oxygenz kayıtları
oxygenz üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %52
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-502 Deserialization of Untrusted Data2
- CWE-770 Allocation of Resources Without Limits or Throttling1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-21875Kavram kanıtı | ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Commentsoxygenz · clipbucket · CWE-89 | Kritik9,8 | — | %1,7 | 7 Oca 2026 |
39İzleyin | CVE-2025-21624İstismar yok | ClipBucket V5 Playlist Cover File Upload to Remote Code Executionoxygenz · clipbucket · CWE-434 | Kritik9,8 | — | %1,2 | 7 Oca 2025 |
39İzleyin | CVE-2024-54136İstismar yok | Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Belowoxygenz · clipbucket · CWE-502 | Kritik9,8 | — | %0,7 | 6 Ara 2024 |
39İzleyin | CVE-2025-67418İstismar yok | ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administratoxygenz · clipbucket · CWE-798 | Kritik9,8 | — | %0,5 | 22 Ara 2025 |
37İzleyin | CVE-2026-25728İstismar yok | ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Conditionoxygenz · clipbucket · CWE-367 | Kritik9,3 | — | %0,4 | 10 Şub 2026 |
36İzleyin | CVE-2025-21622İstismar yok | ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Deleteoxygenz · clipbucket · CWE-22 | Kritik9,1 | — | %0,9 | 7 Oca 2025 |
35İzleyin | CVE-2024-54135İstismar yok | Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199oxygenz · clipbucket · CWE-502 | Yüksek8,8 | — | %0,7 | 6 Ara 2024 |
35İzleyin | CVE-2026-32321Kavram kanıtı | ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltrationoxygenz · clipbucket · CWE-89 | Yüksek8,8 | — | %0,5 | 18 Mar 2026 |
35İzleyin | CVE-2025-62709İstismar yok | ClipBucket v5 is vulnerable to password reset link manipulationoxygenz · clipbucket · CWE-640 | Yüksek8,8 | — | %0,3 | 20 Kas 2025 |
30İzleyin | CVE-2025-21623İstismar yok | ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Serviceoxygenz · clipbucket · CWE-22 | Yüksek7,5 | — | %1,1 | 7 Oca 2025 |
29İzleyin | CVE-2025-55912Kavram kanıtı | An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php toxygenz · clipbucket · CWE-434 | Yüksek7,3 | — | %1,5 | 18 Eyl 2025 |
28İzleyin | CVE-2025-62429Kavram kanıtı | ClipBucket v5 executes arbitrary PHP codeoxygenz · clipbucket · CWE-94 | Yüksek7,2 | — | %0,8 | 20 Eki 2025 |
28İzleyin | CVE-2025-62423İstismar yok | ClipBucket V5 Blind SQL injection in the Admin Paneloxygenz · clipbucket · CWE-89 | Yüksek7,2 | — | %0,5 | 16 Eki 2025 |
28İzleyin | CVE-2025-64336İstismar yok | ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Titleoxygenz · clipbucket · CWE-79 | Yüksek7,2 | — | %0,3 | 7 Kas 2025 |
28İzleyin | CVE-2025-64339İstismar yok | ClipBucket v5: Stored XSS Vulnerability in Manage Playlistsoxygenz · clipbucket · CWE-79 | Yüksek7,2 | — | %0,2 | 7 Kas 2025 |
26İzleyin | CVE-2025-55911Kavram kanıtı | An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameteroxygenz · clipbucket · CWE-77 | Orta6,5 | — | %1,0 | 18 Eyl 2025 |
26İzleyin | CVE-2025-62424İstismar yok | ClipBucket path traversal vulnerability in template editor allows arbitrary file read and writeoxygenz · clipbucket · CWE-22 | Orta6,5 | — | %0,9 | 17 Eki 2025 |
26İzleyin | CVE-2025-64114İstismar yok | ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields pluginoxygenz · clipbucket · CWE-89 | Orta6,5 | — | %0,4 | 6 Kas 2025 |
26İzleyin | CVE-2025-65113İstismar yok | ClipBucket v5 Unauthenticated Object Flagging Vulnerabilityoxygenz · clipbucket · CWE-770 | Orta6,5 | — | %0,3 | 29 Kas 2025 |
22İzleyin | CVE-2026-28354İstismar yok | ClipBucket v5 has IDOR in Collection Item Managementoxygenz · clipbucket · CWE-639 | Orta5,7 | — | %0,3 | 27 Şub 2026 |
21İzleyin | CVE-2025-62430İstismar yok | ClipBucket v5 stored XSS via video/photo fieldsoxygenz · clipbucket · CWE-79 | Orta5,4 | — | %0,2 | 17 Eki 2025 |
21İzleyin | CVE-2025-62715İstismar yok | ClipBucket v5: Stored XSS via Collection Tagsoxygenz · clipbucket · CWE-79 | Orta5,3 | — | %0,2 | 4 Kas 2025 |
