Known vulnerabilities in firefox-esr (Alpine package) - page 9

Vendor: Alpine Linux Development Team
Software: firefox-esr (Alpine package)
Software CPE: cpe:2.3:o:alpine:firefox-esr_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 244
Public exploits: 19
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting firefox-esr (Alpine package) firefox-esr (Alpine package) is affected by 244 known vulnerabilities: 5 critical, 105 high, 71 medium, 63 low Critical High Medium Low

Vulnerabilities (244)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23562 - Improper input validation
CVE-2019-11729		 CWE-20 Medium
No
No
 60.8.0-r0 12.12.2019 SB2019062813
SB2019121210
SB2020031903
and 11 more
#VU20836 - Memory corruption
CVE-2019-11740		 CWE-119 High
No
No
 60.9.0-r0 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20823 - Use After Free
CVE-2019-11752		 CWE-416 High
No
No
 60.9.0-r0 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11744		 CWE-79 Medium
No
No
 60.9.0-r0 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20818 - Use After Free
CVE-2019-11746		 CWE-416 High
No
No
 60.9.0-r0 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20292 - Unprotected Storage of Credentials
CVE-2019-11733		 CWE-256 Low
No
No
 68.0.2-r0 15.08.2019 SB2019081503
SB2019081513
SB2019081605
and 5 more
#VU33030 - Memory corruption
CVE-2019-11709		 CWE-119 High
No
No
 60.8.0-r0, 68.0.2-r0 23.07.2019 SB2019072316
SB2019082322
SB2019073024
and 13 more
#VU33032 - Improper input validation
CVE-2019-11711		 CWE-20 High
No
No
 60.8.0-r0, 68.0.2-r0 23.07.2019 SB2019072317
SB2019082322
SB2019073024
and 13 more
#VU33033 - Cross-Site Request Forgery (CSRF)
CVE-2019-11712		 CWE-352 High
No
No
 60.8.0-r0 23.07.2019 SB2019072318
SB2019082322
SB2019073024
and 13 more
#VU33034 - Use After Free
CVE-2019-11713		 CWE-416 High
No
No
 60.8.0-r0 23.07.2019 SB2019072319
SB2019082322
SB2019073024
and 13 more
#VU33035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11715		 CWE-79 Low
No
No
 60.8.0-r0 23.07.2019 SB2019072320
SB2019082322
SB2019073024
and 13 more
#VU33036 - Improper input validation
CVE-2019-11717		 CWE-20 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019072321
SB2019082322
SB2019073024
and 13 more
#VU33037 - Out-of-bounds read
CVE-2019-11719		 CWE-125 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019072322
SB2019082322
SB2019073024
and 17 more
#VU33399 - Permissions, Privileges, and Access Controls
CVE-2019-9811		 CWE-264 High
No
No
 60.8.0-r0 23.07.2019 SB2019082322
SB2019073024
SB2019072928
and 12 more
#VU33439 - Exposure of sensitive information to an unauthorized actor
CVE-2019-11730		 CWE-200 Medium
No
No
 60.8.0-r0 23.07.2019 SB2019082322
SB2019073024
SB2019072928
and 12 more
#VU18860 - Permissions, Privileges, and Access Controls
CVE-2019-11708		 CWE-264 High
Available
Exploited
 60.7.2-r0 20.06.2019 SB2019062002
SB2019062101
SB2019062102
and 19 more
#VU18824 - Type confusion
CVE-2019-11707		 CWE-843 Critical
Available
Exploited
 60.7.1-r0, 60.7.2-r0 18.06.2019 SB2019061805
SB2019061904
SB2019061905
and 21 more
#VU18554 - Use After Free
CVE-2019-9820		 CWE-416 High
No
No
 60.7.0-r0 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 18 more
#VU18553 - Improper input validation
CVE-2019-9819		 CWE-20 High
No
No
 60.7.0-r0 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 19 more
#VU18552 - Use After Free
CVE-2019-9818		 CWE-416 High
No
No
 60.7.0-r0 21.05.2019 SB2019052103
SB2019052104
SB2019052204
and 5 more


Showing elements 161 - 180 out of 244