment filenames. Published: September 21, 2005; 4:03:00 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |