CWE-480.

Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.

• Apache Software Foundation Apache Kafka
• CWE-480

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability.

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• CWE-480

Keystone vulnerable to `graphql.maxTake` bypass with negative `take`

• CWE-20
• CWE-480

<6.5.3 · fixed in 6.5.3

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text

• HMBRAND DBI::SQL::Nano
• CWE-480

Envoy: Abnormal process termination in DNS UDP filter

• envoy
• CWE-480

pyzipper has an encryption bypass for small files encrypted using it

• CWE-480

<0.4.0 · fixed in 0.4.0

netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

• Linux kernel
• CWE-20
• CWE-480

pf silently ignores certain rules

• FreeBSD
• CWE-480
• CWE-754

Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching

• Juniper Networks Junos OS Evolved
• CWE-480

Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests

• asterisk
• Authentication bypass
• CWE-480

Use of Incorrect Operator in polonel/trudesk

• polonel/trudesk
• CWE-480

Logic error in authentication in proxy.py

• Authentication bypass
• CWE-480

<2.3.1 · fixed in 2.3.1