Lucene search
K

86 matches found

Circl
Circl
added 2026/05/26 1:44 a.m.5 views

CVE-2018-25368

creationtimestamp| type| source ---|---|--- 2026-05-26 01:44:03+00:00| seen| https://www.acn.gov.it/portale/w/nordvpn-poc-pubblico-per-lo-sfruttamento-della-cve-2018-25368...

8.7CVSS5.8AI score0.00386EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 2:15 p.m.31 views

CVE-2018-25368

NordVPN 6.14.31 is affected by a denial-of-service vulnerability triggered by submitting an excessively long password string. Unauthenticated attackers can crash the application during authentication by pasting a buffer of repeated characters into the password field. The description in the connec...

8.7CVSS6AI score0.00386EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.12 views

PT-2026-43209

Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field. Attackers can paste a buffer of repeated characters into the password input field to trigger an application...

8.7CVSS6AI score0.00386EPSS
Exploits0References6
EUVD
EUVD
added 2026/03/21 3:33 p.m.4 views

EUVD-2019-19892

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS6AI score0.00157EPSS
Exploits1References5
NVD
NVD
added 2026/03/21 1:16 p.m.3 views

CVE-2019-25572

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS0.00157EPSS
Exploits1References4
CVE
CVE
added 2026/03/21 12:47 p.m.10 views

CVE-2019-25572

NordVPN 6.19.6 is affected by a denial-of-service vulnerability in the login flow: an excessively long string (about 100,000 characters) submitted in the email input can crash the application. The issue is triggered by a local attacker who can paste the long buffer into the email field during log...

6.9CVSS6AI score0.00157EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/21 12:47 p.m.2 views

CVE-2019-25572 NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS6AI score0.00157EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/21 12:47 p.m.25 views

CVE-2019-25572 NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS0.00157EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/21 12:47 p.m.3 views

CVE-2019-25572

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS6AI score0.00157EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.6 views

NordVPN 安全漏洞

NordVPN is a virtual private network service provided by the NordVPN company. Version 6.19.6 of NordVPN contains a security vulnerability. This vulnerability stems from a buffer overflow in the email input field, which could allow local attackers to cause the application to crash by submitting...

6.9CVSS6.1AI score0.00157EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.5 views

PT-2026-26917

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash...

6.9CVSS6AI score0.00157EPSS
Exploits1References5
NVD
NVD
added 2026/01/28 1:15 p.m.4 views

CVE-2020-36992

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...

8.5CVSS0.0016EPSS
Exploits0References3
CVE
CVE
added 2026/01/28 12:29 p.m.10 views

CVE-2020-36992

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in the nordvpn-service that allows local attackers to execute code with elevated privileges (LocalSystem) during system startup or reboot. This is a local exploitation scenario with high impact (code execution). The provided docum...

8.5CVSS6.1AI score0.0016EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 12:29 p.m.2 views

CVE-2020-36992 Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...

8.5CVSS6.1AI score0.0016EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/28 12:29 p.m.2 views

CVE-2020-36992

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...

8.5CVSS6.1AI score0.0016EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/01/28 12:29 p.m.2 views

EUVD-2020-30900

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...

8.5CVSS6.1AI score0.0016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.6 views

PT-2026-5118

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges. Attackers can exploit the unquoted binary path during system startup or reboot to potentially run malicious code with LocalSystem...

8.5CVSS6.1AI score0.0016EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.4 views

Nord VPN code-related vulnerabilities

Nord VPN is a proxy software developed by the Nord VPN company. Version 6.31.13.0 of Nord VPN contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the nordvpn-service service path, which may allow local attackers to execute code with elevated privileges...

8.5CVSS6AI score0.0016EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:13 p.m.4 views

CVE-2018-9105

NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerability. The vulnerability stems from its privileged helper tool's implemented XPC service. This XPC service is responsible for receiving and processing new OpenVPN connection requests from the main application. Unfortunately...

9CVSS7.6AI score0.02744EPSS
Exploits0References1
HackRead
HackRead
added 2026/01/05 3:54 p.m.4 views

NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data

A hacker using the alias 1011 has claimed to breach a NordVPN development server, posting what appears to…...

7AI score
Exploits0
Rows per page
Query Builder