← Back

Ebay

ebay

4 CVEs • 4 products

Products (4)

Click to collapse
Toggle

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ebay
1Sketchsvg
Mar 5, 2025
Mar 6, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string....Show more
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string. Show less
1Ebay
1Paypal
Apr 29, 2026
Nov 9, 2010
N/A· v4
N/A· v3
2.9 LOW· v2
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an ar...Show more
The PayPal app before 3.0.1 for iOS does not verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof a PayPal web server via an arbitrary certificate.Show less
1Ebay
1Enhanced Picture Uploader Activex Control
Apr 23, 2026
Jun 9, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
eBay Enhanced Picture Uploader ActiveX control (EPUWALcontrol.dll) before 1.0.27 allows remote attackers to execute arbitrary commands via the PictureUrls property.
1Ebay
1Enhanced Picture Services
Apr 16, 2026
Jul 8, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced U...Show more
Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.Show less