-
CVE-2022-25255 – Missing validation of binaries executed via Qprocess (21st Feb 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: QProcess…
-
About CVE-2022-25375
Preface: In 2017, half of the world’s top 50 supercomputers used SUSE Enterprise Linux Server. Why does Linux dominate especially in supercomputer market? Linux is a free, open source operating system (OS), released under the GNU General Public License (GPL). Anyone can inspect or modify software “Source code”. Because of Linux cluster break the traditional…
-
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7 (17th Feb 2022)
Preface: The DOMParser interface provides the ability to parse XML or HTML source code from a string into a DOM Document .A module that parses a string as regular expression and returns the parsed value. it is the regular expression solution. Background: The “url-parse” was created in 2014 when the WHATWG URL API was not…
-
About CVE-2022-22945 – CLI shell injection vulnerability (16th Feb, 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: NSX…
-
CVE-2022-23587 – Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. (15th Feb 2022)
Preface: The number 2,147,483,647 (or hexadecimal 7FFF,FFFF) is the maximum positive value for a 32-bit signed binary integer. Background: TensorFlow is an end-to-end open source platform for machine learning. It has a comprehensive, flexible ecosystem of tools, libraries and community resources that lets researchers push the state-of-the-art in ML and developers easily build and deploy…
-
About CVE-2022-21818 (NIVIDIA License System) – 15th Feb 2022
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: NVIDIA…
-
CVE-2022-0572 – Heap-based Buffer Overflow in vim (13th Feb, 2022)
Preface: The registration of CVE records is largely out of sync with the time of the event. Perhaps the new release of CVE record by today, however it was happened few weeks or months ago. But with reference of these vulnerabilities records. Vulnerability scanner can precisely provide a result to you after scan. Background: Vim…
-
About CVE-2021-44850 – Zynq 7000 SoC devices design weakness (10th Feb 2022)
Preface: SOC → System on Chip. It is basically a cluster collection or group of different types of processor components like CPU[,GPU,Modems, DSP units and memory units. ASIC → Application Specific Integrated Circuits. ASICs are chip that is basically hardwired to do a specific job. Background: The SD/SDIO controller is compatible with the standard SD…
-
Design weakness found on SwiftNIO HTTP2 (9th Feb 2022)
Preface: Apple has announced the launch of its new operating system, macOS 10.15 Catalina on October 7, 2019. In keeping with Apple’s release cycle, macOS 10.12 Sierra will no longer be receiving security updates. Sierra was replaced by High Sierra 10.13, Mojave 10.14, and the newest Catalina 10.15. Background: SwiftNIO is Apple non-blocking networking library.…
-
About CVE-2022-21173 – ELECOM LAN Router design weakness (8th Feb, 2022)
Preface: Did you know someone is behind your computer? Background: WRH–300x series is wireless LAN router for microminiature hotel corresponding to 11bgn300Mbps which can enjoy the Internet with the speed of about 4 times of LTE line. Ref: 11BGN, 11AGN, and 11AC are wireless standards supported by wireless products. Among them, 11BGN refers to the…