Browse CVEs

MEDIUM 6.1 CVE-2017-6217 paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution Adaptive Payments Sdk No fix yet Fix from $1,6002019-07-10 MEDIUM 6.1 CVE-2017-6099 Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers t… Merchant Sdk Php No fix yet Fix from $1,6002017-02-24 MEDIUM 5.8 CVE-2011-5237 PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.… Wps Toolkit Mitigation only Fix from $1,6002012-11-06 MEDIUM 5.8 CVE-2012-5802 The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fiel… Paypal No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5805 The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectA… Instant Payment Notification No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5806 The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjec… Payments Pro No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5788 The PayPal IPN utility does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of th… Ipn No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5789 PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN)… Payments Standard No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5790 PayPal Payments Standard PHP Library 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or sub… Payments Standard No fix yet Fix from $1,6002012-11-04 MEDIUM 5.8 CVE-2012-5791 PayPal Invoicing does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.50… Invoicing No fix yet Fix from $1,6002012-11-04 MEDIUM 5.0 CVE-2012-2058 The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via unspecified vectors. Ubercart Payflow Mitigation only Fix from $1,6002012-09-17