Lucene search
+L

13 matches found

CVE
CVE
•added 2026/07/20 9:12 p.m.•44 views

CVE-2026-47133

ClearanceKit on macOS stores per-record policy data in /Library/Application Support/clearancekit/store.db with ECDSA signatures in data_signatures. Prior to 5.0.10, the signed payload lacks a monotonic counter or freshness binding, allowing an attacker who can modify store.db and the matching dat...

6.9CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/20 9:12 p.m.•46 views

CVE-2026-47133 ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store /Library/Application Support/clearancekit/store.db is verified using an ECDSA signature stored in the datasignatures table. T...

6.9CVSS0.00152EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/20 9:12 p.m.•16 views

CVE-2026-47133 ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store /Library/Application Support/clearancekit/store.db is verified using an ECDSA signature stored in the datasignatures table. T...

6.9CVSS5.4AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/20 9:12 p.m.•10 views

CVE-2026-47133 ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store /Library/Application Support/clearancekit/store.db is verified using an ECDSA signature stored in the datasignatures table. T...

6.9CVSS5.3AI score0.00152EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:26 a.m.•18 views

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

4.2CVSS6.7AI score0.00411EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2021-20554

Malware in sbrugna...

4.2CVSS4.9AI score0.00411EPSS
SaveExploits1References5
NVD
NVD
•added 2021/06/06 4:15 p.m.•25 views

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

4.2CVSS0.00411EPSS
SaveExploits1References4
Prion
Prion
•added 2021/06/06 4:15 p.m.•26 views

Authentication flaw

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

1.9CVSS4.5AI score0.00411EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/06/06 4:15 p.m.•10 views

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

4.2CVSS6AI score0.00411EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/06/06 3:33 p.m.•28 views

CVE-2021-33881

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

4.7AI score0.00411EPSS
SaveExploits1References4
CVE
CVE
•added 2021/06/06 3:33 p.m.•87 views

CVE-2021-33881

CVE-2021-33881 affects NXP MIFARE Ultralight and NTAG RFID cards. The issue allows an attacker to interrupt a write operation (a “tear off”/rip-off attack) to bypass the monotonic counter protection mechanism. Impact depends on usage of the anti tear-off feature in specific applications, such as ...

4.2CVSS4.4AI score0.00411EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/06 12:00 a.m.•5 views

CVE-2021-33881: Incorrect Authorization

On NXP MIFARE Ultralight and NTAG cards, an attacker can interrupt a write operation aka conduct a "tear off" attack over RFID to bypass a Monotonic Counter protection mechanism. The impact depends on how the anti tear-off feature is used in specific applications such as public transportation,...

4.2CVSS5.8AI score0.00411EPSS
SaveExploits1References2
OSV
OSV
•added 2016/05/03 12:00 a.m.•6 views

OSEC-2016-02 Memory disclosure in mirage-net-xen

Background MirageOS is a library operating system using cooperative multitasking, which can be executed as a guest of the Xen hypervisor. Virtual devices, such as a network device, share memory between MirageOS and the hypervisor. MirageOS allocates and grants the hypervisor access to a ringbuffe...

6.5CVSS5.6AI score
SaveExploits0References3
Rows per page
Query Builder