Known vulnerabilities in firefox-esr (Alpine package)

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 250
Public exploits: 19
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 250 known vulnerabilities: 5 critical, 107 high, 74 medium, 64 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32906 - Resource Management Errors
CVE-2020-15654		 CWE-399 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32904 - Uncontrolled Search Path Element
CVE-2020-15657		 CWE-427 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 4 more
#VU32903 - Improper input validation
CVE-2020-15658		 CWE-20 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32902 - Type confusion
CVE-2020-15656		 CWE-843 Medium
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32901 - Permissions, Privileges, and Access Controls
CVE-2020-15653		 CWE-264 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32900 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15655		 CWE-200 Medium
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 5 more
#VU32899 - Memory corruption
CVE-2020-15659		 CWE-119 High
No
No
 68.11.0-r0 29.07.2020 SB2020072914
SB2020073012
SB2020073022
and 27 more
#VU32897 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15652		 CWE-200 Medium
No
No
 68.11.0-r0 29.07.2020 SB2020072914
SB2020073012
SB2020073022
and 27 more
#VU29860 - Improperly Implemented Security Check for Standard
CVE-2020-6514		 CWE-358 Medium
Available
No
 68.11.0-r0, 78.1.0-r0 14.07.2020 SB2020071508
SB2020072013
SB2020072014
and 41 more
#VU29457 - Improper Certificate Validation
CVE-2020-12421		 CWE-295 Low
No
No
 68.10.0-r0 02.07.2020 SB2020070208
SB2020070222
SB2020070301
and 24 more
#VU29456 - Use After Free
CVE-2020-12420		 CWE-416 High
No
No
 68.10.0-r0 02.07.2020 SB2020070208
SB2020070222
SB2020070301
and 24 more
#VU29455 - Use After Free
CVE-2020-12419		 CWE-416 High
No
No
 68.10.0-r0 02.07.2020 SB2020070208
SB2020070222
SB2020070301
and 24 more
#VU29453 - Out-of-bounds read
CVE-2020-12418		 CWE-125 Medium
No
No
 68.10.0-r0 02.07.2020 SB2020070208
SB2020070222
SB2020070301
and 24 more
#VU29452 - Improper input validation
CVE-2020-12417		 CWE-20 Medium
No
No
 68.10.0-r0 02.07.2020 SB2020070208
SB2020070222
SB2020070301
and 22 more
#VU29152 - Use After Free
CVE-2020-6463		 CWE-416 High
No
No
 68.11.0-r0, 78.1.0-r0 19.06.2020 SB2020042214
SB2020061903
SB2020061904
and 39 more
#VU28523 - Use After Free
CVE-2020-12405		 CWE-416 High
No
No
 68.9.0-r0 02.06.2020 SB2020060215
SB2020060216
SB2020060301
and 26 more
#VU28522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-12399		 CWE-362 Medium
No
No
 68.9.0-r0 02.06.2020 SB2020060214
SB2020060215
SB2020060216
and 17 more
#VU27535 - Improper input validation
CVE-2020-12392		 CWE-20 Low
No
No
 68.8.0-r0 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU27529 - Use After Free
CVE-2020-12387		 CWE-416 High
No
No
 68.8.0-r0, 68.9.0-r0 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU9527 - Improper Access Control
CVE-2017-7843		 CWE-284 Low
No
No
 52.5.2-r0 05.12.2017 SB2017120501
SB2017120405
SB2017121103
and 2 more


Showing elements 1 - 20 out of 250