Comparison Overview
Dowty, a GE Aerospace company
Dowty, a GE Aerospace company
4100 Hurricane Road, Gloucester, undefined, GL3 4AQ, GB
Last Update: 04/04/2026
Dowty, a GE Aerospace company, is a world-leading manufacturer of integrated propeller systems. Headquartered in the UK, Dowty provides solutions for propeller systems with applications ranging from commercial airliners and military airlifters to multi-role seaplanes an...
NASA - National Aeronautics and Space Administration
300 E Street SW, Washington, 20546, US
Last Update: 03/04/2026
For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfi...
Compliance Ranges Comparison
Dowty, a GE Aerospace company
NASA - National Aeronautics and Space Administration
Benchmark & Cyber Underwriting Signals
Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)
No incidents recorded for Dowty, a GE Aerospace company in 2026.
Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)
No incidents recorded for NASA - National Aeronautics and Space Administration in 2026.
Incident History - Dowty, a GE Aerospace company (X = Date, Y = Severity)
Dowty, a GE Aerospace company cyber incidents detection timeline including parent company and subsidiaries.
Incident History - NASA - National Aeronautics and Space Administration (X = Date, Y = Severity)
NASA - National Aeronautics and Space Administration cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Dowty, a GE Aerospace company
NASA - National Aeronautics and Space Administration
FAQ
Latest Global CVEs
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.
A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.
A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the `/webhooks/stripe` endpoint without validating the Stripe-Signature header. Successful exploitation can lead to the unauthorized resetting of a namespace's build quota to its maximum and trigger unsolicited billing emails to namespace administrators.
A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.