Ecosystem

Alpine

10,677 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

134 results · Clear filters · Feed

Medium 5.4

CVE-2018-16890 Public exploit

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling …

The curl Project curl curl curl Debian Ubuntu Alpine

Feb 6, 2019
Medium 5.9

CVE-2019-6111 Public exploit EPSS 58%

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses w…

openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine

Jan 31, 2019
Medium 5.3

CVE-2018-16843 Public exploit EPSS 48%

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

[UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine

Nov 7, 2018
Medium 6.1

CVE-2016-6328 Public exploit

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can…

[UNKNOWN] libexif libexif libexif Debian Ubuntu Alpine

Oct 31, 2018
Medium 5.9

CVE-2018-15473 Public exploit EPSS 99%

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticat…

openssh openssh openssh Debian Ubuntu Alpine

Aug 17, 2018
Medium 5.3

CVE-2018-10906 Public exploit

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is ac…

[UNKNOWN] fuse fuse fuse3 Debian Ubuntu Alpine

Jul 24, 2018
Medium 5.5

CVE-2018-3639 Public exploit EPSS 60%

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

May 22, 2018
Medium 6.6

CVE-2016-9587 Public exploit EPSS 17%

Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

ansible ansible ansible ansible Debian Ubuntu Alpine PyPI

Apr 24, 2018
Medium 6.1

CVE-2015-9251 Public exploit EPSS 30%

Cross-Site Scripting (XSS) in jquery

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

ruby jquery-rails org.webjars.npm:jquery jQuery Ubuntu Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2012-6708 Public exploit

Cross-Site Scripting in jquery

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

ruby jquery-rails org.webjars.npm:jquery jQuery Ubuntu Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5753 Public exploit EPSS 94%

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5754 Public exploit EPSS 67%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.9

CVE-2016-6210 Public exploit EPSS 89%

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static…

openssh openssh openssh Debian Ubuntu Alpine

Feb 13, 2017