Comparison Overview
UCWeb Inc.
UCWeb Inc.
F/16 Tower B GRG Plaza,No. 163,Pingyun Rd.,Huangpu West Avenue,Tianhe Dist.,, Guangzhou, Guangdong, CN, 510627
Last Update: 01/04/2026
About UCWeb UCWeb Inc. (UCWeb), a business within Alibaba Mobile Business Group, is a leading provider of mobile internet software and services. Since the inception in 2004, UCWeb's mission has been to provide better mobile internet experience to people around the worl...
Mercado Livre Brasil
Avenida das Nações Unidas 3003 , sao pablo, 06233, BR
Last Update: 08/09/2026
At Mercado Libre, we are transforming the way people buy, sell, advertise, pay, finance, and ship across Latin America. We are the leading e-commerce and fintech company in the region, with a presence in 18 countries and a team of more than 120,000 people. We are one o...
Compliance Ranges Comparison
UCWeb Inc.
Mercado Livre Brasil
Benchmark & Cyber Underwriting Signals
Incidents vs Technology, Information and Internet Industry Avg (This Year)
No incidents recorded for UCWeb Inc. in 2026.
Incidents vs Technology, Information and Internet Industry Avg (This Year)
No incidents recorded for Mercado Livre Brasil in 2026.
Incident History - UCWeb Inc. (X = Date, Y = Severity)
UCWeb Inc. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Mercado Livre Brasil (X = Date, Y = Severity)
Mercado Livre Brasil cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
UCWeb Inc.
Mercado Livre Brasil
FAQ
Latest Global CVEs
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens=0 to exhaust decode-worker memory without bound until the worker restarts.
- https://github.com/vllm-project/vllm
- https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/nixl/push_worker.py#L162-L181
- https://github.com/vllm-project/vllm/pull/55677
- https://www.vulncheck.com/advisories/vllm-through-0.29.0-memory-exhaustion-via-rejected-requests
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust the V8 call stack, causing an uncaught RangeError that terminates the Node.js process without triggering error handling callbacks.
- https://github.com/NodeRedis/node-redis-parser
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
- https://github.com/redis/ioredis/issues/2108
- https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.