Known vulnerabilities in firefox-esr (Alpine package) - page 3

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 250
Public exploits: 19
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 250 known vulnerabilities: 5 critical, 107 high, 74 medium, 64 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25124 - Memory corruption
CVE-2020-6800		 CWE-119 High
No
No
 68.5.0-r0 11.02.2020 SB2020021108
SB2020021109
SB2020021110
and 27 more
#VU25123 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-6799		 CWE-78 Medium
No
No
 68.5.0-r0 11.02.2020 SB2020021108
SB2020021205
SB2020021811
and 2 more
#VU25122 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-6798		 CWE-94 Medium
No
No
 68.5.0-r0 11.02.2020 SB2020021108
SB2020021109
SB2020021110
and 27 more
#VU25121 - Improper Access Control
CVE-2020-6797		 CWE-284 Medium
No
No
 68.5.0-r0 11.02.2020 SB2020021108
SB2020021109
SB2020021204
and 6 more
#VU25120 - Out-of-bounds write
CVE-2020-6796		 CWE-787 High
No
No
 68.5.0-r0 11.02.2020 SB2020021108
SB2020021110
SB2020021205
and 12 more
#VU24147 - Type confusion
CVE-2019-17026		 CWE-843 Critical
Available
Exploited
 68.4.1-r0 08.01.2020 SB2020010819
SB2020010919
SB2020010922
and 21 more
#VU24062 - Memory corruption
CVE-2019-17024		 CWE-119 High
No
No
 68.4.1-r0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17022		 CWE-79 Medium
No
No
 68.4.1-r0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24054 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17016		 CWE-94 Medium
No
No
 68.4.1-r0 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU23377 - Memory corruption
CVE-2019-17012		 CWE-119 High
No
No
 68.3.0-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23376 - Use After Free
CVE-2019-17011		 CWE-416 High
No
No
 68.3.0-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23375 - Memory corruption
CVE-2019-17005		 CWE-119 High
No
No
 68.3.0-r0, 68.4.1-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23374 - Use After Free
CVE-2019-17010		 CWE-416 High
No
No
 68.3.0-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23373 - Incorrect Default Permissions
CVE-2019-17009		 CWE-276 Low
No
No
 68.3.0-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 4 more
#VU23370 - Use After Free
CVE-2019-17008		 CWE-416 High
No
No
 68.3.0-r0, 68.4.1-r0 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU22164 - Stack-based buffer overflow
CVE-2019-11759		 CWE-121 Low
No
No
 68.2.0-r0 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22163 - Use After Free
CVE-2019-11757		 CWE-416 High
No
No
 68.2.0-r0 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU20292 - Unprotected Storage of Credentials
CVE-2019-11733		 CWE-256 Low
No
No
 68.0.2-r0 15.08.2019 SB2019081503
SB2019081513
SB2019081605
and 5 more
#VU18860 - Permissions, Privileges, and Access Controls
CVE-2019-11708		 CWE-264 High
Available
Exploited
 60.7.2-r0 20.06.2019 SB2019062002
SB2019062101
SB2019062102
and 20 more
#VU18824 - Type confusion
CVE-2019-11707		 CWE-843 Critical
Available
Exploited
 60.7.1-r0, 60.7.2-r0 18.06.2019 SB2019061805
SB2019061904
SB2019061905
and 22 more


Showing elements 41 - 60 out of 250