AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 88 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Shadowserver, a nonprofit founded in 2004, provides cyber threat intelligence and internet-scale security monitoring.
Known CVEs (88)9 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows…
Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl para…
CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sen…
The Shadowserver Foundation is a nonprofit organization that collects vast threat data and provides free daily remediation reports to over 200 national CSIRTs across 175 countries. It sinkholes and blocks millions of malicious domains and maintains a malware repository of more than 1.9 billion samples. The foundation also works with industry sectors and law enforcement to improve internet security and disrupt cybercrime.
Strengths
collects vast threat data and sends free daily remediation reports
provides reports to 201 National CSIRTs across 175 countries
sinkholes and blocks millions of malicious domains
maintains a malware repository of over 1.9 billion samples
collaborates with industry sectors to improve network security
partners with law enforcement to takedown global cybercrime infrastructures
News about Shadowserver (1)Where this comes fromItems from Shadowserver's own public feeds — changelog, blog, GitHub releases or status page — that name Shadowserver in the headline or summary. News from Shadowserver that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
