Known vulnerabilities in firefox-esr (Alpine package) - page 5

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 244
Public exploits: 19
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 244 known vulnerabilities: 5 critical, 105 high, 71 medium, 63 low Critical High Medium Low

Vulnerabilities (244)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46017 - Memory corruption
CVE-2020-15670		 CWE-119 High
No
No
 - 25.08.2020 SB2020082514
SB2020082520
SB2020082619
and 7 more
#VU46016 - Resource Management Errors
CVE-2020-15664		 CWE-399 Medium
No
No
 - 25.08.2020 SB2020082514
SB2020082520
SB2020082618
and 27 more
#VU46015 - Permissions, Privileges, and Access Controls
CVE-2020-15663		 CWE-264 Low
No
No
 - 25.08.2020 SB2020082520
SB2020082619
SB2020083004
and 6 more
#VU45686 - Unrestricted Upload of File with Dangerous Type
CVE-2020-15649		 CWE-434 Medium
No
No
 68.11.0-r0 10.08.2020 SB2020072960
SB2020072961
#VU45688 - Improper input validation
CVE-2020-15650		 CWE-20 Medium
No
No
 68.11.0-r0 10.08.2020 SB2020072962
SB2020072963
#VU32906 - Resource Management Errors
CVE-2020-15654		 CWE-399 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32904 - Uncontrolled Search Path Element
CVE-2020-15657		 CWE-427 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 4 more
#VU32903 - Improper input validation
CVE-2020-15658		 CWE-20 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32902 - Type confusion
CVE-2020-15656		 CWE-843 Medium
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32901 - Permissions, Privileges, and Access Controls
CVE-2020-15653		 CWE-264 Low
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 9 more
#VU32900 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15655		 CWE-200 Medium
No
No
 78.1.0-r0 29.07.2020 SB2020072914
SB2020073022
SB2020080515
and 5 more
#VU9613 - Improper input validation
CVE-2017-17085		 CWE-20 Low
No
No
 - 12.12.2017 SB2017121201
SB2017120903
SB2017121709
and 2 more
#VU9612 - Improper input validation
CVE-2017-17084		 CWE-20 Low
No
No
 - 12.12.2017 SB2017121201
SB2017120903
SB2017121708
and 2 more
#VU9611 - Improper input validation
CVE-2017-17083		 CWE-20 Low
No
No
 - 11.12.2017 SB2017121201
SB2017120903
SB2017121707
and 2 more
#VU9116 - Improper input validation
CVE-2017-15191		 CWE-20 Low
No
No
 - 03.11.2017 SB2017110306
SB2017101210
SB2017102314
and 2 more
#VU9115 - Improper input validation
CVE-2017-15193		 CWE-20 Low
No
No
 - 03.11.2017 SB2017110306
SB2017101210
SB2017102319
and 2 more
#VU9114 - Improper input validation
CVE-2017-15192		 CWE-20 Low
No
No
 - 03.11.2017 SB2017110306
SB2017101210
SB2017102315
and 2 more
#VU8075 - Buffer over-read
CVE-2017-13765		 CWE-126 Low
No
No
 - 04.09.2017 SB2017090401
SB2017102316
SB2020090319
and 1 more
#VU8073 - Out-of-bounds write
CVE-2017-13766		 CWE-787 Low
No
No
 - 04.09.2017 SB2017090401
SB2017120903
SB2017102317
and 2 more
#VU8072 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-13767		 CWE-835 Low
No
No
 - 04.09.2017 SB2017090401
SB2017102318
SB2020090321
and 1 more


Showing elements 81 - 100 out of 244