Tremor Script

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-45702 Dec 27, 00:15 Cargo HIGH PATCH This Week

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Tremor Script Linuxfoundation

NVD

CVSS 3.1

7.5

EPSS

1.1%

CVE-2021-45701 Dec 27, 00:15 Cargo CRITICAL PATCH Act Now

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Tremor Script Linuxfoundation

NVD

CVSS 3.1

9.8

EPSS

1.2%

CVE-2021-45702 Cargo

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Use After Free Memory Corruption +2

NVD

CVE-2021-45701 Cargo

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Information Disclosure Use After Free Memory Corruption +2

NVD