Known vulnerabilities in firefox-esr (Alpine package) - page 7

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 250
Public exploits: 19
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 250 known vulnerabilities: 5 critical, 107 high, 74 medium, 64 low Critical High Medium Low

Vulnerabilities (250)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33030 - Memory corruption
CVE-2019-11709		 CWE-119 High
No
No
 60.8.0-r0, 68.0.2-r0 23.07.2019 SB2019072316
SB2019082322
SB2019073024
and 14 more
#VU33032 - Improper input validation
CVE-2019-11711		 CWE-20 High
No
No
 60.8.0-r0, 68.0.2-r0 23.07.2019 SB2019072317
SB2019082322
SB2019073024
and 14 more
#VU33033 - Cross-Site Request Forgery (CSRF)
CVE-2019-11712		 CWE-352 High
No
No
 60.8.0-r0 23.07.2019 SB2019072318
SB2019082322
SB2019073024
and 14 more
#VU33034 - Use After Free
CVE-2019-11713		 CWE-416 High
No
No
 60.8.0-r0 23.07.2019 SB2019072319
SB2019082322
SB2019073024
and 14 more
#VU33035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11715		 CWE-79 Low
No
No
 60.8.0-r0 23.07.2019 SB2019072320
SB2019082322
SB2019073024
and 14 more
#VU33036 - Improper input validation
CVE-2019-11717		 CWE-20 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019072321
SB2019082322
SB2019073024
and 14 more
#VU33037 - Out-of-bounds read
CVE-2019-11719		 CWE-125 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019072322
SB2019082322
SB2019073024
and 19 more
#VU33399 - Permissions, Privileges, and Access Controls
CVE-2019-9811		 CWE-264 High
No
No
 60.8.0-r0 23.07.2019 SB2019082322
SB2019073024
SB2019072928
and 13 more
#VU33439 - Exposure of sensitive information to an unauthorized actor
CVE-2019-11730		 CWE-200 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019082322
SB2019073024
SB2019072928
and 13 more
#VU33031 - Use After Free
CVE-2019-11471		 CWE-416 High
No
No
 - 23.04.2019 SB2019081917
SB2024062610
#VU33038 - Improper input validation
CVE-2018-18898		 CWE-20 Medium
No
No
 - 21.03.2019 SB2019061824
SB2020091739
SB2019013145
and 1 more
#VU33041 - Improper Authentication
CVE-2018-16738		 CWE-287 Low
No
No
 - 10.10.2018 SB2018100938
SB2018121827
SB2018121828
and 1 more
#VU33042 - Missing Authentication for Critical Function
CVE-2018-16758		 CWE-306 Medium
No
No
 - 10.10.2018 SB2018100939
SB2018121827
SB2018121828
and 1 more
#VU33043 - Improper Authentication
CVE-2018-16737		 CWE-287 Medium
No
No
 - 10.10.2018 SB2018100944
SB2018121827
SB2018121828
and 1 more
#VU33040 - Improper input validation
CVE-2018-17141		 CWE-20 High
No
No
 - 21.09.2018 SB2018092212
SB2018092122
SB2018100937
and 5 more
#VU33562 - Memory corruption
CVE-2017-5375		 CWE-119 High
Available
No
 45.7.0-r0 11.06.2018 SB2017020921
SB2017020805
SB2017012623
and 5 more
#VU33563 - Use After Free
CVE-2017-5376		 CWE-416 High
No
No
 45.7.0-r0 11.06.2018 SB2017020921
SB2017020805
SB2017012624
and 5 more
#VU33269 - Memory corruption
CVE-2017-5373		 CWE-119 High
No
No
 45.7.0-r0 11.06.2018 SB2018061144
SB2017020921
SB2017020805
and 6 more
#VU10190 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-5117		 CWE-451 Low
No
No
 52.6.0-r0 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU9593 - Buffer overflow
CVE-2017-7845		 CWE-120 High
No
No
 52.5.2-r0 08.12.2017 SB2017120803
SB2017122209
SB2017122811


Showing elements 121 - 140 out of 250