CWE-697: Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
From the CWE List. © The MITRE Corporation.
Newest
- zephyrproject zephyrARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers7.8 High
- red hat openshift-ansible, redhat openshift container platform +1 moreA flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive...5.9 Medium
- proofpoint email protectionAn issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores...3.7 Low
- bec technologies multiple routers, dlink dir-867 firmware, dir-878 firmware +1 more +3 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- unraidUnraid 6.8.0 allows authentication bypass.7.5 High
- d-link dap-2610, dlink dap-2610 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- sodiumoxide project sodiumoxideIncorrect Comparison in sodiumoxide9.8 Critical
- apache tapestryTiming attack on HMAC signature comparison in Apache Tapestry9.8 Critical
- cure53 dompurifyDOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS5.1 Medium
- secure-compare project secure-compare, hackerone secure-compare node module +1 moreInsecure Comparison in secure-compare5.3 Medium
- squid-cache squidIncorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1...7.5 High
- google chromeGoogle Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote...5.0 Medium
- linux kernelxattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the...7.5 High