Comparison Overview
Pacífico Seguros
Pacífico Seguros
Juan de Arona 830 San Isidro, Lima, Lima, PE, 27
Last Update: 01/04/2026
Todos los seres humanos estamos en la constante búsqueda de ser felices, sin embargo, existen imprevistos que pueden interrumpir nuestro camino a la felicidad. Y como creemos fervientemente que nadie debe enfrentar sus problemas solo, nuestro trabajo y motivación es des...
AXA
25, avenue Matignon, Paris, 75008, FR
Last Update: 18/07/2026
As one of the largest global insurers, our purpose is to act for human progress by protecting what matters. Protection has always been at the core of our business, helping individuals, businesses and societies to thrive. And AXA has always been a leader, an innovator, ...
Compliance Ranges Comparison
Pacífico Seguros
AXA
Benchmark & Cyber Underwriting Signals
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Pacífico Seguros in 2026.
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for AXA in 2026.
Incident History - Pacífico Seguros (X = Date, Y = Severity)
Pacífico Seguros cyber incidents detection timeline including parent company and subsidiaries.
Incident History - AXA (X = Date, Y = Severity)
AXA cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Pacífico Seguros
AXA
FAQ
Latest Global CVEs
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory `$INSTDIR` from PowerEditor/installer/nppSetup.nsi into a PowerShell `-Command` string used by RegisterMSIX to invoke Add-AppxPackage, allowing PowerShell subexpression syntax such as `$()` in the installation path to execute commands in the installer's security context when the context menu component is selected. This issue is fixed in version 8.9.7.
calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoint POST /book-update-annotations/{library_id}/{book_id}/{fmt} in src/calibre/srv/books.py omits needs_db_write=True, causing Router.dispatch() to skip ctx.check_for_write_access() before update_annotations() passes attacker-controlled JSON to db.merge_annotations_for_book(), which allows a readonly user or an anonymous user on an unauthenticated deployment to persist unauthorized book annotation changes. This issue is fixed in version 9.12.0.
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template() call whose formatter does not inherit allow_python_templates=False, allowing a nested python: template to reach compile_python_template and execute arbitrary Python code when the file is opened or imported. This issue is fixed in version 9.12.0.
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri argument to URI.create() and the server-side HTTP client without restricting private, loopback, or link-local destinations, allowing an unauthenticated attacker to import and execute a flow that accesses internal services or cloud metadata.
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0-rc6, Kestra's worker/src/main/java/io/kestra/worker/endpoint/WorkerEndpoint.java serves GET /worker without authentication and serializes the complete live Task object, which can expose commands, environment variables, HTTP headers, connection details, plaintext credentials, and execution identifiers while the main API on port 8080 remains protected. This issue is fixed in 2.0.0-rc6.