Comparison Overview
Design Cafe
Design Cafe
#39, St. Marks Road, Bengaluru, 560001, IN
Last Update: 14/02/2026
DesignCafe, India's best Home Interior Design solutions company, was founded in Bangalore and is now present in more than 17 Indian cities. DesignCafe was founded with a mission to democratise good interior design solutions for middle-class homemakers in India. We beli...
HDR
1917 S 67th St, Omaha, 68106, US
Last Update: 01/04/2026
HDR is an employee-owned design firm specializing in engineering, architecture, environmental and construction services. We’re ranked No. 6 among the world’s design firms and we’re the largest healthcare design firm. Led by the strength of our values and a culture shap...
Compliance Ranges Comparison
Design Cafe
HDR
Benchmark & Cyber Underwriting Signals
Incidents vs Design Services Industry Avg (This Year)
No incidents recorded for Design Cafe in 2026.
Incidents vs Design Services Industry Avg (This Year)
No incidents recorded for HDR in 2026.
Incident History - Design Cafe (X = Date, Y = Severity)
Design Cafe cyber incidents detection timeline including parent company and subsidiaries.
Incident History - HDR (X = Date, Y = Severity)
HDR cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Design Cafe
HDR
FAQ
Latest Global CVEs
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.