Approved changes feed: RSS · Atom
cpe:2.3:a:opera:opera:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Opera (59f0a105-cac9-5c1f-b0fb-85549d53b66c) |
|---|---|
| Product | Opera (04934513-2c84-5dd7-999a-3f3bfba8c6c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-6159 |
vulnerable | 2026-06-08 05:26:44.616186 |
Details available
URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not performed. This could allow users to be socially engineered to run an XSS attack against themselves. This vulnerability affects Opera for Android versions below 61.0.3076.56532.
Published: 2020-12-23T15:08:58.000Z
Updated: 2024-08-04T08:55:21.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19788 |
vulnerable | 2026-06-08 05:13:23.700060 |
Details available
Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make forced redirections without any user interaction from a third-party context.
Published: 2019-12-18T21:31:10.000Z
Updated: 2024-08-05T02:25:12.685Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.