-
CVE-2022-20120: A remote code execution (RCE) vulnerability in the bootloader on Pixel devices (10th May 2022)
Preface: Google Pixel is a brand of consumer electronic devices developed by Google that run either Chrome OS or the Android operating system. The Pixel brand was introduced in February 2013 with the first-generation Chromebook Pixel. The Pixel line includes laptops, tablets, and smartphones, as well as several accessories. Background: The Google Pixel is one…
-
CVE-2022-28165 for Brocade SANnav (6th May, 2022)
Preface: If you look into a Mainframe computer system, you will find Brocade SANS storage made use of Ficon connection. As times goes by, Hi-end supercomputer system still using this solution.Furthermore, Brocade products not limit the usage in supercomputer. The Fibre Channel storage networking and management solution are expanded to cloud computing. Becuase the Fibre…
-
About F5 network advisory – CVE-2022-1388 (5th May 2022)
Preface: A distributed hypermedia architect has only three fundamental options: 1) render the data where it is located and send a fixed-format image to the recipient; 2) encapsulate the data with a rendering engine and send both to the recipient; or, 3) send the raw data to the recipient along with metadata that describes the…
-
CVE-2022-30284 – Design weakness in the python-libnmap package (4th May 2022)
Preface: If you do a resources plan in large data center. Maybe you use nmap. E.g: Performs a list scan on the provided ranges and returns an NmapReport object including in your MIS report. Background: libnmap is a python library to parse nmap xml data. It supports python 3.6+. libnmap is a python library enabling…
-
About CVE-2022-0882 – Fuchsia allows illegal access to the kernel log (3rd May 2022)
Preface: Fuchsia is an IoT; first OS means OS for your fridge, RaspberryPi, car, TV, etc. Background: Zircon is the core platform that powers the Fuchsia OS. Zircon is composed of a microkernel (source in kernel/…) as well as a small set of userspace services, drivers, and libraries (source in system/…) necessary for the system…
-
hiccup, web server load balancing solution 3rd May 2022
Preface: Online banking cannot lack of load balancing solution today. However in terms of life cycle of operation system and software libaries , Java language development platform and on-demand custom fuctions. Does it bother the load balancing functions? The most challenging parts is the layer 7 load balancing. Perhaps you can do the healt check…
-
About CVE-2022-28197: NVIDIA Jetson Linux Driver Package design weakness (26-4-2022)
Preface: Embedded AI solutions on the Linux platform. With the superior performance, small size and low power consumption, it will be able to do more real-time processing at the demanding environment than ever before. Background: NVIDIA® Jetson Nano™ Developer Kit is a small, powerful computer that lets you run multiple neural networks in parallel for…
-
Redis vulnerabilities – Lua readonly tables (CVE-2022-24736, CVE-2022-24735) – 27th April 2022
Preface: Complex data queries not to use Redis as a Database.Big data and the new phenomenon open data are closely related but they’re not the same. Open data is information that is available to the public, regardless of its intended purpose. Background: Redis is designed to be accessed by trusted clients inside trusted environments. This…
-
Big data perspective , CVE-2022-24706: Apache CouchDB Remote Privilege Escalation (26th April 2022)
Preface: NoSQL is used for Big data and real-time web apps. Perhaps if you can manage big data, you can rule the AI zone in future. Background: NoSQL is used for Big data and real-time web apps. For example, companies like Twitter, Facebook and Google collect terabytes of user data every single day. There are…
-
CVE-2022-29078 EJS package Security Focus (25th April 2022)
Preface: EJS is one of the most popular template engines for JavaScript. One of the reasons to choose it is that EJS code looks like pure HTML. Background: EJS or Embedded Javascript Templating is a templating engine used by Node. js. The template engine helps to create an HTML template with minimal code. Also, it…