Opera : Security Vulnerabilities, CVEs, Published In 2012 (XSS)
Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site.
Max CVSS
9.3
EPSS Score
0.48%
Published
2012-06-14
Updated
2012-06-15
Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary code via a crafted web site, related to a "hidden keyboard navigation" issue.
Max CVSS
7.6
EPSS Score
0.49%
Published
2012-06-14
Updated
2012-06-20
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in unspecified circumstances, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted document.
Max CVSS
4.3
EPSS Score
0.23%
Published
2012-08-06
Updated
2012-08-07
Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM elements, which makes it easier for remote attackers to bypass cross-site scripting (XSS) protection mechanisms via a crafted HTML document.
Max CVSS
4.3
EPSS Score
0.29%
Published
2012-08-06
Updated
2012-08-07
4 vulnerabilities found