Skip to content
OpenAdvisories

Weakness (CWE)

CWE-480: Use of Incorrect Operator

Base Draft

The product accidentally uses the wrong operator, which changes the logic in security-relevant ways.

Source: MITRE CWE-480

3 results · Clear filters · Feed

  • Critical 9.8

    DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text

    DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched met…

  • Critical 9.4

    netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case fails unexpectedly when avx2 matching functions are used. The test first loads a ranomly generated pipa…

  • Critical 9.1

    Use of Incorrect Operator in polonel/trudesk

    Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.