Comparison Overview
Romer Labs

Romer Labs
Erber Campus 1, Getzersdorf, undefined, 3131, AT
Last Update: 06/11/2025
Romer Labs is a global leader in innovative diagnostic solutions for food and feed safety. With a focus on mycotoxins, food allergens, GMOs, and microbial contaminants, we strive to meet the ever-changing demands of our customers while upholding our reputation for excep...

Gilead Sciences
333 Lakeside Drive, Foster City, 94404, US
Last Update: 20/05/2026
At Gilead, we set – and achieve – bold ambitions to create a healthier world for all people. From our pioneering virology medicines to our growing impact in oncology, we're delivering innovations once thought impossible in medicine. Our focus goes beyond medicines, and ...
Compliance Ranges Comparison

Romer Labs







Gilead Sciences






Benchmark & Cyber Underwriting Signals
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for Romer Labs in 2026.
Incidents vs Biotechnology Research Industry Avg (This Year)
No incidents recorded for Gilead Sciences in 2026.
Incident History - Romer Labs (X = Date, Y = Severity)
Romer Labs cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Gilead Sciences (X = Date, Y = Severity)
Gilead Sciences cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Romer Labs

Gilead Sciences
FAQ
Latest Global CVEs
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance service network (aka SSRF), as long as https:// or http:// is used. This API has been available only to admins since Xena, and it has been deprecated for several releases.
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of <?php blocks, and var_export's mishandling of certain cases such as presence of a '<' character.
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.