Purevpn

Purevpn

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.7

CVE-2025-59691

  • EPSS 0.03%
  • Veröffentlicht 18.09.2025 00:00:00
  • Zuletzt bearbeitet 19.09.2025 16:00:27

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv...

3.7

CVE-2025-59692

  • EPSS 0.03%
  • Veröffentlicht 18.09.2025 00:00:00
  • Zuletzt bearbeitet 19.09.2025 16:00:27

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been confi...

5.3

CVE-2023-48957

Exploit
  • EPSS 0.05%
  • Veröffentlicht 25.08.2024 17:15:03
  • Zuletzt bearbeitet 14.03.2025 20:15:12

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

7.8

CVE-2018-18656

Exploit
  • EPSS 0.04%
  • Veröffentlicht 26.10.2018 12:29:00
  • Zuletzt bearbeitet 21.11.2024 03:56:19

The PureVPN client before 6.1.0 for Windows stores Login Credentials (username and password) in cleartext. The location of such files is %PROGRAMDATA%\purevpn\config\login.conf. Additionally, all local users can read this file.

9

CVE-2018-10204

  • EPSS 0.49%
  • Veröffentlicht 18.04.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:41:00

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %P...

9.3

CVE-2018-7484

  • EPSS 0.19%
  • Veröffentlicht 26.02.2018 02:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:13

An issue was discovered in PureVPN through 5.19.4.0 on Windows. The client installation grants the Everyone group Full Control permission to the installation directory. In addition, the PureVPNService.exe service, which runs under NT Authority\SYSTEM...

10

CVE-2018-6822

  • EPSS 0.34%
  • Veröffentlicht 07.02.2018 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:11:14

In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implements an unprotected XPC service that can be abused to execute system commands as root.