Advisories · Weakness
CWE-697.
Every Advisory and CVE whose sources give the weakness CWE-697, newest first.
- CVSS 5.3 Medium
Incorrect Comparison in NumPy
- CWE-697
<1.22 · fixed in 1.22
GHSA-fpfv-jqm9-f5jm · CVE-2021-34141 - CVSS 7.5 High
github.com/tidwall/gjson Vulnerable to REDoS attack
- Denial of service
- CWE-697
<1.9.3 · fixed in 1.9.3
GHSA-c9gm-7rfj-8w5h · CVE-2021-42248 - CVSS 9.8 CriticalCritical · CVSS 9+
Integria IMS incorrect authorization
- Ártica Integria IMS
- CWE-697
- CVSS 5.3 Medium
Regular Expression Denial of Service in jsoneditor
- Denial of service
- CWE-697
<9.5.6 · fixed in 9.5.6
GHSA-hhfg-6hfc-rvxm · CVE-2021-3822 - CVSS 7.5 High
NLTK Vulnerable to REDoS
- Denial of service
- CWE-697
<3.6.4 · fixed in 3.6.4
GHSA-2ww3-fxvq-293j · CVE-2021-3828 - CVSS 7.5 High
Regular Expression Denial of Service in Leo Editor
- Denial of service
- CWE-697
<6.3 · fixed in 6.3
GHSA-x38q-xg2h-rxgx · CVE-2020-23478 - CVSS 7.5 High
Inefficient Regular Expression Complexity in vuelidate
- Denial of service
- CWE-697
<2.0.0-alpha.22 · fixed in 2.0.0-alpha.22
GHSA-vvf2-ppj9-pp49 · CVE-2021-3794 - CVSS 7.5 High
Inefficient Regular Expression Complexity in chalk/ansi-regex
- Denial of service
- CWE-697
>=3.0.0, <3.0.1 || >=4.0.0, <4.1.1 || >=5.0.0, <5.0.1 || >=6.0.0, <6.0.1 · fixed in 3.0.1, 4.1.1, 5.0.1, 6.0.1
GHSA-93q8-gq69-wqmw · CVE-2021-3807 - CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect Comparison in sodiumoxide
- CWE-697
>=0.2.0, <0.2.5 · fixed in 0.2.5
GHSA-wrvc-72w7-xpmj · CVE-2019-25002 - CVSS 7.5 High
Regular expression denial of service in react-native
- Denial of service
- CWE-697
>=0.59.0, <0.62.3 || >=0.63.0, <0.64.1 · fixed in 0.62.3, 0.64.1
GHSA-7f53-fmmv-mfjv · CVE-2020-1920 - CVSS 6.1 Medium
Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.
- Juniper Networks Junos OS
- CWE-697
- CVSS 7.5 High
Incorrect Regular Expression in RestSharp
- CWE-185
- CWE-697
<106.11.8-alpha.0.13 · fixed in 106.11.8-alpha.0.13
GHSA-9pq7-rcxv-47vq · CVE-2021-27293 - CVSS 7.5 High
Logic error in authentication in proxy.py
- Authentication bypass
- CWE-480
<2.3.1 · fixed in 2.3.1
GHSA-cmc7-mfmr-xqrx · CVE-2021-3116 -
Incorrect comparison in kernel
- kernel
- CWE-697
- CVSS 7.5 High
False-positive validity for NFT1 genesis transactions
- CWE-697
<1.2.2 · fixed in 1.2.2
GHSA-6jmr-jfh7-xg3h · CVE-2020-15131 - CVSS 7.5 High
False-positive validity for NFT1 genesis transactions in SLPJS
- CWE-697
<0.27.4 · fixed in 0.27.4
GHSA-cc2p-4jhr-xhhx · CVE-2020-15130 - CVSS 8.6 High
False-negative validation results in MINT transactions with invalid baton
- CWE-697
<1.2.1 · fixed in 1.2.1
GHSA-4w97-57v2-3w44 · CVE-2020-11072 - CVSS 8.6 High
False-negative validation results in MINT transactions with invalid baton
- CWE-697
<0.27.2 · fixed in 0.27.2
GHSA-jc83-cpf9-q7c6 · CVE-2020-11071 - CVSS 7.8 High
ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers
- zephyr
- CWE-697
- CVSS 7.8 High
ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers
- zephyr
- CWE-697
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Incorrect comparison in D-Link Multiple Routers
- D-Link Multiple Routers
- CWE-697
- CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV
Unraid 6.8.0 allows authentication bypass.
- CWE-697
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Incorrect comparison in D-Link DAP-2610
- D-Link DAP-2610
- CWE-697
- CVSS 9.8 CriticalCritical · CVSS 9+
Timing attack on HMAC signature comparison in Apache Tapestry
- Information disclosure
- CWE-697
>=5.4, <5.4.5 · fixed in 5.4.5
GHSA-fgmr-vx7c-5wj6 · CVE-2019-10071 -
Insecure Comparison in secure-compare
- CWE-697
<3.0.1 · fixed in 3.0.1
GHSA-h9x2-5rm7-x4gm · CVE-2015-9238