[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq2SJKD1c_jhUtVbH_qwKDL2NMH4Vn5DQzzecZ6VL2w4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":120,"topProductsByCves":121,"seoMetadata":130,"meta":139},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":55},23157,"opera",8,311,0,1196,"2022-12-26","o",[16,22,27,32,37,43,47,51],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},123546,"opera_browser",977,285,"2019-03-21",{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},123545,75,19,"2020-12-23",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},123548,"opera_mini",108,4,{"id":33,"product_name":34,"version_count":9,"cve_count":35,"kev_count":11,"last_cve_update":36},123544,"mini",2,"2019-10-29",{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},123550,"opera_touch",25,1,"2020-11-13",{"id":44,"product_name":45,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":46},123547,"opera_mail","2016-06-29",{"id":48,"product_name":49,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":50},123549,"opera_mobile","2012-12-26",{"id":52,"product_name":53,"version_count":41,"cve_count":11,"kev_count":11,"last_cve_update":54},123543,"brew_browser",null,"Opera is a technology vendor with 8 tracked products and 311 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[57,66,74,79,86,93,99,105,110,115],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":64,"epssScore":65},"CVE-2015-4000","The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.","2015-05-21",3.7,"v3.0","Low",false,0.9986,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":64,"epssScore":73},"CVE-2011-3389","The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.","2011-09-06",4.3,"v2","Medium",0.73327,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":64,"epssScore":78},"CVE-2008-4696","Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the \"optional fragment\"), which is not properly escaped before storage in the History Search database (aka md.dat).","2008-10-23",0.45729,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":71,"severity":84,"isKev":64,"epssScore":85},"CVE-2008-5178","Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:\u002F\u002F URI.  NOTE: this might overlap CVE-2008-5680.","2008-11-20",9.3,"Critical",0.31509,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":64,"epssScore":92},"CVE-2005-0233","The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.","2005-02-08",7.5,"High",0.20398,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":71,"severity":84,"isKev":64,"epssScore":98},"CVE-2010-1349","Integer overflow in Opera 10.10 through 10.50 allows remote attackers to execute arbitrary code via a large Content-Length value, which triggers a heap overflow.","2010-04-12",10,0.19792,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":71,"severity":72,"isKev":64,"epssScore":104},"CVE-2007-1377","AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.","2007-03-10",5,0.1809,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":64,"epssScore":109},"CVE-2003-0870","Heap-based buffer overflow in Opera 7.11 and 7.20 allows remote attackers to execute arbitrary code via an HREF with a large number of escaped characters in the server name.","2003-11-17",0.15429,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":90,"cvssVersion":71,"severity":91,"isKev":64,"epssScore":114},"CVE-2003-1387","Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.","2003-12-31",0.14673,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":103,"cvssVersion":71,"severity":72,"isKev":64,"epssScore":119},"CVE-2006-3199","Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation.","2006-06-23",0.14598,[],[122,123,124,125,126,127,128,129],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":8,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":33,"product_name":34,"version_count":9,"cve_count":35,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":41,"kev_count":11,"last_cve_update":42},{"id":44,"product_name":45,"version_count":11,"cve_count":41,"kev_count":11,"last_cve_update":46},{"id":48,"product_name":49,"version_count":35,"cve_count":41,"kev_count":11,"last_cve_update":50},{"id":52,"product_name":53,"version_count":41,"cve_count":11,"kev_count":11,"last_cve_update":54},{"title":131,"metaDescription":132,"keywords":133,"structuredData":134},"Opera - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Opera covering 8 products with 311 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Opera vulnerabilities, Opera security, Opera CVE, Opera threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":135,"@type":136,"name":137,"description":132,"url":138},"https:\u002F\u002Fschema.org","Organization","Opera","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopera",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":140,"apiVersion":141},"2026-10-16T23:22:18.752Z","3.0"]