Comparison Overview
Midea México, Centroamérica , Caribe y Región Andina
Midea México, Centroamérica , Caribe y Región Andina
Av. Eugenio Garza Sada 3820 , Monterrey, Nuevo León, 64780, MX
Last Update: 19/03/2026
Midea MMS es una filial del Grupo Midea que abarca (México, Centroamérica, Caribe y Región Andina) Grupo Midea aspira a la visión de «Dar vida a las grandes innovaciones», manteniendo la filosofía de los fundadores de crear una vida mejor a través de la tecnología. El G...
Vertiv
505 N. Cleveland Ave., Westerville, Columbus, OH, US, 43082
Last Update: 23/09/2026
Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power ...
Compliance Ranges Comparison
Midea México, Centroamérica , Caribe y Región Andina
Vertiv
Benchmark & Cyber Underwriting Signals
Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)
No incidents recorded for Midea México, Centroamérica , Caribe y Región Andina in 2026.
Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)
Vertiv has 0.99% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Midea México, Centroamérica , Caribe y Región Andina (X = Date, Y = Severity)
Midea México, Centroamérica , Caribe y Región Andina cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Vertiv (X = Date, Y = Severity)
Vertiv cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Midea México, Centroamérica , Caribe y Región Andina
Vertiv
FAQ
Latest Global CVEs
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames up to 1 MB to the handshake RPC port, filling the uncapped notifys vector until the out-of-memory killer terminates the engine.
- https://github.com/kvcache-ai/Mooncake
- https://github.com/kvcache-ai/Mooncake/blob/719735896c86b56fabec6cf3e825fb2ea640597a/mooncake-transfer-engine/src/transfer_metadata.cpp#L285-L296
- https://github.com/kvcache-ai/Mooncake/issues/4445
- https://www.vulncheck.com/advisories/mooncake-transfer-engine-through-0.3.13-post1-memory-exhaustion-via-unbounded-notify-queue
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single listener thread in writeFully(), breaking all subsequent handshakes, metadata fetches, notify and probe requests.
- https://github.com/kvcache-ai/Mooncake
- https://github.com/kvcache-ai/Mooncake/blob/719735896c86b56fabec6cf3e825fb2ea640597a/mooncake-transfer-engine/src/transfer_metadata_plugin.cpp#L730-L803
- https://github.com/kvcache-ai/Mooncake/issues/4443
- https://www.vulncheck.com/advisories/mooncake-transfer-engine-through-0.3.13-post1-denial-of-service-via-p2p-handshake-daemon-response-write
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse save_presentation, open_presentation, or manage_image output_path to overwrite any server-writable file or load external files.
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/blob/3631ba2ec0c24504476f78bf74d329c9be11caaa/tools/presentation_tools.py#L127-L141
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/blob/3631ba2ec0c24504476f78bf74d329c9be11caaa/utils/presentation_utils.py#L61-L73
- https://github.com/GongRzhe/Office-PowerPoint-MCP-Server/pull/33
- https://www.vulncheck.com/advisories/office-powerpoint-mcp-server-through-2.0.7-path-traversal-via-save-presentation-and-manage-image
A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed. The second worker blocks until nsslapd-ioblocktimeout while holding the connection mutex, preventing delivery of the completed operation's result. Repeating this across a small number of connections proportional to the configured worker-thread pool size exhausts the entire pool under default configuration, denying service to all clients (anonymous and authenticated, plaintext and TLS) for as long as the attacker maintains the connections.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.