<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Opera Norway AS — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/opera" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Opera Norway AS (opera).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/opera.png</url>
      <title>Opera Norway AS — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-12501 · 7.5 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2025-12501</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-12501</guid>
      <description>Integer overflow in GameMaker IDE below 2024.14.0 version can lead to can lead to application crashes through denial-of-service attacks (DoS). GameMaker users who use the network_create_server() function in their projects are urged to update and reco…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 31 Oct 2025 14:10:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2020-6158 · 4.7 MEDIUM 🌩️</title>
      <link>https://vulnogram.org/CVE-2020-6158</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2020-6158</guid>
      <description>Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate a…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 21 Feb 2025 13:30:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2021-23253</title>
      <link>https://vulnogram.org/CVE-2021-23253</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2021-23253</guid>
      <description>Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see t…</description>
      <pubDate>Mon, 11 Jan 2021 15:43:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2020-6159</title>
      <link>https://vulnogram.org/CVE-2020-6159</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2020-6159</guid>
      <description>URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not performed. This could allow users to be socially engineere…</description>
      <pubDate>Wed, 23 Dec 2020 15:08:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2020-6157</title>
      <link>https://vulnogram.org/CVE-2020-6157</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2020-6157</guid>
      <description>Opera Touch for iOS before version 2.4.5 is vulnerable to an address bar spoofing attack. The vulnerability allows a malicious page to trick the browser into showing an address of a different page. This may allow the malicious page to impersonate ano…</description>
      <pubDate>Fri, 13 Nov 2020 19:26:16 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2019-19788</title>
      <link>https://vulnogram.org/CVE-2019-19788</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2019-19788</guid>
      <description>Opera for Android before 54.0.2669.49432 is vulnerable to a sandboxed cross-origin iframe bypass attack. By using a service working inside a sandboxed iframe it is possible to bypass the normal sandboxing attributes. This allows an attacker to make f…</description>
      <pubDate>Wed, 18 Dec 2019 21:31:10 GMT</pubDate>
    </item>
  </channel>
</rss>
