Unity Firefox Extension

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-0958 MEDIUM This Month

content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Mozilla Information Disclosure Unity Firefox Extension

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-0960 HIGH This Week

Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Mozilla RCE Unity Firefox Extension

NVD

CVSS 2.0

7.5

EPSS

2.3%

CVE-2012-0958

EPSS 0% CVSS 4.3

MEDIUM This Month

Mozilla Information Disclosure Unity Firefox Extension

NVD

CVE-2012-0960

EPSS 2% CVSS 7.5

HIGH This Week

Denial Of Service Mozilla RCE +1

NVD