Comparison Overview
Infrastructure and Projects Authority (IPA)
Infrastructure and Projects Authority (IPA)
undefined, London, undefined, SW1A 2HQ, GB
Last Update: 03/04/2026
The IPA is the government’s centre of expertise for infrastructure and major projects, part of the Cabinet Office and HM Treasury. We support the successful delivery of all types of infrastructure and major projects; ranging from railways, schools, hospitals and housi...
US Government Accountability Office
441 G Street, N.W., Washington, 20548, US
Last Update: 30/03/2026
For more information about GAO, please visit www.gao.gov. General Information The U.S. Government Accountability Office (GAO) is an independent, nonpartisan agency that works for Congress. Often called the "congressional watchdog," GAO investigates how the federal go...
Compliance Ranges Comparison
Infrastructure and Projects Authority (IPA)
US Government Accountability Office
Benchmark & Cyber Underwriting Signals
Incidents vs Government Administration Industry Avg (This Year)
No incidents recorded for Infrastructure and Projects Authority (IPA) in 2026.
Incidents vs Government Administration Industry Avg (This Year)
US Government Accountability Office has 7.41% fewer incidents than the average of all companies with at least one recorded incident.
Incident History - Infrastructure and Projects Authority (IPA) (X = Date, Y = Severity)
Infrastructure and Projects Authority (IPA) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - US Government Accountability Office (X = Date, Y = Severity)
US Government Accountability Office cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Infrastructure and Projects Authority (IPA)
US Government Accountability Office
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.