Skip to content
Noroxi

oxygenz records

25 published records for vendor oxygenz.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
52%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 24
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2026-21875
    40Plan

    ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    oxygenz · clipbucketJan 7, 2026

  • CVE-2025-21624
    39Monitor

    ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 1%

    oxygenz · clipbucketJan 7, 2025

  • CVE-2024-54136
    39Monitor

    Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

    CriticalCVSS 9.8No exploitEPSS 0%

    oxygenz · clipbucketDec 6, 2024

  • CVE-2025-67418
    39Monitor

    ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrat

    CriticalCVSS 9.8No exploitEPSS 0%

    oxygenz · clipbucketDec 22, 2025

  • CVE-2026-25728
    37Monitor

    ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

    CriticalCVSS 9.3No exploitEPSS 0%

    oxygenz · clipbucketFeb 10, 2026

  • CVE-2025-21622
    36Monitor

    ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

    CriticalCVSS 9.1No exploitEPSS 0%

    oxygenz · clipbucketJan 7, 2025

  • CVE-2024-54135
    35Monitor

    Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

    HighCVSS 8.8No exploitEPSS 0%

    oxygenz · clipbucketDec 6, 2024

  • CVE-2026-32321
    35Monitor

    ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration

    HighCVSS 8.8Proof of conceptEPSS 0%

    oxygenz · clipbucketMar 18, 2026

  • CVE-2025-62709
    35Monitor

    ClipBucket v5 is vulnerable to password reset link manipulation

    HighCVSS 8.8No exploitEPSS 0%

    oxygenz · clipbucketNov 20, 2025

  • CVE-2025-21623
    30Monitor

    ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

    HighCVSS 7.5No exploitEPSS 1%

    oxygenz · clipbucketJan 7, 2025

  • CVE-2025-55912
    29Monitor

    An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php t

    HighCVSS 7.3Proof of conceptEPSS 1%

    oxygenz · clipbucketSep 18, 2025

  • CVE-2025-62429
    28Monitor

    ClipBucket v5 executes arbitrary PHP code

    HighCVSS 7.2Proof of conceptEPSS 0%

    oxygenz · clipbucketOct 20, 2025

  • CVE-2025-62423
    28Monitor

    ClipBucket V5 Blind SQL injection in the Admin Panel

    HighCVSS 7.2No exploitEPSS 0%

    oxygenz · clipbucketOct 16, 2025

  • CVE-2025-64336
    28Monitor

    ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

    HighCVSS 7.2No exploitEPSS 0%

    oxygenz · clipbucketNov 7, 2025

  • CVE-2025-64339
    28Monitor

    ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

    HighCVSS 7.2No exploitEPSS 0%

    oxygenz · clipbucketNov 7, 2025

  • CVE-2025-55911
    26Monitor

    An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter

    MediumCVSS 6.5Proof of conceptEPSS 1%

    oxygenz · clipbucketSep 18, 2025

  • CVE-2025-62424
    26Monitor

    ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write

    MediumCVSS 6.5No exploitEPSS 0%

    oxygenz · clipbucketOct 17, 2025

  • CVE-2025-65113
    26Monitor

    ClipBucket v5 Unauthenticated Object Flagging Vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    oxygenz · clipbucketNov 29, 2025

  • CVE-2025-64114
    26Monitor

    ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

    MediumCVSS 6.5No exploitEPSS 0%

    oxygenz · clipbucketNov 6, 2025

  • CVE-2026-28354
    22Monitor

    ClipBucket v5 has IDOR in Collection Item Management

    MediumCVSS 5.7No exploitEPSS 0%

    oxygenz · clipbucketFeb 27, 2026

  • CVE-2025-62430
    21Monitor

    ClipBucket v5 stored XSS via video/photo fields

    MediumCVSS 5.4No exploitEPSS 0%

    oxygenz · clipbucketOct 17, 2025

  • CVE-2025-62715
    21Monitor

    ClipBucket v5: Stored XSS via Collection Tags

    MediumCVSS 5.3No exploitEPSS 0%

    oxygenz · clipbucketNov 4, 2025

  • CVE-2025-64338
    20Monitor

    ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

    MediumCVSS 5.1No exploitEPSS 0%

    oxygenz · clipbucketNov 7, 2025

  • CVE-2026-26005
    20Monitor

    ClipBucket v5 enables internal network scans via an SSRF vulnerability

    MediumCVSS 5.0No exploitEPSS 0%

    oxygenz · clipbucketFeb 12, 2026

  • CVE-2026-26997
    8Monitor

    ClipBucket v5 has Stored XSS via Collection name

    LowCVSS 2.0No exploitEPSS 0%

    oxygenz · clipbucketFeb 27, 2026