Macwarrior Clipbucket-v5

28 CVEs affecting Macwarrior Clipbucket-v5. Latest disclosed: 2026-06-12. Critical: 7, High: 6.

Top CVEs affecting Macwarrior Clipbucket-v5
CVESeverityScorePublishedSummary
CVE-2026-45060Critical9.82026-06-11ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php endpoint is vulnerable to blind SQL injec…
CVE-2026-42846Critical9.82026-06-11ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature allows any authenticated user to add a…
CVE-2026-21875Critical9.82026-01-08ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to perform Blind SQL Injection through the add comment…
CVE-2025-21624Critical9.82025-01-07ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the…
CVE-2024-54136Critical9.82024-12-06ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerabilit…
CVE-2024-54135Critical9.82024-12-06ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are vulnerable to PHP Deserialization vulner…
CVE-2025-64338Critical9.02025-11-07ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated regular user can create a photo collection whose C…
CVE-2026-45418High8.82026-06-11ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any authenticated user who can upload videos can add multiple subtitles…
CVE-2026-32321High8.82026-03-18ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulnerability exists in ClipBucket prior to 5.5.3 #80 w…
CVE-2026-25728High7.52026-02-10ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability exists in Cl…
CVE-2025-21623High7.52025-01-07ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template director…
CVE-2025-21622High7.52025-01-07ClipBucket V5 provides open source video hosting with PHP. During the user avatar upload workflow, a user can choose to upload and change their avatar at any t…
CVE-2025-62429High7.22025-10-20ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/ad…
CVE-2025-62709Medium6.82025-11-20ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class.php causes the application to dynamically build…
CVE-2025-62424Medium6.72025-10-17ClipBucket is a web-based video-sharing platform. In ClipBucket version 5.5.2 - #146 and earlier, the /admin_area/template_editor.php endpoint is vulnerable to…
CVE-2025-62423Medium6.72025-10-16ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “…
CVE-2026-47238Medium6.52026-06-11ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles beca…
CVE-2026-28354Medium6.52026-02-27ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations are vulnerable to authorization flaws, allowing…
CVE-2025-65113Medium6.52025-11-29ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows…
CVE-2025-64114Medium6.52025-11-06ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - #151 and below allow authenticated administrators with plugin management privileges to…