Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2017-6217

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Paypal
Products
Adaptive Payments Sdk
CVE-2017-6215

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Paypal
Products
Php Permissions Sdk
CVE-2017-6213

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution.

CVSS 3.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Paypal
Products
Php Invoice Sdk
CVE-2013-7202

The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system.

CVSS 3.0 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
Paypal
Products
Paypal
CVE-2013-7201

WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

CVSS 3.0 · 7.4 High EPSS 1.8% KEV · Not listed
Vendors
Paypal
Products
Paypal