MacWarrior

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

MacWarrior records in CISA KEV

No MacWarrior vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clipbucket 25 records HIGH

Records

44 records

TI-2026-32908 CVE-2026-45060

ClipBucket: Blind SQL Injection in progress_video.php

HIGH 82

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2026-06-11 No fix listed CWE-89

TI-2026-31055 CVE-2026-42846

ClipBucket: Remote Play URL Command Injection

HIGH 82

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2026-06-11 No fix listed CWE-78

TI-2026-17576 CVE-2026-21875

ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

HIGH 82

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0175 Published 2026-01-07 No fix listed CWE-89

TI-2025-41207 CVE-2025-67418 · GHSA-99ch-5w4g-r777

ClipBucket 5.5.2 is affected by an improper access control issue where the product is…

HIGH 82

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00512 Published 2025-12-22 No fix listed CWE-798

TI-2025-15584 CVE-2025-21624

ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01234 Published 2025-01-07 No fix listed CWE-434

TI-2024-36252 CVE-2024-54136

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00748 Published 2024-12-06 No fix listed CWE-502

TI-2024-36251 CVE-2024-54135

Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00753 Published 2024-12-06 No fix listed CWE-502

TI-2026-20797 CVE-2026-25728

ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

HIGH 81

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00331 Published 2026-02-10 No fix listed CWE-367

TI-2025-15582 CVE-2025-21622

ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

HIGH 78

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00998 Published 2025-01-07 No fix listed CWE-22

TI-2026-63742 CVE-2026-96272 · GHSA-x2pv-2g6c-6vc3

ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php

HIGH 77

ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00416 Published 2026-09-23 Fixed in 5.5.3-#182 CWE-89

TI-2026-33207 CVE-2026-45418

ClipBucket: Blind SQL Injection in subtitle_edit.php

HIGH 73

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00368 Published 2026-06-11 No fix listed CWE-89

TI-2026-24849 CVE-2026-32321

ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

HIGH 73

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00449 Published 2026-03-18 No fix listed CWE-89

TI-2025-38899 CVE-2025-62709

ClipBucket v5 is vulnerable to password reset link manipulation

HIGH 73

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00388 Published 2025-11-20 No fix listed CWE-640

TI-2026-65762 CVE-2026-103766 · GHSA-29w7-pp39-xf4w

ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter

HIGH 72

ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via the delete parameter in admin_area/ads_manager.php.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00456 Published 2026-10-01 No fix listed CWE-89

TI-2026-64650 CVE-2026-100372 · GHSA-5vrm-rpx8-j2p7

ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

HIGH 72

ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folde…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01142 Published 2026-09-25 Fixed in 5.5.3-#197 CWE-22

TI-2025-15583 CVE-2025-21623

ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

HIGH 72

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01181 Published 2025-01-07 No fix listed CWE-22

TI-2025-35203 CVE-2025-55911 · GHSA-222w-wff7-mff2

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes…

HIGH 70

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0107 Published 2025-09-18 No fix listed CWE-77

TI-2026-34823 CVE-2026-47238

ClipBucket: IDOR in videos subtitle editor

HIGH 68

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00241 Published 2026-06-11 No fix listed CWE-639

TI-2025-40265 CVE-2025-65113

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

HIGH 68

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00427 Published 2025-11-29 No fix listed CWE-770

TI-2025-39773 CVE-2025-64339

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00272 Published 2025-11-07 No fix listed CWE-79

TI-2025-39771 CVE-2025-64336

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00309 Published 2025-11-07 No fix listed CWE-269

TI-2025-38696 CVE-2025-62429

ClipBucket v5 executes arbitrary PHP code

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00845 Published 2025-10-20 No fix listed CWE-94

TI-2025-38690 CVE-2025-62423

ClipBucket V5 Blind SQL injection in the Admin Panel

HIGH 67

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00518 Published 2025-10-16 No fix listed CWE-89

TI-2026-31056 CVE-2026-42847

ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

HIGH 66

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-05-14 No fix listed CWE-89

TI-2025-38691 CVE-2025-62424

ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

HIGH 65

ClipBucket is a web-based video-sharing platform.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00941 Published 2025-10-17 No fix listed CWE-22

Open these records in search →