Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Nordvpn Clear all filters
TI-2018-15593 CVE-2018-25368 · GHSA-x9hx-hwff-3m7w

Nord VPN 6.14.31 Denial of Service via Password Field

Priority HIGH 77

Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00386 Published 2026-05-25 No fix listed CWE-789
TI-2019-15625 CVE-2019-25572 · GHSA-cqg2-35mm-6458

NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow

Priority MEDIUM 64

NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00163 Published 2026-03-21 No fix listed CWE-1260
TI-2020-19127 CVE-2020-36992 · GHSA-xrrp-v29c-5f2g

Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path

Priority HIGH 72

Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00174 Published 2026-01-28 No fix listed CWE-428
TI-2018-02920 CVE-2018-3952 · GHSA-5f3h-x9wv-4c7q

OS command injection in Talos NordVPN

Priority MEDIUM 40

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0086 Published 2018-09-07 No fix listed CWE-78