Opera Software ASA

• Advisory: Printing issue can allow data leaks to other system users, or allow them to corrupt data
  UNIX
• Advisory: Carefully timed reloads and redirects can spoof the address field
  All desktop versions
• Advisory: Web page dialogs can be used to to display the wrong address in the address field
  All desktop versions
• Advisory: History.state can leak the state data from cross domain pages
  All desktop versions
• Advisory: Overlapping content can trick users into executing downloads
  All desktop versions
• Advisory: Small windows can be used to trick users into executing downloads
  All desktop versions
• Advisory: Web page content may overlap the address field
  Mac OS X
• Script events can be used to reveal the presence of local files
  All desktop versions
• Manipulation of framed content can allow cross-site scripting
  All desktop versions
• Content-sniffing on non-HTTP ports can allow cross-site scripting
  All desktop versions
• Pages can set cookies and communicate cross-site for some top level domains
  Linux, FreeBSD, and Solaris
• A weakness in the SSL v3.0 and TLS 1.0 specifications can allow eavesdropping attacks against some applications
  All desktop versions
• JavaScript "in" operator allows leakage of cross-domain information
  All desktop versions
• Manipulating fonts in SVG can allow execution of arbitrary code
  All desktop versions
• JavaScript errors can scrape limited information from unrelated sites
  All desktop versions
• Advisory: Tab characters can be used to bypass HTML sanitization
  All desktop versions
• Advisory: Unsecured web content may appear to be secure or trusted through Extended Validation
  All desktop versions
• Advisory: TLS protocol vulnerable to Man In The Middle attack
  All supported platforms
• Advisory: Multiple asynchronous document modifications can be used to execute arbitrary code
  All desktop versions
• Advisory: Cross-domain data theft with CSS load
  All supported platforms

Or, go back to browse the articles.