cve
Safeguard articles tagged "cve" — guides, analysis, and best practices for software supply chain and application security.
184 articles
What Does CWE Stand For? Common Weakness Enumeration Explained
CWE stands for Common Weakness Enumeration, a community catalog of software and hardware weakness types. Here is what it is and how it differs from CVE.
CVE Vulnerability Database: How the CVE and NVD System Actually Works
What the CVE vulnerability database is, how MITRE and the NVD divide the work, what a CVE record contains, and how to use it without drowning in noise.
Apache Struts 2 Vulnerability History: The RCE Flaws You Must Patch
Apache Struts 2 vulnerabilities have caused some of the largest breaches on record. Here is the CVE lineage, why the same flaw keeps recurring, and how to detect it.
follow-redirects: Known Vulnerabilities and How to Stay Patched
follow-redirects sits under axios in millions of Node apps. A practical guide to its CVE history and how to keep the pinned version current.
CVE-2025-1094 in PostgreSQL psql: Patch Posture & SBOM Response
PostgreSQL psql SQL injection scored CVSS 8.1 and patched in 17.3 / 16.7 / 15.11 / 14.16 / 13.19. Defender SBOM and rollout playbook.
nginx/1.18.0 (ubuntu): What the Server Banner Reveals and How to Reduce Risk
Seeing nginx/1.18.0 (ubuntu) in a Server header tells you the version, the packaging, and roughly the age of a deployment. Here is what that string implies for security and what to check before assuming you are exposed.
NVD Full Form: What the National Vulnerability Database Is
The NVD full form is National Vulnerability Database, the U.S. government repository of known software vulnerabilities maintained by NIST. Here is what it contains and how to use it.
CVE Management for SMEs: A Practical Security Guide
A practical CVE guide for SMEs: what a CVE is, how small and medium teams should triage them without a full security department, and where to focus.
Use of Components with Known Vulnerabilities
Equifax lost 147M records to one unpatched library. Here's what "components with known vulnerabilities" means and how reachability analysis fixes the triage problem.
What Is a Security Vulnerability? A Clear Definition
A security vulnerability is a weakness that an attacker can exploit to compromise a system. Here is a precise definition and how it differs from a threat or risk.
How a Container Image Scanner Works (and Which One to Use)
A container image scanner inspects the layers, packages, and configuration inside an image to find known vulnerabilities before you ship it. Here is how the scan works and what separates a good tool from a noisy one.
The 2024 End-of-Year Vulnerability Disclosure Report
A look back at vulnerability disclosure in 2024: counts, severity distribution, time-to-patch, and the handful of incidents that shifted practice. Numbers, not narrative.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.