Skip to content
OpenAdvisories

Archive

2 January 2013

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive informati…

  • Unscored —

    Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger …

  • Unscored —
    CVE-2012-6470 Public exploit

    Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary…

  • Unscored —

    Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) v…

  • Unscored —

    Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of…

  • Unscored —

    Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitiv…

  • Unscored —

    The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attacker…

  • Unscored —

    Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving we…

  • Unscored —

    Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows rem…

  • Unscored —

    Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtai…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, whi…

  • Unscored —

    Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests.

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script o…