Vulnerabilities > Incorrect Comparison

DATE CVE VULNERABILITY TITLE RISK
2022-06-09 CVE-2021-27786 Incorrect Comparison vulnerability in Hcltech Onetest Server 10.0/10.1/10.2
Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner.
network
hcltech CWE-697
6.8
2022-05-26 CVE-2022-26691 Incorrect Comparison vulnerability in multiple products
A logic issue was addressed with improved state management.
6.7
2022-05-25 CVE-2022-31650 Incorrect Comparison vulnerability in SOX Project SOX 14.4.2
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.
local
low complexity
sox-project CWE-697
5.5
2022-04-11 CVE-2022-20072 Incorrect Comparison vulnerability in Google Android 11.0/12.0
In search engine service, there is a possible way to change the default search engine due to an incorrect comparison.
local
low complexity
google CWE-697
4.6
2022-04-04 CVE-2022-24787 Incorrect Comparison vulnerability in Vyperlang Vyper
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine.
network
low complexity
vyperlang CWE-697
7.5
2022-01-28 CVE-2021-44971 Incorrect Comparison vulnerability in Tenda Ac15 Firmware and AC5 Firmware
Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on.
network
low complexity
tenda CWE-697
critical
9.8
2022-01-25 CVE-2022-23027 Incorrect Comparison vulnerability in F5 products
On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile are configured on the same virtual server, undisclosed requests can cause the virtual server to stop processing new client connections.
network
low complexity
f5 CWE-697
5.0
2022-01-25 CVE-2021-34865 Incorrect Comparison vulnerability in Netgear products
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers.
low complexity
netgear CWE-697
8.8
2022-01-13 CVE-2022-22990 Incorrect Comparison vulnerability in Westerndigital MY Cloud OS
A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices.
low complexity
westerndigital CWE-697
8.8
2022-01-12 CVE-2021-40562 Incorrect Comparison vulnerability in Gpac
A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a denial of service.
local
low complexity
gpac CWE-697
5.5