Known Vulnerabilities for Php Permissions Sdk by Paypal
Listed below are 1 of the newest known vulnerabilities associated with "Php Permissions Sdk" by "Paypal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116020 json | BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated ... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-116017 json | Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceControl... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-115724 json | VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts conten... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115478 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_en... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115477 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Stre... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115325 json | Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scop... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-115207 json | A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enti... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114659 json | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages ... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-114583 json | tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to re... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-114485 json | Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier a... | Not Provided | 2026-10-22 | 2026-10-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Paypal | Php Permissions Sdk | 3.9.1 | |||
| Application | Paypal | Php Permissions Sdk | 3.9.0 | |||
| Application | Paypal | Php Permissions Sdk | 3.8.107 | |||
| Application | Paypal | Php Permissions Sdk | 3.8.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.7.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.6.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.5.103 | |||
| Application | Paypal | Php Permissions Sdk | 3.4.102 | |||
| Application | Paypal | Php Permissions Sdk | 2.6.107 | |||
| Application | Paypal | Php Permissions Sdk | 2.6.106 | |||
| Application | Paypal | Php Permissions Sdk | 2.5.106 | |||
| Application | Paypal | Php Permissions Sdk | 2.4.103 | |||
| Application | Paypal | Php Permissions Sdk | 2.3.101 | |||
| Application | Paypal | Php Permissions Sdk | 2.3.100 | |||
| Application | Paypal | Php Permissions Sdk | 2.2.98 | |||
| Application | Paypal | Php Permissions Sdk | 2.1.96 |