Lucene search
K

64 matches found

RedhatCVE
RedhatCVE
added 2026/03/27 10:51 p.m.3 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.9AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2026/03/26 8:16 p.m.2 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS0.00018EPSS
Exploits0References2
CVE
CVE
added 2026/03/26 7:30 p.m.3 views

CVE-2026-33631

CVE-2026-33631 affects ClearanceKit on macOS. In the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy only for ES_EVENT_TYPE_AUTH_OPEN; seven additional file operation events were not intercepted, allowing local processes to bypass FAA policy wit...

8.7CVSS5.8AI score0.00018EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/26 7:30 p.m.1 views

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.9AI score0.00018EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/26 7:30 p.m.21 views

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS0.00018EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 7:30 p.m.1 views

EUVD-2026-16371

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.8AI score0.00018EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/26 7:30 p.m.1 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.8AI score0.00018EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.4 views

PT-2026-28500

Name of the Vulnerable Software and Affected Versions ClearanceKit versions 4.1 and earlier Description ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension...

8.7CVSS5.9AI score0.00018EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/12/17 11:3 a.m.4 views

CVE-2025-0836

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS6.9AI score0.00048EPSS
Exploits0References1
NVD
NVD
added 2025/12/16 11:15 a.m.2 views

CVE-2025-0836

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS0.00048EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/16 11:2 a.m.2 views

CVE-2025-0836 XProtect MIP API Missing Authorization

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS6.5AI score0.00048EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/16 11:2 a.m.24 views

CVE-2025-0836 XProtect MIP API Missing Authorization

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS0.00048EPSS
Exploits0References2
CVE
CVE
added 2025/12/16 11:2 a.m.5 views

CVE-2025-0836

CVE-2025-0836 – Milestone XProtect VMS is described as a Missing Authorization vulnerability where users with read-only access to the Management Server can obtain full read/write access to the MIP Webhooks API. The issue is documented across multiple feeds (NVD, Red Hat, ENISA EUVD, CVE and vendo...

6.3CVSS6.5AI score0.00048EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51471

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS6.9AI score0.00048EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

Milestone Systems XProtect VMS 安全漏洞

Milestone Systems XProtect VMS is a video management software from Milestone Systems, USA. A security vulnerability exists in Milestone Systems XProtect VMS that stems from an authorization gap that could result in a read-only user gaining full read and write access to the MIP Webhooks API...

6.3CVSS6.7AI score0.00048EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-19603

Malware in sbrugna...

8.1CVSS8.2AI score0.02682EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-50965

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00135EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/17 2:49 p.m.2 views

CVE-2025-1688

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

5.5CVSS7.1AI score0.00097EPSS
Exploits0References3
NVD
NVD
added 2025/04/15 11:15 a.m.9 views

CVE-2025-1688

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

5.5CVSS0.00097EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 10:13 a.m.4 views

CVE-2025-1688 System configuration password reset

Milestone Systems has discovered a security vulnerability in Milestone XProtect installer that resets system configuration password after the upgrading from older versions using specific installers. The system configuration password is an additional, optional protection that is enabled on the...

5.5CVSS7.2AI score0.00097EPSS
Exploits0References1
Rows per page
Query Builder