CWE-697: Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
From the CWE List. © The MITRE Corporation.
Newest
- multibit hdMultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable...5.3 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.5 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Exposed Dangerous Method Vulnerability6.8 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Exposed Dangerous Method Vulnerability6.8 Medium
- trustedfirmware trusted firmware-mIn Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator...7.5 High
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin non-constant time token comparison7.5 High
- jenkins azure ad, jenkins project azure ad plugin +1 moreNon-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin7.5 High
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.8 Medium
- apache nifiApache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs6.5 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.8 Medium
- solarwinds platformSolarWinds Platform Incorrect Comparison Vulnerability7.2 High
- solarwinds platformSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- solarwinds platformSolarWinds Platform Incomplete List of Disallowed Inputs Vulnerability7.2 High
- honeywell experion server, direct station, engineering station +1 more +3 moreServer bad parsing implementation - stack overflow in server::get_db_path_for_driver7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.c6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.c6.2 Medium
- functional sentrySentry CORS misconfiguration vulnerability6.8 Medium
- dynamic-linq linqDynamic Linq vulnerable to remote code execution9.8 Critical
- apache openmeetingsApache OpenMeetings: insufficient check of invitation hash5.3 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by...5.3 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed...6.5 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling6.5 Medium
- d-link dir-1935, dlink dir-1935 firmware +1 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- netgear r6700v3, lax20 firmware, r6400 firmware +21 more +23 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- google tensorflowTensorFlow has Floating Point Exception in AudioSpectrogram7.5 High
- google tensorflowTensorFlow has Floating Point Exception in AvgPoolGrad with XLA7.5 High
- google tensorflowTensorFlow has Floating Point Exception in TensorListSplit with XLA7.5 High
- google tensorflowTensorFlow has Segfault in Bincount with XLA7.5 High
- google tensorflowTensorFlow has Floating Point Exception in TFLite in conv kernel7.5 High
- playsmsA type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows...9.8 Critical
- dell supportassist for home pcs, supportassist client consumer +1 moreDell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain...6.5 Medium
- lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreThe Remote Mount feature can potentially be abused by valid, authenticated users to make...2.7 Low
- mrobit robitailletheknotmrobit robitailletheknot CSRF Token filters.php comparison3.1 Low
- alpine project alpineAuthentication bypass in Alpine6.5 Medium
- vim, vim vim/vim +1 moreFloating Point Comparison with Incorrect Operator in vim/vim6.8 Medium
- gocdGoCD API authentication of user access tokens subject to timing attack during comparison6.5 Medium
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An...6.8 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream...5.5 Medium
- squid-cache squidsquid: Fix of 2 CVEs6.5 Medium
- zulip, zulip zulip-mobile +1 moreCrafted link in Zulip message can cause disclosure of credentials8.0 High
- litejs uri-template-liteReDoS in uri-template-lite URI.expand function5.9 Medium
- eth-accountReDoS in eth-account encode_structured_data function5.9 Medium
- xpdf project xpdfXPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream:...5.5 Medium
- jpeg quant smooth project quant smoothjpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg...5.5 Medium
- fdkaac project fdkaacfdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at ...5.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.5.5 Medium
- jetbrains ktorJetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack4.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot6.5 Medium
- hcl software onetest serverHCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted4.6 Medium
- apple macos, cups, mac os x +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in Security...6.7 Medium
- Show moreLoading…