Comparison Overview
Federal Acquisition Service
Federal Acquisition Service
1800 F St NW, Washington, 20006, US
Last Update: 10/02/2026
GSA is America's only source solely dedicated to procuring goods and services for government. As an integral part of GSA, the Federal Acquisition Service (FAS) possesses unrivaled capability to deliver comprehensive products and services across government at the best va...
U.S. Department of the Treasury
1500 Pennsylvania Ave NW, Washington, 20005, US
Last Update: 02/04/2026
The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial ...
Compliance Ranges Comparison
Federal Acquisition Service
U.S. Department of the Treasury
Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for Federal Acquisition Service in 2026.
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for U.S. Department of the Treasury in 2026.
Incident History - Federal Acquisition Service (X = Date, Y = Severity)
Federal Acquisition Service cyber incidents detection timeline including parent company and subsidiaries.
Incident History - U.S. Department of the Treasury (X = Date, Y = Severity)
U.S. Department of the Treasury cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Federal Acquisition Service
U.S. Department of the Treasury
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.