arr project records
3 published records for vendor arr project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-908 Use of Uninitialized Resource1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2020-35888No exploit | An issue was discovered in the arr crate through 2020-08-25 for Rust.arr project · arr · CWE-908 | Critical9.8 | 1.5%Dec 31, 2020 |
39Monitor | CVE-2020-35887No exploit | An issue was discovered in the arr crate through 2020-08-25 for Rust.arr project · arr · CWE-120 | Critical9.8 | 1.4%Dec 31, 2020 |
18Monitor | CVE-2020-35886No exploit | An issue was discovered in the arr crate through 2020-08-25 for Rust.arr project · arr · CWE-362 | Medium4.7 | 0.1%Dec 31, 2020 |
- CVE-2020-3588839Monitor
An issue was discovered in the arr crate through 2020-08-25 for Rust.
CriticalCVSS 9.8No exploitEPSS 1%arr project · arrDec 31, 2020
- CVE-2020-3588739Monitor
An issue was discovered in the arr crate through 2020-08-25 for Rust.
CriticalCVSS 9.8No exploitEPSS 1%arr project · arrDec 31, 2020
- CVE-2020-3588618Monitor
An issue was discovered in the arr crate through 2020-08-25 for Rust.
MediumCVSS 4.7No exploitEPSS 0%arr project · arrDec 31, 2020