SAP Visual Composer is a graphical modeling tool for creating web-based applications without coding. It allows users to design user interfaces, define data flows, and create business logic using drag-and-drop functionality. This tool is part of the SAP NetWeaver platform and is primarily used for rapid application development within SAP environments.

SAP Visual Composer

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

CVE-2025-31324

Linux

Linux Kernel

Windows

Windows Cumulative Update

Commvault ContentStore is the main installation directory and runtime environment where all Commvault software components (like CommServe, MediaAgents, agents, and Command Center) are installed. It acts as the platform foundation for Commvault data protection and management services across the system.

Commvault

A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution.





This issue affects Command Center Innovation Release: 11.38.

CVE-2025-34028

CBL Marine is an open source distro, created by Microsoft. Mainly used in Azure cloud and Microsoft Internally.

CBL Mariner

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Linux openSUSE

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Project Photon OS is an open-source, minimal Linux container host that is optimized for cloud-native applications, cloud platforms, and VMware infrastructure.

Linux Photon

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

CVE-2025-32433

Alpine

Alpine Security Tracker

CBL-Mariner

Debian

Debian Security Tracker

Photon

Photon Security Advisory

Ubuntu

Ubuntu Security Tracker

Yii is a high-performance, open-source PHP framework designed for rapid web application development. It utilizes the Model-View-Controller (MVC) design pattern and offers robust security features. Yii excels in handling large-scale data and reusable code components.

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

CVE-2024-58136

Composer

GitHub Advisory Database

CrushFTP is a proprietary multi-protocol, multi-platform file transfer server.

CrushFTP

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy instance is used), as exploited in the wild in March and April 2025, aka "Unauthenticated HTTP(S) port access." A race condition exists in the AWS4-HMAC (compatible with S3) authorization method of the HTTP component of the FTP server. The server first verifies the existence of the user by performing a call to login_user_pass() with no password requirement. This will authenticate the session through the HMAC verification process and up until the server checks for user verification once more. The vulnerability can be further stabilized, eliminating the need for successfully triggering a race condition, by sending a mangled AWS4-HMAC header. By providing only the username and a following slash (/), the server will successfully find a username, which triggers the successful anypass authentication process, but the server will fail to find the expected SignedHeaders entry, resulting in an index-out-of-bounds error that stops the code from reaching the session cleanup. Together, these issues make it trivial to authenticate as any known or guessable user (e.g., crushadmin), and can lead to a full compromise of the system by obtaining an administrative account.

CVE-2025-31161

JavaScript is a high-level, interpreted programming language essential for creating interactive web applications, running directly in web browsers to enable dynamic content and user interface enhancements. It is integral to the web development stack, working seamlessly with HTML and CSS to build responsive and feature-rich websites.

JavaScript

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability.

CVE-2025-46573

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user in the Auth0 tenant during SAML authentication by crafting a SAMLResponse. This can be done by using a valid SAML object that was signed by the configured IdP. Users are affected specifically when the service provider is using passport-wsfed-saml2 and a valid SAML document signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability.

CVE-2025-46572

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

CVE-2025-47256

Rust is a multi-paradigm programming language focused on performance and safety, especially safe concurrency.

Rust

ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.

GHSA-58xc-hpvq-8473

goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c`, thus allowing anyone to execute arbitrary command through the use of websockets. Version 1.0.5 fixes the issue.

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2025-31324	CRITICAL	9.8	SAP Visual Composer		Sim	Sim	Apr 24, 2025
CVE-2025-34028	CRITICAL	10	Commvault	cpe:2.3:a:commvault:commvault	Sim	Sim	Apr 22, 2025
CVE-2025-32433	CRITICAL	N/A	CBL Mariner	N/A	Não	Sim	Apr 16, 2025
CVE-2024-58136	CRITICAL	9.8	Yii	yiisoft/yii2	Sim	Sim	Apr 10, 2025
CVE-2025-31161	CRITICAL	9.8	CrushFTP	crushftp	Sim	Sim	Apr 03, 2025

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2025-46573	MEDIUM	N/A	JavaScript	passport-wsfed-saml2	Não	Sim	May 06, 2025
CVE-2025-46572	MEDIUM	N/A	JavaScript	passport-wsfed-saml2	Não	Sim	May 06, 2025
CVE-2025-47256	MEDIUM	N/A	Linux Debian	libxmp	Não	Não	May 06, 2025
GHSA-58xc-hpvq-8473	LOW	N/A	Rust	redox_uefi_std	Não	Sim	May 06, 2025
CVE-2025-46816	CRITICAL	9.4	N/A	github.com/patrickhener/goshs	Não	Sim	May 06, 2025

Banco de dados de vulnerabilidades Wiz

Explore por tecnologia

Filtros populares

Alto perfil

Último

Vulnerabilidades em números

O bom, o mau e o vulnerável

Recursos adicionais da Wiz

PEACH

Pronto para ver a Wiz em ação?