Записи ea
12 опубликованных записей вендора ea.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-19 Data Processing Errors1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-310 Cryptographic Issues1
- CWE-427 Uncontrolled Search Path Element1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
12 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2019-12828Proof of concept | An issue was discovered in Electronic Arts Origin before 10.5.39.ea · origin · CWE-19 | Высокая8,8 | — | 13,3 % | 14 июн. 2019 г. |
38Наблюдать | CVE-2019-11354Proof of concept | The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.ea · origin · CWE-74 | Высокая7,8 | — | 23,1 % | 19 апр. 2019 г. |
32Наблюдать | CVE-2008-6737Proof of concept | Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange paea · crysis · CWE-200 | Высокая7,8 | — | 2,7 % | 21 апр. 2009 г. |
31Наблюдать | CVE-2019-19741Эксплойта нет | Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different iea · origin | Высокая7,8 | — | 0,7 % | 20 февр. 2020 г. |
31Наблюдать | CVE-2020-27708Эксплойта нет | A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or Syea · origin · CWE-427 | Высокая7,8 | — | 0,6 % | 2 нояб. 2020 г. |
31Наблюдать | CVE-2019-19248Эксплойта нет | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).ea · origin | Высокая7,8 | — | 0,4 % | 12 дек. 2019 г. |
31Наблюдать | CVE-2019-19247Эксплойта нет | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).ea · origin | Высокая7,8 | — | 0,4 % | 12 дек. 2019 г. |
28Наблюдать | CVE-2010-2627Proof of concept | Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battea · battlefield 2 · CWE-22 | Средняя6,8 | — | 3,7 % | 2 июл. 2010 г. |
25Наблюдать | CVE-2013-4867Proof of concept | Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijackingea · karotz smart rabbit firmware · CWE-269 | Средняя6,3 | — | 1,6 % | 27 дек. 2019 г. |
22Наблюдать | CVE-2008-6712Proof of concept | The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) vea · crysis | Средняя5,0 | — | 7,4 % | 10 апр. 2009 г. |
21Наблюдать | CVE-2020-15914Эксплойта нет | A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker ea · origin client · CWE-79 | Средняя5,4 | — | 0,6 % | 2 нояб. 2020 г. |
21Наблюдать | CVE-2014-5921Эксплойта нет | The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, whiea · need for speed network · CWE-310 | Средняя5,4 | — | 0,3 % | 18 сент. 2014 г. |
- CVE-2019-1282839Наблюдать
An issue was discovered in Electronic Arts Origin before 10.5.39.
ВысокаяCVSS 8,8Proof of conceptEPSS 13 %ea · origin14 июн. 2019 г.
- CVE-2019-1135438Наблюдать
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.
ВысокаяCVSS 7,8Proof of conceptEPSS 23 %ea · origin19 апр. 2019 г.
- CVE-2008-673732Наблюдать
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange pa
ВысокаяCVSS 7,8Proof of conceptEPSS 3 %ea · crysis21 апр. 2009 г.
- CVE-2019-1974131Наблюдать
Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different i
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %ea · origin20 февр. 2020 г.
- CVE-2020-2770831Наблюдать
A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or Sy
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %ea · origin2 нояб. 2020 г.
- CVE-2019-1924831Наблюдать
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %ea · origin12 дек. 2019 г.
- CVE-2019-1924731Наблюдать
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %ea · origin12 дек. 2019 г.
- CVE-2010-262728Наблюдать
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Batt
СредняяCVSS 6,8Proof of conceptEPSS 4 %ea · battlefield 22 июл. 2010 г.
- CVE-2013-486725Наблюдать
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
СредняяCVSS 6,3Proof of conceptEPSS 2 %ea · karotz smart rabbit firmware27 дек. 2019 г.
- CVE-2008-671222Наблюдать
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) v
СредняяCVSS 5,0Proof of conceptEPSS 7 %ea · crysis10 апр. 2009 г.
- CVE-2020-1591421Наблюдать
A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker
СредняяCVSS 5,4Эксплойта нетEPSS 1 %ea · origin client2 нояб. 2020 г.
- CVE-2014-592121Наблюдать
The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, whi
СредняяCVSS 5,4Эксплойта нетEPSS 0 %ea · need for speed network18 сент. 2014 г.