Known vulnerabilities in firefox-esr (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 244
Public exploits: 19
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 244 known vulnerabilities: 5 critical, 105 high, 71 medium, 63 low Critical High Medium Low

Vulnerabilities (244)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48469 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26965		 CWE-200 Low
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48466 - Improperly Implemented Security Check for Standard
CVE-2020-26961		 CWE-358 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48465 - Use After Free
CVE-2020-26960		 CWE-416 High
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48464 - Use After Free
CVE-2020-26959		 CWE-416 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48463 - Permissions, Privileges, and Access Controls
CVE-2020-26958		 CWE-264 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26956		 CWE-79 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48461 -
CVE-2020-26953		 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 26 more
#VU48460 - Origin Validation Error
CVE-2020-16012		 CWE-346 Medium
Available
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 34 more
#VU48458 - Improper input validation
CVE-2020-26951		 CWE-20 Medium
No
No
 78.5.0-r0 17.11.2020 SB2020111707
SB2020111708
SB2020111709
and 25 more
#VU48235 - Use After Free
CVE-2020-26950		 CWE-416 High
Available
No
 78.5.0-r0 09.11.2020 SB2020110949
SB2020110950
SB2020111001
and 25 more
#VU47746 - Memory corruption
CVE-2020-15683		 CWE-119 High
No
No
 78.5.0-r0 20.10.2020 SB2020102042
SB2020102207
SB2020102311
and 26 more
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999		 CWE-122 Critical
Available
Exploited
 78.5.0-r0 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more
#VU47360 - Use After Free
CVE-2020-15969		 CWE-416 High
No
No
 78.5.0-r0 07.10.2020 SB2020100713
SB2020101003
SB2020101319
and 55 more
#VU46966 - Memory corruption
CVE-2020-15673		 CWE-119 High
No
No
 78.3.0-r0 23.09.2020 SB2020092302
SB2020092304
SB2020092308
and 21 more
#VU46965 - Use After Free
CVE-2020-15678		 CWE-416 Medium
No
No
 78.3.0-r0 23.09.2020 SB2020092302
SB2020092304
SB2020092314
and 21 more
#VU46964 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15676		 CWE-79 Medium
No
No
 78.3.0-r0 23.09.2020 SB2020092302
SB2020092304
SB2020092310
and 21 more
#VU46963 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-15677		 CWE-451 Low
No
No
 78.3.0-r0 23.09.2020 SB2020092302
SB2020092304
SB2020092312
and 21 more
#VU27928 - Out-of-bounds read
CVE-2020-3327		 CWE-125 Medium
No
No
 - 15.05.2020 SB2020051508
SB2020052213
SB2020052214
and 17 more
#VU27927 - Out-of-bounds read
CVE-2020-3341		 CWE-125 Medium
No
No
 - 15.05.2020 SB2020051508
SB2020052213
SB2020052214
and 9 more
#VU25015 - Out-of-bounds read
CVE-2020-3123		 CWE-125 Medium
No
No
 - 06.02.2020 SB2020020617
SB2020021820
SB2020031930
and 5 more


Showing elements 21 - 40 out of 244