Skip to content
OpenAdvisories

Weakness (CWE)

CWE-187: Partial String Comparison

Variant Incomplete

The product performs a string comparison that only examines a portion of the string before determining whether there is a match.

How to prevent it (1 mitigation)

  1. Testing

    Thoroughly test the comparison scheme before deploying code into production. Perform positive testing as well as negative testing.

Source: MITRE CWE-187

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-35031 Public exploit

    Jellyfin: Potential RCE via subtitle upload path traversal + .strm chain

    Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the subtitle upload endpoint (POST /Videos/{itemId}/Subtitles), where the Format field is not validated, allowing path traversal via the file exten…

    jellyfin jellyfin
  • Critical 10.0
    CVE-2024-41110 Public exploit EPSS 16%

    Moby authz zero length regression

    Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins (AuthZ) under specific circumstances…

    moby moby docker.io docker.io Debian Ubuntu Alpine Go