Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Ebay Clear all filters
TI-2023-11332 CVE-2023-26107 · GHSA-6722-xvq8-3254

Code injection in sketchsvg

Priority HIGH 69

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00405 Published 2023-03-06 No fix listed CWE-94
TI-2010-03964 CVE-2010-4211 · GHSA-hgp2-5f7q-m5jp

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the…

Priority LOW 15

The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an ar…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00372 Published 2010-11-08 No fix listed CWE-287
TI-2006-01140 CVE-2006-1176 · GHSA-c3xg-4qmh-r995

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in…

Priority MEDIUM 40

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced U…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04583 Published 2006-07-08 No fix listed