FortiMail is a comprehensive and robust email security platform designed by Fortinet. It uses sophisticated detection methods to identify and block malicious and unsolicited emails.

Fortimail

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7.2.0 through 7.2.4, 7.0.0 through 7.0.6, FortiCamera versions 2.1.0 through 2.1.3, 2.0 all versions, 1.1 all versions, allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

CVE-2025-32756

Linux

Linux Kernel

SAP Visual Composer is a graphical modeling tool for creating web-based applications without coding. It allows users to design user interfaces, define data flows, and create business logic using drag-and-drop functionality. This tool is part of the SAP NetWeaver platform and is primarily used for rapid application development within SAP environments.

SAP Visual Composer

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.

CVE-2025-42999

Windows

Windows Cumulative Update

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

CVE-2025-31324

Commvault ContentStore is the main installation directory and runtime environment where all Commvault software components (like CommServe, MediaAgents, agents, and Command Center) are installed. It acts as the platform foundation for Commvault data protection and management services across the system.

Commvault

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP.





This issue affects Command Center Innovation Release: 11.38.

CVE-2025-34028

CBL Marine is an open source distro, created by Microsoft. Mainly used in Azure cloud and Microsoft Internally.

CBL Mariner

Erlang/OTP is a programming platform and runtime environment designed primarily for building concurrent, distributed, and fault-tolerant systems. It provides lightweight processes, message-passing concurrency, and built-in tools and libraries for managing application structure, reliability, and scalability.

Erlang OTP

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Linux openSUSE

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Project Photon OS is an open-source, minimal Linux container host that is optimized for cloud-native applications, cloud platforms, and VMware infrastructure.

Linux Photon

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

CVE-2025-32433

Alpine

Alpine Security Tracker

CBL-Mariner

Debian

Debian Security Tracker

Photon

Photon Security Advisory

Ubuntu

Ubuntu Security Tracker

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.

CVE-2025-46836

Chromium is an open-source browser project that serves as a base for the Google Chrome web browser. It aims to create a faster, more secure, and stable way for all Internet users to experience the web.

