Lucene search
+L

319 matches found

NVD
NVD
•added 2025/05/23 1:15 p.m.•12 views

CVE-2025-31924

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

8.8CVSS0.00593EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/23 12:44 p.m.•5 views

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

8.8CVSS7.2AI score0.00593EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/23 12:44 p.m.•26 views

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

8.8CVSS0.00593EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/23 12:44 p.m.•47 views

CVE-2025-31924

CVE-2025-31924 affects the Craft & Arts WordPress theme (versions n/a through 2.5). The vulnerability is a Deserialization of Untrusted Data leading to PHP Object Injection via the Crafts & Arts deserialization path. Impact is described as high for confidentiality, integrity, and availability (CV...

8.8CVSS7.2AI score0.00593EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/23 12:00 a.m.•11 views

WordPress plugin Crafts & Arts code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists in...

8.8CVSS8.2AI score0.00593EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/05/23 12:00 a.m.•28 views

JVN#68079883: Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox'

The optional feature 'Anti-Virus & Sandbox' of i-FILTER provided by Digital Arts Inc. validates pattern files improperly. Improper pattern file validation CWE-348 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Base Score...

6.9CVSS5.3AI score0.0017EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•5 views

CVE-2025-31924: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

8.8CVSS7.8AI score0.00593EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/23 12:00 a.m.•16 views

Digital Arts i-FILTER security vulnerability

Digital Arts i-FILTER is a web filtering software from Digital Arts Japan. It is used to counter targeted attacks. A security vulnerability exists in Digital Arts i-FILTER that stems from improper schema file validation, which could lead to information disclosure or denial of service attacks...

6.9CVSS5.1AI score0.0017EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/23 12:00 a.m.•12 views

PT-2025-22688 · Designthemes · Designthemes Crafts & Arts

Name of the Vulnerable Software and Affected Versions: designthemes Crafts & Arts versions n/a through 2.5 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For designthemes Crafts & Arts versions n/a through 2.5, update to a...

8.8CVSS8.4AI score0.00593EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 10:09 a.m.•19 views

CVE-2019-19741

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...

7.8CVSS6.8AI score0.00723EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:28 a.m.•22 views

CVE-2019-19247

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 1 of 2...

7.8CVSS6.9AI score0.0036EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:53 a.m.•21 views

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

7.8CVSS7AI score0.0039EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:43 a.m.•20 views

CVE-2013-4867

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

6.3CVSS6.9AI score0.01557EPSS
SaveExploits5References1
Openbugbounty
Openbugbounty
•added 2025/03/21 4:24 a.m.•13 views

calgaryartsdevelopment.com Cross Site Scripting vulnerability OBB-4038639

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2025/01/27 5:15 p.m.•21 views

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

7.3CVSS0.00168EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/27 12:00 a.m.•23 views

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

0.00168EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/27 12:00 a.m.•10 views

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

7.2AI score0.00168EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/27 12:00 a.m.•69 views

CVE-2024-57276

Electronic Arts Dragon Age Origins version 1.05 is vulnerable to an unquoted service path vulnerability within the DAUpdaterSVC service. Due to insecure permissions, users can modify the executable file path used by this service. Because the service runs with NT AUTHORITYSYSTEM privileges, an at...

7.3CVSS7.3AI score0.00168EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/27 12:00 a.m.•8 views

CVE-2024-57276: Unquoted Search Path or Element

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

7.3CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•21 views

RHEL 5 : arts (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - arts,kdelibs3: Use of mktemp3 allows attacker to hijack the IPC CVE-2015-7543 Note that Nessus has not tested for...

7CVSS7.3AI score0.00245EPSS
SaveExploits1References1
Rows per page
Query Builder