CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 21/04/2017 |
| CVE-2016-6908 | 中6.1 | Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.105088 for Android, due to mishandling of several unicode characters such as U+FE70, U+0622, U+0623 etc and how they are rendered combined with (first strong character) such as an IP address or alphabet | 26/01/2017 |
| CVE-2014-1870 | 中4.3 | Opera before 19 on Mac OS X allows user-assisted remote attackers to spoof the address bar via vectors involving a drag-and-drop operation. | 06/02/2014 |
| CVE-2014-0815 | 中4.3 | The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies. | 06/02/2014 |
| CVE-2013-4705 | 中4.3 | Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding. | 13/09/2013 |
| CVE-2013-3211 | 緊急10.0 | Unspecified vulnerability in Opera before 12.15 has unknown impact and attack vectors, related to a "moderately severe issue." | 19/04/2013 |
| CVE-2013-3210 | 中5.0 | Opera before 12.15 does not properly block top-level domains in Set-Cookie headers, which allows remote attackers to obtain sensitive information by leveraging control of a different web site in the same top-level domain. | 19/04/2013 |
| CVE-2013-1618 | 中4.0 | The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted | 08/02/2013 |
| CVE-2013-1639 | 中6.8 | Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection mechanism via a crafted web site that triggers a CORS request. | 08/02/2013 |
| CVE-2013-1638 | 緊急9.3 | Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. | 08/02/2013 |
| CVE-2013-1637 | 緊急9.3 | Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events. | 08/02/2013 |
| CVE-2012-6472 | 中4.6 | Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by reading a (1) cache file, (2) password file, or (3) configuration file, or (4) possibly gain privileges by modifying or overwriting a configuration file. | 02/01/2013 |
| CVE-2012-6471 | 中5.0 | Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests. | 02/01/2013 |
| CVE-2012-6470 | 緊急9.3 | Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a malformed image. | 02/01/2013 |
| CVE-2012-6469 | 中5.0 | Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page. | 02/01/2013 |
| CVE-2012-6468 | 緊急9.3 | Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long HTTP response. | 02/01/2013 |
| CVE-2012-6467 | 中4.3 | Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site, as exploited in the wild in November 2012. | 02/01/2013 |
| CVE-2012-6466 | 中5.0 | Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensitive information from process memory by using a crafted image as the fill pattern for a canvas. | 02/01/2013 |