Known vulnerabilities in firefox-esr (Alpine package) - page 3

Vendor: Alpine Linux Development Team

Software: firefox-esr (Alpine package)

Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 244

Public exploits: 19

Known exploited (KEV): 7

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (244)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU27023 - Improper input validation CVE-2020-11655	CWE-20	Medium	No	No	-	20.04.2020	SB2020042007 SB2020042008 SB2020080704 and 10 more
#VU23961 - Improper Authentication CVE-2019-9496	CWE-287	Medium	No	No	-	06.01.2020	SB2019041715 SB2020010606 SB2020021601 and 9 more
#VU23189 - Improper input validation CVE-2019-19242	CWE-20	Medium	No	No	-	02.12.2019	SB2019120211 SB2019120212 SB2019121736 and 4 more
#VU18790 - Out-of-bounds read CVE-2019-3832	CWE-125	Low	No	No	-	13.06.2019	SB2019061303 SB2020073119 SB2019030721 and 3 more
#VU18657 - Out-of-bounds read CVE-2019-8457	CWE-125	Low	No	No	-	31.05.2019	SB2019053112 SB2019060401 SB2019060407 and 16 more
#VU18645 - Use After Free CVE-2019-5018	CWE-416	High	No	No	-	31.05.2019	SB2019053101 SB2019081527 SB2019120212 and 9 more
#VU31083 - NULL Pointer Dereference CVE-2019-11555	CWE-476	Medium	No	No	-	27.04.2019	SB2019042708 SB2019051019 SB2019051020 and 9 more
#VU18288 - Exposed Dangerous Method or Function CVE-2019-3835	CWE-749	Medium	No	No	-	17.04.2019	SB2019041703 SB2019041105 SB2019040206 and 11 more
#VU18149 - UNIX Symbolic Link (Symlink) Following CVE-2019-3880	CWE-61	Low	No	No	-	08.04.2019	SB2019040801 SB2019040805 SB2019040807 and 14 more
#VU18055 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-3838	CWE-78	High	No	No	-	22.03.2019	SB2019032201 SB2019041703 SB2019041105 and 12 more
#VU17693 - Out-of-bounds read CVE-2019-7578	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 15 more
#VU17692 - Out-of-bounds read CVE-2019-7575	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 16 more
#VU17691 - Out-of-bounds read CVE-2019-7576	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 15 more
#VU17687 - Out-of-bounds read CVE-2019-7577	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 17 more
#VU17684 - Out-of-bounds read CVE-2019-7635	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 18 more
#VU17683 - Out-of-bounds read CVE-2019-7636	CWE-125	Low	No	No	-	14.02.2019	SB2019021411 SB2019041806 SB2019041606 and 16 more
#VU17473 - Heap-based Buffer Overflow CVE-2018-8795	CWE-122	High	Available	No	-	11.02.2019	SB2019010203 SB2019091505 SB2019052848 and 6 more
#VU17471 - Heap-based Buffer Overflow CVE-2018-8797	CWE-122	High	Available	No	-	11.02.2019	SB2019010203 SB2019091505 SB2019052850 and 6 more
#VU17230 - Command injection CVE-2019-6116	CWE-77	Low	No	No	-	27.01.2019	SB2019012310 SB2019012703 SB2019013004 and 17 more
#VU16957 - Out-of-bounds read CVE-2019-5747	CWE-125	Low	No	No	-	14.01.2019	SB2019011401 SB2019012433 SB20200903112 and 4 more

Showing elements 41 - 60 out of 244

Known vulnerabilities in firefox-esr (Alpine package) - page 3

Breakdown by Severity Chart

Vulnerabilities (244)

Please verify you're human