İçeriğe atla
Noroxi

PayPal kayıtları

paypal üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%20
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 22
  5. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

25 kayıt
  • CVE-2022-21129
    40Planlayın

    Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.expor

    KritikCVSS 9,8İstismar yokEPSS %3

    paypal · nemo-appium31 Oca 2023

  • CVE-2013-7202
    33İzleyin

    The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

    YüksekCVSS 8,1İstismar yokEPSS %2

    paypal · paypal27 Nis 2018

  • CVE-2013-7201
    30İzleyin

    WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and

    YüksekCVSS 7,4İstismar yokEPSS %2

    paypal · paypal27 Nis 2018

  • CVE-2012-5784
    25İzleyin

    Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Servic

    OrtaCVSS 5,8İstismar yokEPSS %6

    apache · activemq4 Kas 2012

  • CVE-2021-23648
    24İzleyin

    Cross-site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    paypal · braintree\/sanitize-url16 Mar 2022

  • CVE-2017-6099
    24İzleyin

    Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote at

    OrtaCVSS 6,1İstismar yokEPSS %1

    paypal · merchant-sdk-php23 Şub 2017

  • CVE-2017-6217
    24İzleyin

    paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution

    OrtaCVSS 6,1İstismar yokEPSS %1

    paypal · adaptive payments sdk10 Tem 2019

  • CVE-2022-48345
    24İzleyin

    sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

    OrtaCVSS 6,1İstismar yokEPSS %1

    paypal · braintree\/sanitize-url24 Şub 2023

  • CVE-2012-5787
    23İzleyin

    The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · merchant sdk4 Kas 2012

  • CVE-2012-5790
    23İzleyin

    PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (C

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · payments standard4 Kas 2012

  • CVE-2012-5791
    23İzleyin

    PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · invoicing4 Kas 2012

  • CVE-2012-5789
    23İzleyin

    PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · payments standard4 Kas 2012

  • CVE-2012-5788
    23İzleyin

    The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · ipn4 Kas 2012

  • CVE-2012-5802
    23İzleyin

    The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAlt

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · paypal4 Kas 2012

  • CVE-2012-5796
    23İzleyin

    The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj

    OrtaCVSS 5,8İstismar yokEPSS %1

    oscommerce · oscommerce4 Kas 2012

  • CVE-2012-5798
    23İzleyin

    The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (

    OrtaCVSS 5,8İstismar yokEPSS %1

    oscommerce · oscommerce4 Kas 2012

  • CVE-2012-5805
    23İzleyin

    The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · instant payment notification4 Kas 2012

  • CVE-2012-5806
    23İzleyin

    The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN)

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · payments pro4 Kas 2012

  • CVE-2011-5237
    23İzleyin

    PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field

    OrtaCVSS 5,8İstismar yokEPSS %1

    paypal · wps toolkit6 Kas 2012

  • CVE-2017-6213
    21İzleyin

    paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.

    OrtaCVSS 5,4İstismar yokEPSS %1

    paypal · php invoice sdk2 Ağu 2018

  • CVE-2017-6215
    21İzleyin

    paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code e

    OrtaCVSS 5,4İstismar yokEPSS %1

    paypal · php permissions sdk2 Ağu 2018

  • CVE-2006-0201
    20İzleyin

    Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to e

    OrtaCVSS 5,0İstismar yokEPSS %1

    paypal · php toolkit13 Oca 2006

  • CVE-2012-2058
    20İzleyin

    The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors.

    OrtaCVSS 5,0İstismar yokEPSS %1

    drupal · drupal17 Eyl 2012

  • CVE-2012-2991
    20İzleyin

    The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set

    OrtaCVSS 5,0İstismar yokEPSS %1

    oscommerce · online merchant19 Eyl 2012

  • CVE-2006-0202
    14İzleyin

    Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for

    DüşükCVSS 3,6İstismar yokEPSS %0

    paypal · php toolkit13 Oca 2006