Chromium

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2025-4664

### Impact
Setting lower EVM call gas allows users to partially execute precompiles and error at specific points in the precompile code without reverting the partially written state. 
If executed on the distribution precompile when claiming funds, it could cause funds to be transferred to a user without resetting the claimable rewards to 0. The vulnerability could also be used to cause indeterministic execution by failing at other points in the code, halting validators.
Any evmOS or Cosmos EVM chain using precompiles is affected.
### Patches
The vulnerability was patched by wrapping each precompile execution into an atomic function that reverts any partially committed state on error.
- [evmos/os](https://github.com/evmos/os) patch file: https://drive.google.com/file/d/1LfC0WSrQOqwTOW3qfaE6t8Jqf1PLVtS_/
For chains using a different file structure, you must manually apply the diff:
### **In `x/evm/statedb.go`:**
Add the following function:
```go
func (s *StateDB) RevertMultiStore(cms storetypes.CacheMultiStore, events sdk.Events) {
	s.cacheCtx = s.cacheCtx.WithMultiStore(cms)
	s.writeCache = func() {
		// rollback the events to the ones
		// on the snapshot
		s.ctx.EventManager().EmitEvents(events)
		cms.Write()
	}
}
```
### **In `x/evm/statedb/journal.go`:**
Replace the `Revert` function with the following:
```go
func (pc precompileCallChange) Revert(s *StateDB) {
	// rollback multi store from cache ctx to the previous
	// state stored in the snapshot
	s.RevertMultiStore(pc.multiStore, pc.events)
}
```
### **In `precompiles/common/precompile.go`:**
Change the function signature in `HandleGasError` to:
```go
func HandleGasError(ctx sdk.Context, contract *vm.Contract, initialGas storetypes.Gas, err *error, stateDB *statedb.StateDB, snapshot snapshot) func() {
...
}
```
In the `HandleGasError` function, add the following line in the switch statement in the `case storetypes.ErrorOutOfGas:` case:
```go
stateDB.RevertMultiStore(snapshot.MultiStore, snapshot.Events)
```
Add the following function:
```go
// RunAtomic is used within the Run function of each Precompile implementation.
// It handles rolling back to the provided snapshot if an error is returned from the core precompile logic.
// Note: This is only required for stateful precompiles.
func (p Precompile) RunAtomic(s snapshot, stateDB *statedb.StateDB, fn func() ([]byte, error)) ([]byte, error) {
	bz, err := fn()
	if err != nil {
		// revert to snapshot on error
		stateDB.RevertMultiStore(s.MultiStore, s.Events)
	}
	return bz, err
}
```
### **All Precompiles:**
Finally, in each precompile, locate the `Run` function, and wrap each switch statement and return values into `p.RunAtomic`. For example:
```go
// Run executes the precompiled contract IBC transfer methods defined in the ABI.
func (p Precompile) Run(evm *vm.EVM, contract *vm.Contract, readOnly bool) (bz []byte, err error) {
	ctx, stateDB, snapshot, method, initialGas, args, err := p.RunSetup(evm, contract, readOnly, p.IsTransaction)
	if err != nil {
		return nil, err
	}
	// This handles any out of gas errors that may occur during the execution of a precompile tx or query.
	// It avoids panics and returns the out of gas error so the EVM can continue gracefully.
	defer cmn.HandleGasError(ctx, contract, initialGas, &err, stateDB, snapshot)()
        // === WRAP HERE ===
	return p.RunAtomic(snapshot, stateDB, func() ([]byte, error) {
		switch method.Name {
		// TODO Approval transactions => need cosmos-sdk v0.46 & ibc-go v6.2.0
		// Authorization Methods:
		case exampleCase:
			bz, err = p.example(ctx, evm.Origin, stateDB, method, args)
		default:
			return nil, fmt.Errorf(cmn.ErrUnknownMethod, method.Name)
		}
		if err != nil {
			return nil, err
		}
		cost := ctx.GasMeter().GasConsumed() - initialGas
		if !contract.UseGas(cost) {
			return nil, vm.ErrOutOfGas
		}
		if err := p.AddJournalEntries(stateDB, snapshot); err != nil {
			return nil, err
		}
		return bz, nil
	})
}
```
### Workarounds
There are no workarounds for chains that make use of precompiles. A coordinated upgrade is necessary to patch the issue.
### Testing
A test was introduced in the distribution precompile to ensure that partial state writes no longer occur when a lower gas amount is set.

GHSA-mjfq-3qr2-6g84

GoLang

GitHub Advisory Database

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web pages listed in the X-Mozilla-External-Attachment-URL header of an email. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.

CVE-2025-3932

Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email attachment (message/rfc822) and setting its content type to application/pdf, Thunderbird may incorrectly render it as HTML when opened, allowing the embedded JavaScript to run without requiring a file download. This behavior relies on Thunderbird auto-saving the attachment to /tmp and linking to it via the file:/// protocol, potentially enabling JavaScript execution as part of the HTML. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2025-32756	CRITICAL	9.6	Fortimail	cpe:2.3:a:fortinet:fortimail	Sim	Sim	May 13, 2025
CVE-2025-42999	CRITICAL	9.1	SAP Visual Composer		Não	Sim	May 13, 2025
CVE-2025-31324	CRITICAL	9.8	SAP Visual Composer		Sim	Sim	Apr 24, 2025
CVE-2025-34028	CRITICAL	10	Commvault	cpe:2.3:a:commvault:commvault	Sim	Sim	Apr 22, 2025
CVE-2025-32433	CRITICAL	N/A	CBL Mariner	N/A	Não	Sim	Apr 16, 2025

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2025-46836	MEDIUM	N/A	Linux Debian	net-tools	Não	Não	May 14, 2025
CVE-2025-4664	MEDIUM	N/A	Chromium	chromium	Não	Não	May 14, 2025
GHSA-mjfq-3qr2-6g84	HIGH	8.3	N/A	github.com/cosmos/evm	Não	Não	May 14, 2025
CVE-2025-3932	N/A	N/A	Linux Debian	thunderbird	Não	Não	May 14, 2025
CVE-2025-3909	N/A	N/A	Linux Debian	thunderbird	Não	Não	May 14, 2025

Banco de dados de vulnerabilidades Wiz

Explore por tecnologia

Filtros populares

Alto perfil

Último

Vulnerabilidades em números

O bom, o mau e o vulnerável

Recursos adicionais da Wiz

PEACH

Pronto para ver a Wiz em ação?