MacWarrior

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

MacWarrior records in CISA KEV

No MacWarrior vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clipbucket 25 records HIGH

Records

25 records in Clipbucket · all components

TI-2026-17576 CVE-2026-21875

ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

HIGH 82

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0175 Published 2026-01-07 No fix listed CWE-89

TI-2025-41207 CVE-2025-67418 · GHSA-99ch-5w4g-r777

ClipBucket 5.5.2 is affected by an improper access control issue where the product is…

HIGH 82

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2025-12-22 No fix listed CWE-798

TI-2025-15584 CVE-2025-21624

ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01234 Published 2025-01-07 No fix listed CWE-434

TI-2024-36252 CVE-2024-54136

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00748 Published 2024-12-06 No fix listed CWE-502

TI-2024-36251 CVE-2024-54135

Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

HIGH 82

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00753 Published 2024-12-06 No fix listed CWE-502

TI-2026-20797 CVE-2026-25728

ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

HIGH 81

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00331 Published 2026-02-10 No fix listed CWE-367

TI-2025-15582 CVE-2025-21622

ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

HIGH 78

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00998 Published 2025-01-07 No fix listed CWE-22

TI-2026-24849 CVE-2026-32321

ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

HIGH 73

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00449 Published 2026-03-18 No fix listed CWE-89

TI-2025-38899 CVE-2025-62709

ClipBucket v5 is vulnerable to password reset link manipulation

HIGH 73

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00388 Published 2025-11-20 No fix listed CWE-640

TI-2025-15583 CVE-2025-21623

ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

HIGH 72

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01181 Published 2025-01-07 No fix listed CWE-22

TI-2025-35203 CVE-2025-55911 · GHSA-222w-wff7-mff2

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes…

HIGH 70

An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0107 Published 2025-09-18 No fix listed CWE-77

TI-2025-40265 CVE-2025-65113

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

HIGH 68

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00427 Published 2025-11-29 No fix listed CWE-770

TI-2025-39773 CVE-2025-64339

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00272 Published 2025-11-07 No fix listed CWE-79

TI-2025-39771 CVE-2025-64336

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00309 Published 2025-11-07 No fix listed CWE-269

TI-2025-38696 CVE-2025-62429

ClipBucket v5 executes arbitrary PHP code

HIGH 67

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00845 Published 2025-10-20 No fix listed CWE-94

TI-2025-38690 CVE-2025-62423

ClipBucket V5 Blind SQL injection in the Admin Panel

HIGH 67

ClipBucket V5 provides open source video hosting with PHP.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00518 Published 2025-10-16 No fix listed CWE-89

TI-2025-38691 CVE-2025-62424

ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

HIGH 65

ClipBucket is a web-based video-sharing platform.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00941 Published 2025-10-17 No fix listed CWE-22

TI-2026-22634 CVE-2026-28354

ClipBucket v5 has IDOR in Collection Item Management

MEDIUM 59

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00296 Published 2026-02-27 No fix listed CWE-639

TI-2025-38697 CVE-2025-62430

ClipBucket v5 stored XSS via video/photo fields

MEDIUM 58

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00268 Published 2025-10-17 No fix listed CWE-79

TI-2025-38905 CVE-2025-62715

ClipBucket v5: Stored XSS via Collection Tags

MEDIUM 57

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00224 Published 2025-11-04 No fix listed CWE-79

TI-2026-21019 CVE-2026-26005

ClipBucket v5 enables internal network scans via an SSRF vulnerability

MEDIUM 56

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00276 Published 2026-02-12 No fix listed CWE-918

TI-2026-21475 CVE-2026-26997

ClipBucket v5 has Stored XSS via Collection name

MEDIUM 44

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00231 Published 2026-02-27 No fix listed CWE-79

TI-2025-35204 CVE-2025-55912 · GHSA-v9w7-v37j-9778

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can…

LOW 35

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access contr…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01526 Published 2025-09-18 No fix listed CWE-434

TI-2025-39565 CVE-2025-64114

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

LOW 31

ClipBucket v5 is an open source video sharing platform.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00422 Published 2025-11-05 No fix listed CWE-89

TI-2025-39772 CVE-2025-64338

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

LOW 24

ClipBucket v5 is an open source video sharing platform.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00493 Published 2025-12-15 No fix listed CWE-269

Open these records in search →