11 matches found
CVE-2026-80679
A flaw was found in the Linux kernel. Specifically, within the s390/dasd component, the dasdreleasespace function incorrectly checks a function pointer by using a logical AND operator instead of a logical OR operator. This error can lead to a NULL pointer dereference, which may cause a system cra...
CVE-2021-3797
hestiacp is vulnerable to Use of Wrong Operator in String Comparison...
CVE-2021-4259: Use of Wrong Operator in String Comparison
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 i...
CVE-2021-4259
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 i...
CVE-2022-36072: Use of Wrong Operator in String Comparison
SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP, hashes generated by built-in functions and starting with the 0e symbols were being handled as zero multiplied with the e number. Therefore, the hash value w...
CVE-2021-3797
hestiacp is vulnerable to Use of Wrong Operator in String Comparison...
CVE-2021-3797
hestiacp is vulnerable to Use of Wrong Operator in String Comparison...
Design/Logic Flaw
hestiacp is vulnerable to Use of Wrong Operator in String Comparison...
CVE-2021-3797
The CVE-2021-3797 entry for hestiacp has concrete technical details in connected data: in huntr’s description of hestiacp/hestiacp, a CSRF token check uses the != operator to compare $_SESSION["token"] with $_GET["token"] in index.php. This type juggling can bypass the CSRF token, enabling CSRF a...