20İzleyin | CVE-2025-64338İstismar yok | ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Nameoxygenz · clipbucket · CWE-79 | Orta5,1 | — | %0,4 | 7 Kas 2025 |
20İzleyin | CVE-2026-26005İstismar yok | ClipBucket v5 enables internal network scans via an SSRF vulnerabilityoxygenz · clipbucket · CWE-918 | Orta5,0 | — | %0,3 | 12 Şub 2026 |
8İzleyin | CVE-2026-26997İstismar yok | ClipBucket v5 has Stored XSS via Collection nameoxygenz · clipbucket · CWE-79 | Düşük2,0 | — | %0,2 | 27 Şub 2026 |
- CVE-2026-2187540Planlayın
ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
KritikCVSS 9,8Kavram kanıtıEPSS %1oxygenz · clipbucket7 Oca 2026
- CVE-2025-2162439İzleyin
ClipBucket V5 Playlist Cover File Upload to Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %1oxygenz · clipbucket7 Oca 2025
- CVE-2024-5413639İzleyin
Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below
KritikCVSS 9,8İstismar yokEPSS %0oxygenz · clipbucket6 Ara 2024
- CVE-2025-6741839İzleyin
ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrat
KritikCVSS 9,8İstismar yokEPSS %0oxygenz · clipbucket22 Ara 2025
- CVE-2026-2572837İzleyin
ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
KritikCVSS 9,3İstismar yokEPSS %0oxygenz · clipbucket10 Şub 2026
- CVE-2025-2162236İzleyin
ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete
KritikCVSS 9,1İstismar yokEPSS %0oxygenz · clipbucket7 Oca 2025
- CVE-2024-5413535İzleyin
Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199
YüksekCVSS 8,8İstismar yokEPSS %0oxygenz · clipbucket6 Ara 2024
- CVE-2026-3232135İzleyin
ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration
YüksekCVSS 8,8Kavram kanıtıEPSS %0oxygenz · clipbucket18 Mar 2026
- CVE-2025-6270935İzleyin
ClipBucket v5 is vulnerable to password reset link manipulation
YüksekCVSS 8,8İstismar yokEPSS %0oxygenz · clipbucket20 Kas 2025
- CVE-2025-2162330İzleyin
ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service
YüksekCVSS 7,5İstismar yokEPSS %1oxygenz · clipbucket7 Oca 2025
- CVE-2025-5591229İzleyin
An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php t
YüksekCVSS 7,3Kavram kanıtıEPSS %1oxygenz · clipbucket18 Eyl 2025
- CVE-2025-6242928İzleyin
ClipBucket v5 executes arbitrary PHP code
YüksekCVSS 7,2Kavram kanıtıEPSS %0oxygenz · clipbucket20 Eki 2025
- CVE-2025-6242328İzleyin
ClipBucket V5 Blind SQL injection in the Admin Panel
YüksekCVSS 7,2İstismar yokEPSS %0oxygenz · clipbucket16 Eki 2025
- CVE-2025-6433628İzleyin
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
YüksekCVSS 7,2İstismar yokEPSS %0oxygenz · clipbucket7 Kas 2025
- CVE-2025-6433928İzleyin
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
YüksekCVSS 7,2İstismar yokEPSS %0oxygenz · clipbucket7 Kas 2025
- CVE-2025-5591126İzleyin
An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
OrtaCVSS 6,5Kavram kanıtıEPSS %1oxygenz · clipbucket18 Eyl 2025
- CVE-2025-6242426İzleyin
ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write
OrtaCVSS 6,5İstismar yokEPSS %0oxygenz · clipbucket17 Eki 2025
- CVE-2025-6411426İzleyin
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
OrtaCVSS 6,5İstismar yokEPSS %0oxygenz · clipbucket6 Kas 2025
- CVE-2025-6511326İzleyin
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0oxygenz · clipbucket29 Kas 2025
- CVE-2026-2835422İzleyin
ClipBucket v5 has IDOR in Collection Item Management
OrtaCVSS 5,7İstismar yokEPSS %0oxygenz · clipbucket27 Şub 2026
- CVE-2025-6243021İzleyin
ClipBucket v5 stored XSS via video/photo fields
OrtaCVSS 5,4İstismar yokEPSS %0oxygenz · clipbucket17 Eki 2025
- CVE-2025-6271521İzleyin
ClipBucket v5: Stored XSS via Collection Tags
OrtaCVSS 5,3İstismar yokEPSS %0oxygenz · clipbucket4 Kas 2025
- CVE-2025-6433820İzleyin
ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
OrtaCVSS 5,1İstismar yokEPSS %0oxygenz · clipbucket7 Kas 2025
- CVE-2026-2600520İzleyin
ClipBucket v5 enables internal network scans via an SSRF vulnerability
OrtaCVSS 5,0İstismar yokEPSS %0oxygenz · clipbucket12 Şub 2026
- CVE-2026-269978İzleyin
ClipBucket v5 has Stored XSS via Collection name
DüşükCVSS 2,0İstismar yokEPSS %0oxygenz · clipbucket27 Şub 2026