Overview 26 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
26matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
26
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
26
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
26
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 4 / year
20034
Not applicable4
High2
Medium2
not blocked4
Working exploit published4
20042
Not applicable2
Medium1
Low1
not blocked2
Working exploit published2
20051
Not applicable1
Medium1
not blocked1
Working exploit published1
20063
Not applicable3
Medium3
not blocked3
Working exploit published3
20074
Not applicable4
High2
Medium2
not blocked4
Working exploit published4
20084
Not applicable4
High3
Medium1
not blocked4
Working exploit published4
20092
Not applicable2
Medium2
not blocked2
Working exploit published2
20101
Not applicable1
High1
not blocked1
Working exploit published1
20113
Not applicable3
High2
Medium1
not blocked3
Working exploit published3
20120
20132
Not applicable2
High2
not blocked2
Working exploit published2
20032004200520062007200820092010201120122013
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2013-1638 | High | 2013-02-08 | Not applicable | Working exploit published | Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. |
| CVE-2012-6470 | High | 2013-01-02 | Not applicable | Working exploit published | Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image. |
| CVE-2011-4684 | High | 2011-12-07 | Not applicable | Working exploit published | Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vectors related to "corner cases." |
| CVE-2011-2641 | Medium | 2011-07-01 | Not applicable | Working exploit published | Opera 11.11 allows remote attackers to cause a denial of service (application crash) by setting the FACE attribute of a FONT element within an IFRAME element after changing the SRC attribute of this IFRAME element to an about:blank value. |
| CVE-2011-2628 | High | 2011-07-01 | Not applicable | Working exploit published | Opera before 11.11 does not properly implement FRAMESET elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to page unload. |
| CVE-2010-1349 | High | 2010-04-12 | Not applicable | Working exploit published | Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow. |
| CVE-2008-7245 | Medium | 2009-09-18 | Not applicable | Working exploit published | Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821. |
| CVE-2009-1234 | Medium | 2009-04-02 | Not applicable | Working exploit published | Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 9.52 is also affected. |
| CVE-2008-5680 | High | 2008-12-19 | Not applicable | Working exploit published | Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178. |
| CVE-2008-4725 | Medium | 2008-10-23 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60. |
| CVE-2008-4694 | High | 2008-10-23 | Not applicable | Working exploit published | Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a crafted URL. |
| CVE-2008-1762 | High | 2008-04-12 | Not applicable | Working exploit published | Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption. |
| CVE-2007-2274 | High | 2007-04-25 | Not applicable | Working exploit published | The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and application crash) via a malformed torrent file. NOTE: the original disclosure refers to this as a memory leak, but it is not certain. |
| CVE-2007-1563 | Medium | 2007-03-21 | Not applicable | Working exploit published | The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response. |
| CVE-2007-1377 | Medium | 2007-03-10 | Not applicable | Working exploit published | AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236. |
| CVE-2007-0126 | High | 2007-01-09 | Not applicable | Working exploit published | Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an invalid number of index bytes in the Define Huffman Table (DHT) marker. |
| CVE-2006-3353 | Medium | 2006-07-06 | Not applicable | Working exploit published | Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that accesses certain style sheets properties. |
| CVE-2006-3199 | Medium | 2006-06-23 | Not applicable | Working exploit published | Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation. |
| CVE-2006-1834 | Medium | 2006-04-19 | Not applicable | Working exploit published | Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. NOTE: a sign extension problem makes the attack easier with shorter strings. |
| CVE-2005-4718 | Medium | 2005-12-31 | Not applicable | Working exploit published | Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file with a "content: url(0);" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and (2) a BGSOUND element with a "margin:-99;" STYLE attribute. |
| CVE-2004-2491 | Low | 2004-12-31 | Not applicable | Working exploit published | A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks. |
| CVE-2004-1491 | Medium | 2004-12-31 | Not applicable | Working exploit published | Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry. |
| CVE-2003-1397 | Medium | 2003-12-31 | Not applicable | Working exploit published | The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method. |
| CVE-2003-1396 | Medium | 2003-12-31 | Not applicable | Working exploit published | Heap-based buffer overflow in Opera 6.05 through 7.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a filename with a long extension. |
| CVE-2003-1387 | High | 2003-12-31 | Not applicable | Working exploit published | Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username. |
| CVE-2003-0870 | High | 2003-11-17 | Not applicable | Working exploit published | Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name. |