CWE-1023: Incomplete Comparison with Missing Factors
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
A kind of CWE-697 Incorrect Comparison.
From the CWE List. © The MITRE Corporation.
Newest
- hickory-dns Hickory DNS 0.26.0-beta.1 before 0.26.2 DNSSEC Validation Bypass via TrustAnchors 6.3 Medium
- randombit botan Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn 2.1 Low
- sensiolabs symfony Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass 2.3 Low
- lucasrodes whatstk Silent loss of messages when merging overlapping chat exports in whatstk 1.8 Low
- php IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes) 6.5 Medium
- No product listed Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone 8.8 High
- eclipse foundation ankaios In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control... 4.8 Medium
- openclaw clawscan OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors 2.4 Low
- microsoft visual studio code Visual Studio Code Security Feature Bypass Vulnerability 9.6 Critical
- grafana, grafana enterprise, oss +2 more Session takeover via Auth Proxy cache key collision 7.1 High
- cakephp queue CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions 3.7 Low
- laravel-backpack crud backpack/crud: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted 5.4 Medium
- nvidia dynamo NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache, where an... 7.5 High
- openclaw OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency 6.0 Medium
- sensiolabs symfony, symfony html-sanitizer +1 more Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> content 5.3 Medium
- openclaw OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation 6.0 Medium
- arista eos, extensible operating system +1 more Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass 6.9 Medium
- djangoproject django Potential exposure of private data via whitespace padding in Vary header 2.3 Low
- freebsd pf silently ignores certain rules 7.5 High
- kjur jsrsasign, red hat migration toolkit for virtualization 2.1, migration toolkit for virtualization 2.9 +5 more +7 more jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation 9.3 Critical
- bullwall ransomware containment BullWall Ransomware Containment incomplete file inspection 6.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 more Windows BitLocker Security Feature Bypass Vulnerability 6.1 Medium
- vllm vLLM has a Weakness in MultiModalHasher Image Hashing Implementation 4.2 Medium
- gitlab Incomplete Comparison with Missing Factors in GitLab 3.5 Low
- gallagher command centre, command center +1 more An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an... 7.1 High