CWE-697
Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.
161 vulnerabilities with CWE-697
CVE-2022-38179
MEDIUM
JetBrains Ktor <2.1.0 - Code Injection
CVSS 4.7
CVE-2022-22203
MEDIUM
Juniper Networks Junos OS <19.4R3-S4 - DoS
CVSS 6.5
CVE-2022-26691
MEDIUM
CUPS < 2.4.2 - Privilege Escalation via Incorrect Comparison
CVSS 6.7
CVE-2022-31650
MEDIUM
SoX 14.4.2 - Memory Corruption
CVSS 5.5
CVE-2022-20072
MEDIUM
Search Engine Service - Privilege Escalation
CVSS 6.7
CVE-2022-24787
HIGH
vyper < 0.3.1 - Incorrect Bytestring Comparison
CVSS 7.5
CVE-2022-23027
MEDIUM
F5 BIG-IP 12.1.5.3-12.1.6 - Denial of Service via FastL4 and HTTP/FIX/Hash Persistence Profile Conflict
CVSS 5.3
CVE-2022-22990
HIGH
Western Digital My Cloud OS < 5.19.117 - Authentication Bypass and Remote Code Execution via Access Token Validation
CVSS 7.8
CVE-2021-47370
MEDIUM
Linux Kernel 5.14.7-5.14.9 - Denial of Service via MPTCP Size Goal Comparison
CVSS 5.5
CVE-2021-38364
MEDIUM
ONOS 2.5.1 - Incorrect Flow Rule Comparison via Intent Manipulation
CVSS 6.5
CVE-2021-27786
MEDIUM
HCL OneTest Server - Permissive Cross-domain Security Policy with Untrusted Domains
CVSS 4.6
CVE-2021-44971
CRITICAL
Tenda AC15 and AC5 Firmware - Authentication Bypass
CVSS 9.8
CVE-2021-34865
HIGH
NETGEAR Multiple Router Models Firmware - Unauthenticated Authentication Bypass
CVSS 8.8
CVE-2021-40562
MEDIUM
Gpac < 1.0.1 - Denial of Service via naludmx_enqueue_or_dispatch Function
CVSS 5.5
CVE-2021-44078
HIGH
Unicorn Engine < 2.0.0-rc5 - Sandbox Escape via Faulty GVA/GPA Comparison
CVSS 8.1
CVE-2021-41500
HIGH
cvxopt <= 1.2.6 - Denial of Service via Fake Capsule Object in cholmod APIs
CVSS 7.5
CVE-2021-34141
MEDIUM
NumPy < 1.22.0 - Incorrect String Comparison in numpy.core
CVSS 5.3
CVE-2021-39917
MEDIUM
GitLab 12.9-14.3.5, 14.4-14.4.3, 14.5-14.5.1 - Denial of Service via Quick Actions Regex Backtracking
CVSS 4.3
CVE-2021-23146
HIGH
Gallagher Controller <8.40.1888 - Auth Bypass
CVSS 7.1
CVE-2021-3833
CRITICAL
Integria IMS - Authentication Bypass via MD5 Hash Loose Comparison
CVSS 9.8
CVE-2021-3828
HIGH
nltk - Inefficient Regular Expression Complexity
CVSS 7.5
CVE-2021-39514
MEDIUM
libjpeg < 2020021 - Denial of Service via Floating Point Exception in ACLosslessScan::ParseMCU()
CVSS 6.5
CVE-2021-1904
MEDIUM
Qualcomm APQ8009 and related firmwares - Information Disclosure via PID Reuse Comparison
CVSS 6.2
CVE-2021-32779
HIGH
Envoy 1.16.0-1.16.4 - Privilege Escalation via URI Fragment Mishandling
CVSS 8.6
CVE-2021-37550
HIGH
JetBrains YouTrack <2021.2.16363 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
161