The remote host is affected by the vulnerability described in GLSA-201406-14 (Opera: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Opera. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted web       page using Opera, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
      Furthermore, a remote attacker may be able to obtain sensitive       information, conduct Cross-Site Scripting (XSS) attacks, or bypass       security restrictions.
    A local attacker may be able to obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The version of Opera installed on the remote host is earlier than 12.13 and is, therefore, reportedly affected by the following vulnerabilities :

  - An error exists related to DOM manipulation that could     lead to application crashes or arbitrary code     execution. (1042)

  - A use-after-free error exists related to SVG 'clipPaths'     that could lead to memory corruption or arbitrary code     execution. (1043)

  - An error exists related to the TLS protocol, CBC mode     encryption and response time. An attacker could obtain     plaintext contents of encrypted traffic via timing     attacks. (1044)

  - The application could fail to make the proper 'pre-     flight' Cross-Origin Resource Sharing (CORS) requests.
    In some situations this error could aid an attacker in     cross-site request forgery (CSRF) attacks. (1045)

  - An unspecified, low severity issue exists that has an     unspecified impact.

リモートホストにインストールされている Opera のバージョンが 12.13 より前であるため、報告によれば、以下の脆弱性の影響を受けます：

  - An error exists related to DOM manipulation that could lead to application crashes or arbitrary code execution. (1042)

  - A use-after-free error exists related to SVG 'clipPaths' that could lead to memory corruption or arbitrary code execution. (1043)

  - TLS プロトコル、CBC モード暗号化、および応答時間に関連するエラーが存在します。An attacker could obtain plaintext contents of encrypted traffic via timing attacks. (1044)

  - The application could fail to make the proper 'pre-flight' Cross-Origin Resource Sharing (CORS) requests.
    In some situations this error could aid an attacker in cross-site request forgery (CSRF) attacks. (1045)

  - 明記されない重要度の低い問題が存在し、詳細不明な影響があります。

リモートホストが GLSA-201406-14 で説明されている脆弱性の影響を受けます（Opera：複数の脆弱性）

Opera に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

リモートの攻撃者がユーザーを誘導し、Opera を使用して特別に細工された web ページを開かせて、プロセスの権限で任意のコードを実行したり、サービス拒否状態にさせたりする恐れがあります。
 さらに、リモートの攻撃者は機密情報を取得、あるいはクロスサイトスクリプティング（XSS）攻撃を行ったり、セキュリティ制限をバイパスする可能性があります。
 ローカルの攻撃者が機密情報を取得する可能性があります。
 回避策：

現時点で、既知の回避策はありません。

远程主机受到 GLSA-201406-14 中所述漏洞的影响（Opera：多种漏洞）

已在 Opera 中发现多种漏洞。请检查下面引用的 CVE 标识符以了解详细信息。
 影响：

远程攻击者可引诱用户使用 Opera 打开特殊构建的网页，这可能导致以进程权限执行任意代码或拒绝服务情况。
 此外，远程攻击者可能获取敏感信息，执行跨站脚本 (XSS) 攻击或绕过安全限制。
 本地攻击者可能从中获取敏感信息。
 变通方案：

目前无任何已知的变通方案。

远程主机上安装的 Opera 版本低于 12.13，因此据报告受到以下漏洞的影响：

- 存在一个与 DOM 操纵有关的错误，可导致应用程序崩溃或执行任意代码。(1042)

- 存在一个与 SVG“clipPaths”有关的释放后使用错误，可导致内存损坏或执行任意代码。(1043)

- 存在一个与 TLS 协议、CBC 模式加密和响应时间有关的错误。攻击者可通过时序攻击获取加密流量的明文内容。(1044)

- 应用程序可能无法发出正确的“pre- flight”跨源资源共享 (CORS) 请求。
 在某些情况下，攻击者可利用此错误进行跨站请求伪造 (CSRF) 攻击。(1045)

- 存在一个不明的低危问题，影响不明。

遠端主機上安裝的 Opera 版本比 12.13 舊，因此，據報會受到下列弱點的影響：

- 存在一個與 DOM 操控相關的錯誤，可導致應用程式損毀或任意程式碼執行。(1042)

- 存在一個與 SVG 'clipPaths' 相關的釋放後使用錯誤，可導致記憶體損毀或任意程式碼執行。(1043)

- 存在一個與 TLS 通訊協定、CBC 模式加密和回應時間相關的錯誤。攻擊者可透過計時攻擊取得加密流量的純文字內容。(1044)

- 應用程式可能無法提出正確的 'pre- flight' 跨來源資源共用 (CORS) 要求。
 在某些情況下，此錯誤可在跨網站要求偽造 (CSRF) 攻擊中協助攻擊者。(1045)

- 存在一個不明的低嚴重性問題，具有不明影響。

遠端主機受到 GLSA-201406-14 中所述的弱點影響 (Opera：多個弱點)

在 Opera 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者開啟使用 Opera 的特製網頁，並可能藉此以處理程序的權限來執行任意程式碼，或引發拒絕服務情況。
 此外，遠端攻擊者可能會取得敏感資訊、發動跨網站指令碼 (XSS) 攻擊，或繞過安全性限制。
 本機攻擊者可能會取得敏感資訊。
 因應措施：

目前尚無已知的因應措施。

The remote host is running the Opera web browser. 

Versions of Opera earlier than 12.13 are potentially affected by the following vulnerabilities :

  - An error exists related to DOM manipulation that could lead to application crashes or arbitrary code execution. (1042)

  - An error exists related to SVG 'clipPaths' that could lead to memory corruption or arbitrary code execution. (1043)

  - The application could fail to make the proper 'pre-flight' Cross-Origin Resource Sharing (CORS) requests. In some situations this error could aid an attacker in cross-site request forgery (XSRF) attacks. (1045)

  - An unspecified, low severity issue exists that has an unspecified impact.

The remote host is running the Opera web browser.

Versions of Opera earlier than 12.13 are potentially affected by the following vulnerabilities :

  - An error exists related to DOM manipulation that could lead to application crashes or arbitrary code execution. (1042)

  - An error exists related to SVG 'clipPaths' that could lead to memory corruption or arbitrary code execution. (1043)

  - The application could fail to make the proper 'pre-flight' Cross-Origin Resource Sharing (CORS) requests. In some situations this error could aid an attacker in cross-site request forgery (XSRF) attacks. (1045)

  - An unspecified, low severity issue exists that has an unspecified impact.

ID	Name	Product	Family	Published	Updated	Severity
76065	GLSA-201406-14 : Opera: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	6/16/2014	1/6/2021	high
64363	Opera < 12.13 Multiple Vulnerabilities	Nessus	Windows	1/30/2013	11/15/2018	high
64363	Opera < 12.13 の複数の脆弱性	Nessus	Windows	1/30/2013	11/15/2018	high
76065	GLSA-201406-14：Opera：複数の脆弱性	Nessus	Gentoo Local Security Checks	6/16/2014	1/6/2021	high
76065	GLSA-201406-14：Opera：多种漏洞	Nessus	Gentoo Local Security Checks	6/16/2014	1/6/2021	high
64363	Opera < 12.13 多种漏洞	Nessus	Windows	1/30/2013	11/15/2018	high
64363	Opera < 12.13 多個弱點	Nessus	Windows	1/30/2013	11/15/2018	high
76065	GLSA-201406-14 : Opera：多個弱點	Nessus	Gentoo Local Security Checks	6/16/2014	1/6/2021	high
6680	Opera < 12.13 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	1/31/2013	3/6/2019	high
800848	Opera < 12.13 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	1/31/2013		high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high