Unity Firefox Extension

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-0958 Dec 26, 22:55 MEDIUM This Month

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Mozilla Unity Firefox Extension Ps Project Management Team

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-0960 Nov 24, 20:55 HIGH This Week

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Denial Of Service Mozilla Unity Firefox Extension Ps Project Management Team

NVD

CVSS 2.0

7.5

EPSS

2.3%

CVE-2012-0958

EPSS 0% CVSS 4.3

MEDIUM This Month

Information Disclosure Mozilla Unity Firefox Extension +1

NVD

CVE-2012-0960

EPSS 2% CVSS 7.5

HIGH This Week

RCE Denial Of Service Mozilla +2

NVD