Read the docs

Ebay

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Ebay records in CISA KEV

No Ebay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Enhanced Picture Services 1 record MEDIUM Enhanced Picture Uploader Activex Control 1 record MEDIUM Paypal 1 record LOW Sketchsvg 1 record HIGH

Records

4 records

TI-2023-11332 CVE-2023-26107 · GHSA-6722-xvq8-3254

Code injection in sketchsvg

Priority HIGH 69

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00405 Published 2023-03-06 No fix listed CWE-94
TI-2006-01140 CVE-2006-1176 · GHSA-c3xg-4qmh-r995

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in…

Priority MEDIUM 40

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced U…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04583 Published 2006-07-08 No fix listed
TI-2010-03964 CVE-2010-4211 · GHSA-hgp2-5f7q-m5jp

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the…

Priority LOW 15

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an ar…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00372 Published 2010-11-08 No fix listed CWE-287
Open these records in search →