Comparison Overview
Federal Office of Public Health FOPH
Federal Office of Public Health FOPH
Schwarzenburgstrasse 157, Liebefeld, Berne, 3097, CH
Last Update: 03/01/2026
Dedicated to the health of everyone in Switzerland Our aim is high: health and a high level of wellbeing for everyone. That’s what we work for at the Federal Office of Public Health. We’re a team of experts with a very broad range of skills. Our work is challenging, an...
UWV
La Guardiaweg 36 - 66, Amsterdam, 1043 DG, NL
Last Update: 03/04/2026
Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en...
Compliance Ranges Comparison
Federal Office of Public Health FOPH
UWV
Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for Federal Office of Public Health FOPH in 2026.
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for UWV in 2026.
Incident History - Federal Office of Public Health FOPH (X = Date, Y = Severity)
Federal Office of Public Health FOPH cyber incidents detection timeline including parent company and subsidiaries.
Incident History - UWV (X = Date, Y = Severity)
UWV cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Federal Office of Public Health FOPH
UWV
FAQ
Latest Global CVEs
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.
Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.