PA
Vendor
Paypal
27
CVEs
0
On KEV
0
New 30D
Products
PA8.1
Paypal
Paypal
3 CVEs0 on KEV0 new
BR6.1
Braintree/sanitize-url
Paypal
2 CVEs0 on KEV0 new
PP–
Payments Pro
Paypal
2 CVEs0 on KEV0 new
PS–
Payments Standard
Paypal
2 CVEs0 on KEV0 new
PT–
Php Toolkit
Paypal
2 CVEs0 on KEV0 new
AP6.1
Adaptive Payments Sdk
Paypal
1 CVEs0 on KEV0 new
IP–
Instant Payment Notification
Paypal
1 CVEs0 on KEV0 new
IN–
Invoicing
Paypal
1 CVEs0 on KEV0 new
IP–
Ipn
Paypal
1 CVEs0 on KEV0 new
MP–
Mass Pay
Paypal
1 CVEs0 on KEV0 new
MS–
Merchant Sdk
Paypal
1 CVEs0 on KEV0 new
ME6.1
Merchant-sdk-php
Paypal
1 CVEs0 on KEV0 new
NE9.8
Nemo-appium
Paypal
1 CVEs0 on KEV0 new
PP–
Payflow Pro Express Checkout
Paypal
1 CVEs0 on KEV0 new
PP–
Paypal Pro
Paypal
1 CVEs0 on KEV0 new
PI5.4
Php Invoice Sdk
Paypal
1 CVEs0 on KEV0 new
PP5.4
Php Permissions Sdk
Paypal
1 CVEs0 on KEV0 new
TI–
Transactional Information Soap
Paypal
1 CVEs0 on KEV0 new
UP–
Ubercart Payflow
Paypal
1 CVEs0 on KEV0 new
WP–
Website Payments Standard Module
Paypal
1 CVEs0 on KEV0 new
WT–
Wps Toolkit
Paypal
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-48345 | BR Braintree/sanitize-url Paypal | 6.1 | Feb 24 | sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities |
| CVE-2022-21129 | NE Nemo-appium Paypal | 9.8 | Jan 31 | Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function |
| CVE-2021-23648 | BR Braintree/sanitize-url Paypal | 6.1 | Mar 16 | The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function |
| CVE-2017-6217 | AP Adaptive Payments Sdk Paypal | 6.1 | Jul 10 | paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution |
| CVE-2017-6213 | PI Php Invoice Sdk Paypal | 5.4 | Aug 2 | paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution |
| CVE-2017-6215 | PP Php Permissions Sdk Paypal | 5.4 | Aug 2 | paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verification_code parameter, resulting in code execution |
| CVE-2013-7202 | PA Paypal Paypal | 8.1 | Apr 27 | The WebHybridClient class in PayPal 5.3 and earlier for Android allows remote attackers to execute arbitrary JavaScript on the system |
| CVE-2013-7201 | PA Paypal Paypal | 7.4 | Apr 27 | WebHybridClient.java in PayPal 5.3 and earlier for Android ignores SSL errors, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information |
| CVE-2017-6099 | ME Merchant-sdk-php Paypal | 6.1 | Feb 24 | Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script… |
| CVE-2011-5237 | WT Wps Toolkit Paypal | – | Nov 6 | PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows… |
| CVE-2012-5806 | PP Payments Pro Paypal | – | Nov 4 | The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… |
| CVE-2012-5805 | IP Instant Payment Notification Paypal | – | Nov 4 | The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… |
| CVE-2012-5802 | PA Paypal Paypal | – | Nov 4 | The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,… |
| CVE-2012-5798 | PP Payflow Pro Express Checkout Paypal | – | Nov 4 | The PayPal Pro PayFlow EC module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the… |
| CVE-2012-5796 | PP Paypal Pro Paypal | – | Nov 4 | The PayPal Pro module in osCommerce does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… |
| CVE-2012-5791 | IN Invoicing Paypal | – | Nov 4 | PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows… |
| CVE-2012-5790 | PS Payments Standard Paypal | – | Nov 4 | PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… |
| CVE-2012-5789 | PS Payments Standard Paypal | – | Nov 4 | PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of… |
| CVE-2012-5788 | IP Ipn Paypal | – | Nov 4 | The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which… |
| CVE-2012-5787 | MS Merchant Sdk Paypal | – | Nov 4 | The PayPal merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which… |
| CVE-2012-5784 | MP Mass Pay Paypal | – | Nov 4 | Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ,… |
| CVE-2012-2991 | WP Website Payments Standard Module Paypal | – | Sep 19 | The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified… |
| CVE-2012-2058 | UP Ubercart Payflow Paypal | – | Sep 17 | The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors |
| CVE-2006-0202 | PT Php Toolkit Paypal | – | Jan 13 | Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows… |
| CVE-2006-0201 | PT Php Toolkit Paypal | – | Jan 13 | Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows remote attackers to enter false payment entries into the log… |