MA
Vendor
MacWarrior
41
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110627 | CL clipbucket-v5 MacWarrior | 4.7 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter |
| CVE-2026-110626 | CL clipbucket-v5 MacWarrior | 6.1 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php |
| CVE-2026-110625 | CL clipbucket-v5 MacWarrior | 6.1 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php |
| CVE-2026-103766 | CL clipbucket-v5 MacWarrior | 7.2 | Oct 1 | ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter |
| CVE-2026-102570 | CL clipbucket-v5 MacWarrior | 5.5 | Sep 29 | ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter |
| CVE-2026-102569 | CL clipbucket-v5 MacWarrior | 5.5 | Sep 29 | ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter |
| CVE-2026-100372 | CL clipbucket-v5 MacWarrior | 7.2 | Sep 25 | ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php |
| CVE-2026-96272 | CL clipbucket-v5 MacWarrior | 7.5 | Sep 23 | ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php |
| CVE-2026-95812 | CL clipbucket-v5 MacWarrior | 6.1 | Sep 22 | ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters |
| CVE-2026-77929 | CL clipbucket-v5 MacWarrior | 8.8 | Sep 18 | ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint |
| CVE-2026-77928 | CL clipbucket-v5 MacWarrior | 6.5 | Sep 18 | ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint |
| CVE-2026-77927 | CL clipbucket-v5 MacWarrior | 6.5 | Sep 18 | ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint |
| CVE-2026-80138 | CL clipbucket-v5 MacWarrior | 9.8 | Aug 25 | ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter |
| CVE-2026-49482 | CL clipbucket-v5 MacWarrior | 4.3 | Jun 11 | ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite |
| CVE-2026-47238 | CL clipbucket-v5 MacWarrior | 6.5 | Jun 11 | ClipBucket: IDOR in videos subtitle editor |
| CVE-2026-45060 | CL clipbucket-v5 MacWarrior | 9.8 | Jun 11 | ClipBucket: Blind SQL Injection in progress_video.php |
| CVE-2026-42846 | CL clipbucket-v5 MacWarrior | 9.8 | Jun 11 | ClipBucket: Remote Play URL Command Injection |
| CVE-2026-45418 | CL clipbucket-v5 MacWarrior | 8.8 | Jun 11 | ClipBucket: Blind SQL Injection in subtitle_edit.php |
| CVE-2026-42847 | CL clipbucket-v5 MacWarrior | 7.1 | May 14 | ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
| CVE-2026-32321 | CL clipbucket-v5 MacWarrior | 8.8 | Mar 18 | ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration |
| CVE-2026-28354 | CL clipbucket-v5 MacWarrior | 6.5 | Feb 27 | ClipBucket v5 has IDOR in Collection Item Management |
| CVE-2026-26997 | CL clipbucket-v5 MacWarrior | 5.4 | Feb 27 | ClipBucket v5 has Stored XSS via Collection name |
| CVE-2026-26005 | CL clipbucket-v5 MacWarrior | 5.0 | Feb 12 | ClipBucket v5 enables internal network scans via an SSRF vulnerability |
| CVE-2026-25728 | CL clipbucket-v5 MacWarrior | 7.5 | Feb 10 | ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition |
| CVE-2026-21875 | CL clipbucket-v5 MacWarrior | 9.8 | Jan 7 | ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments |
| CVE-2025-65113 | CL clipbucket-v5 MacWarrior | 6.5 | Nov 29 | ClipBucket v5 Unauthenticated Object Flagging Vulnerability |
| CVE-2025-62709 | CL clipbucket-v5 MacWarrior | 8.8 | Nov 20 | ClipBucket v5 is vulnerable to password reset link manipulation |
| CVE-2025-64338 | CL clipbucket-v5 MacWarrior | 9.0 | Nov 7 | ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name |
| CVE-2025-64339 | CL clipbucket-v5 MacWarrior | 5.4 | Nov 7 | ClipBucket v5: Stored XSS Vulnerability in Manage Playlists |
| CVE-2025-64336 | CL clipbucket-v5 MacWarrior | 5.4 | Nov 7 | ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title |
| CVE-2025-64114 | CL clipbucket-v5 MacWarrior | 6.5 | Nov 5 | ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin |
| CVE-2025-62715 | CL clipbucket-v5 MacWarrior | 5.4 | Nov 4 | ClipBucket v5: Stored XSS via Collection Tags |
| CVE-2025-62429 | CL clipbucket-v5 MacWarrior | 7.2 | Oct 20 | ClipBucket v5 executes arbitrary PHP code |
| CVE-2025-62430 | CL clipbucket-v5 MacWarrior | 5.4 | Oct 17 | ClipBucket v5 stored XSS via video/photo fields |
| CVE-2025-62424 | CL clipbucket-v5 MacWarrior | 6.5 | Oct 17 | ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write |
| CVE-2025-62423 | CL clipbucket-v5 MacWarrior | 7.2 | Oct 16 | ClipBucket V5 Blind SQL injection in the Admin Panel |
| CVE-2025-21624 | CL clipbucket-v5 MacWarrior | 9.8 | Jan 7 | ClipBucket V5 Playlist Cover File Upload to Remote Code Execution |
| CVE-2025-21623 | CL clipbucket-v5 MacWarrior | 7.5 | Jan 7 | ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service |
| CVE-2025-21622 | CL clipbucket-v5 MacWarrior | 9.1 | Jan 7 | ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete |
| CVE-2024-54135 | CL clipbucket-v5 MacWarrior | 8.8 | Dec 6 | Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199 |
| CVE-2024-54136 | CL clipbucket-v5 MacWarrior | 9.8 | Dec 6 | Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below |
