Vulnerabilities

TI-2023-26698 CVE-2023-48957 · GHSA-44pq-qvmw-gj4m

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing…

MEDIUM 57

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0044 Published 2024-08-25 No fix listed CWE-200

TI-2018-13191 CVE-2018-18656 · GHSA-r5f4-vq84-cr57

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and…

LOW 34

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00357 Published 2018-10-26 No fix listed CWE-522

TI-2018-07234 CVE-2018-10204 · GHSA-7925-2p2w-mgxj

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its…

MEDIUM 41

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01497 Published 2018-04-18 No fix listed CWE-732

TI-2018-05394 CVE-2018-7484 · GHSA-qr57-c849-39j8

An issue was discovered in PureVPN through 5.19.4.0 on Windows.

LOW 39

An issue was discovered in PureVPN through 5.19.4.0 on Windows.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.02605 Published 2018-02-26 No fix listed CWE-426

TI-2018-04980 CVE-2018-6822 · GHSA-qp24-jcr5-x5v2

In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service…

MEDIUM 45

In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01483 Published 2018-02-07 No fix listed

Vulnerabilities

Filters

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing…

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and…

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its…

An issue was discovered in PureVPN through 5.19.4.0 on Windows.

In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service…