ea kayıtları
ea üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-19 Data Processing Errors1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-269 Improper Privilege Management1
- CWE-310 Cryptographic Issues1
- CWE-427 Uncontrolled Search Path Element1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2019-12828Kavram kanıtı | An issue was discovered in Electronic Arts Origin before 10.5.39.ea · origin · CWE-19 | Yüksek8,8 | — | %13,3 | 14 Haz 2019 |
38İzleyin | CVE-2019-11354Kavram kanıtı | The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.ea · origin · CWE-74 | Yüksek7,8 | — | %23,1 | 19 Nis 2019 |
32İzleyin | CVE-2008-6737Kavram kanıtı | Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange paea · crysis · CWE-200 | Yüksek7,8 | — | %2,7 | 21 Nis 2009 |
31İzleyin | CVE-2019-19741İstismar yok | Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different iea · origin | Yüksek7,8 | — | %0,7 | 20 Şub 2020 |
31İzleyin | CVE-2020-27708İstismar yok | A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or Syea · origin · CWE-427 | Yüksek7,8 | — | %0,6 | 2 Kas 2020 |
31İzleyin | CVE-2019-19248İstismar yok | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).ea · origin | Yüksek7,8 | — | %0,4 | 12 Ara 2019 |
31İzleyin | CVE-2019-19247İstismar yok | Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).ea · origin | Yüksek7,8 | — | %0,4 | 12 Ara 2019 |
28İzleyin | CVE-2010-2627Kavram kanıtı | Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battea · battlefield 2 · CWE-22 | Orta6,8 | — | %3,7 | 2 Tem 2010 |
25İzleyin | CVE-2013-4867Kavram kanıtı | Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijackingea · karotz smart rabbit firmware · CWE-269 | Orta6,3 | — | %1,6 | 27 Ara 2019 |
22İzleyin | CVE-2008-6712Kavram kanıtı | The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) vea · crysis | Orta5,0 | — | %7,4 | 10 Nis 2009 |
21İzleyin | CVE-2020-15914İstismar yok | A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker ea · origin client · CWE-79 | Orta5,4 | — | %0,6 | 2 Kas 2020 |
21İzleyin | CVE-2014-5921İstismar yok | The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, whiea · need for speed network · CWE-310 | Orta5,4 | — | %0,3 | 18 Eyl 2014 |
- CVE-2019-1282839İzleyin
An issue was discovered in Electronic Arts Origin before 10.5.39.
YüksekCVSS 8,8Kavram kanıtıEPSS %13ea · origin14 Haz 2019
- CVE-2019-1135438İzleyin
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler.
YüksekCVSS 7,8Kavram kanıtıEPSS %23ea · origin19 Nis 2019
- CVE-2008-673732İzleyin
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange pa
YüksekCVSS 7,8Kavram kanıtıEPSS %3ea · crysis21 Nis 2009
- CVE-2019-1974131İzleyin
Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different i
YüksekCVSS 7,8İstismar yokEPSS %1ea · origin20 Şub 2020
- CVE-2020-2770831İzleyin
A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or Sy
YüksekCVSS 7,8İstismar yokEPSS %1ea · origin2 Kas 2020
- CVE-2019-1924831İzleyin
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
YüksekCVSS 7,8İstismar yokEPSS %0ea · origin12 Ara 2019
- CVE-2019-1924731İzleyin
Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
YüksekCVSS 7,8İstismar yokEPSS %0ea · origin12 Ara 2019
- CVE-2010-262728İzleyin
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Batt
OrtaCVSS 6,8Kavram kanıtıEPSS %4ea · battlefield 22 Tem 2010
- CVE-2013-486725İzleyin
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
OrtaCVSS 6,3Kavram kanıtıEPSS %2ea · karotz smart rabbit firmware27 Ara 2019
- CVE-2008-671222İzleyin
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) v
OrtaCVSS 5,0Kavram kanıtıEPSS %7ea · crysis10 Nis 2009
- CVE-2020-1591421İzleyin
A cross-site scripting (XSS) vulnerability exists in the Origin Client for Mac and PC 10.5.86 or earlier that could allow a remote attacker
OrtaCVSS 5,4İstismar yokEPSS %1ea · origin client2 Kas 2020
- CVE-2014-592121İzleyin
The Need for Speed Network (aka com.ea.nfsautolog.bv) application 1.0.1 for Android does not verify X.509 certificates from SSL servers, whi
OrtaCVSS 5,4İstismar yokEPSS %0ea · need for speed network18 Eyl 2014