CWE-697: Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
From the CWE List. © The MITRE Corporation.
Newest
- sound exchange project exchangeIn SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.5.5 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6755, mt6755s, mt6761, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8797 +1 moreIn search engine service, there is a possible way to change the default search engine due to an...6.7 Medium
- vyperlang vyperIncorrect Comparison in Vyper7.5 High
- tenda ac15 firmware, ac5 firmware +1 moreMultiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12...5.3 Medium
- bec technologies multiple routers, netgear ac2100 firmware, ac2400 firmware +15 more +17 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- western digital my cloud, westerndigital my cloud os +1 moreLimited authentication bypass vulnerability on Western Digital My Cloud devices7.8 High
- gpacA Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using...5.5 Medium
- unicorn-engine unicorn engineAn issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows...8.1 High
- cvxopt project cvxopt, fedoraproject fedora +1 moreIncorrect Comparison in cvxopt7.5 High
- numpy, oracle communications cloud native core policy +1 moreIncorrect Comparison in NumPy5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14...4.3 Medium
- gallagher command centre, command center +1 moreAn Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an...7.1 High
- gjson project gjsongithub.com/tidwall/gjson Vulnerable to REDoS attack7.5 High
- artica integria imsIntegria IMS incorrect authorization9.8 Critical
- nltk, nltk nltk/nltk +1 moreInefficient Regular Expression Complexity in nltk/nltk7.5 High
- josdejong josdejong/jsoneditor, jsoneditoronline jsoneditor +1 moreInefficient Regular Expression Complexity in josdejong/jsoneditor5.3 Medium
- leoeditor leoRegular Expression Denial of Service in Leo Editor7.5 High
- jpeg libjpegAn issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the...6.5 Medium
- ansi-regex project ansi-regex, chalk chalk/ansi-regex, oracle communications cloud native core policy +2 moreInefficient Regular Expression Complexity in chalk/ansi-regex7.5 High
- vuelidate vuelidate/vuelidate, vuelidate project vuelidate +1 moreInefficient Regular Expression Complexity in vuelidate/vuelidate7.5 High
- envoyproxy envoyIncorrectly handling of URI '#fragment' element as part of the path element8.6 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +173 more +175 moreChild process can leak information from parent process due to numeric pids are getting compared...6.2 Medium
- chatwoot, chatwoot chatwoot/chatwoot +1 moreInefficient Regular Expression Complexity in chatwoot/chatwoot7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.6.1 Medium
- restsharpIncorrect Regular Expression in RestSharp7.5 High
- netgear wac104 firmwareNETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in ...9.8 Critical
- voxmedia coral talkTalk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other...7.5 High
- dovecot, fedoraproject fedora +1 moreThe Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as...4.3 Medium
- facebook react-nativeRegular expression denial of service in react-native7.5 High
- etherpad ueberdbIn Etherpad UeberDB < 0.4.4, due to MySQL omitting trailing spaces on char / varchar columns...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a Blob URL was loaded through some unusual user interaction, it could have been loaded by the...8.8 High
- freebsdIn FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11...5.3 Medium
- linux kernelA denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c...5.5 Medium
- phplistphpList 3.5.3 allows type juggling for login bypass because == is used instead of === for...9.8 Critical
- oscommerceoscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where...9.8 Critical
- webidsupport webidWeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because...9.8 Critical
- codiadCodiad Vulnerable to PHP Magic Hash Vulnerability7.5 High
- freyrscada iec-60879-5-104 server simulatorA denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC...5.9 Medium
- proxy.py project proxy.pyLogic error in authentication in proxy.py7.5 High
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of service via malformed network packet7.5 High
- postgresql, debian linux +1 moreIncorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL7.5 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security update6.5 Medium
- simpleledger slp-validate, slp-validate.js +1 moreFalse-positive validity for NFT1 genesis transactions in SLP Validate7.5 High
- simpleledger slpjsFalse-positive validity for NFT1 genesis transactions in SLPJS7.5 High
- verbb knock knockKnock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header9.1 Critical
- simpleledger slp-validateFalse-negative validation results in MINT transactions with invalid baton8.6 High
- simpleledger slpjsFalse-negative validation results in MINT transactions with invalid baton8.6 High
- zephyrproject zephyrARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers7.8 High
- Show moreLoading…