Comparison Overview

Cradle of Aviation Museum

VS

Children's Museum of Oak Ridge

Cradle of Aviation Museum

Charles Lindbergh Blvd., Garden City, NY, US, 11530
Last Update: 2026-01-18

Long Island's Air and Space Museum Explore over 150,000 square feet featuring 75 air and spacecraft from a hot air balloon to an actual Apollo Lunar Module and learn about Long Island's role and why we are called the Cradle of Aviation. Our eight exhibit galleries are in chronological order and throughout the museum, our volunteer docents are there to share their aerospace experience. There are over 30 hands-on exhibits, a half dozen cockpits to climb into and many short films through-out the exhibits

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 79
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Children's Museum of Oak Ridge

461 W Outer Dr, Oak Ridge, Tennessee, US, 37830
Last Update: 2026-01-22

CMOR provides the ultimate fun learning experience for children, families, and Manhattan Project visitors. The mission of CMOR is to provide fun and diverse educational programs and exhibits emphasizing play and hands-on learning for all ages in arts, science, history, culture, and healthy living, while collecting and preserving objects in a historic Manhattan Project Community. The Children’s Museum was started in 1973 as a Girl Scout project by Troop 69 and its leader, Joyce Maienschein. It was formally opened on March 11, 1973 in the library of the former Jefferson Junior High School. In January 1974, the Museum moved to the former Highland View Elementary School. Nine years later, the museum purchased the building and land from the city of Oak Ridge, and now operates in 54,000 square feet with indoor and outdoor exhibits, classes, camps, and events for all ages.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 28
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/cradle-of-aviation-museum.jpeg
Cradle of Aviation Museum
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/children's-museum-of-oak-ridge.jpeg
Children's Museum of Oak Ridge
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Cradle of Aviation Museum
100%
Compliance Rate
0/4 Standards Verified
Children's Museum of Oak Ridge
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Cradle of Aviation Museum in 2026.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Children's Museum of Oak Ridge in 2026.

Incident History — Cradle of Aviation Museum (X = Date, Y = Severity)

Cradle of Aviation Museum cyber incidents detection timeline including parent company and subsidiaries

Incident History — Children's Museum of Oak Ridge (X = Date, Y = Severity)

Children's Museum of Oak Ridge cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/cradle-of-aviation-museum.jpeg
Cradle of Aviation Museum
Incidents

No Incident

https://images.rankiteo.com/companyimages/children's-museum-of-oak-ridge.jpeg
Children's Museum of Oak Ridge
Incidents

No Incident

FAQ

Children's Museum of Oak Ridge company demonstrates a stronger AI Cybersecurity Score compared to Cradle of Aviation Museum company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Children's Museum of Oak Ridge company has disclosed a higher number of cyber incidents compared to Cradle of Aviation Museum company.

In the current year, Children's Museum of Oak Ridge company and Cradle of Aviation Museum company have not reported any cyber incidents.

Neither Children's Museum of Oak Ridge company nor Cradle of Aviation Museum company has reported experiencing a ransomware attack publicly.

Neither Children's Museum of Oak Ridge company nor Cradle of Aviation Museum company has reported experiencing a data breach publicly.

Neither Children's Museum of Oak Ridge company nor Cradle of Aviation Museum company has reported experiencing targeted cyberattacks publicly.

Neither Cradle of Aviation Museum company nor Children's Museum of Oak Ridge company has reported experiencing or disclosing vulnerabilities publicly.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Cradle of Aviation Museum company nor Children's Museum of Oak Ridge company has publicly disclosed detailed information about the number of their subsidiaries.

Cradle of Aviation Museum company employs more people globally than Children's Museum of Oak Ridge company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds SOC 2 Type 1 certification.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds SOC 2 Type 2 certification.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds ISO 27001 certification.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds PCI DSS certification.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds HIPAA certification.

Neither Cradle of Aviation Museum nor Children's Museum of Oak Ridge holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description

Azure Entra ID Elevation of Privilege Vulnerability

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H