Comparison Overview
NDY

NDY
Level 48, 80 Collins Street, North Tower, Melbourne, Vic, 3000, AU
Last Update: 01/12/2025
Our people are key to our success. They are experts on understanding the specific requirements of diverse industries and project types. This depth of talent and experience across our international footprint allows NDY to undertake the most challenging projects, and ...

United Rentals
100 First Stamford Place, Suite 700, Stamford, CT, US, 06902
Last Update: 13/09/2026
As North America’s largest equipment rental company, with 1600+ stores across North America, Europe, Australia and New Zealand, we serve construction and industrial companies, utilities, municipalities, homeowners, and communities, with the goal of fulfilling customer n...
Compliance Ranges Comparison

NDY







United Rentals






Benchmark & Cyber Underwriting Signals
Incidents vs Construction Industry Avg (This Year)
No incidents recorded for NDY in 2026.
Incidents vs Construction Industry Avg (This Year)
No incidents recorded for United Rentals in 2026.
Incident History - NDY (X = Date, Y = Severity)
NDY cyber incidents detection timeline including parent company and subsidiaries.
Incident History - United Rentals (X = Date, Y = Severity)
United Rentals cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

NDY

United Rentals
FAQ
Latest Global CVEs
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. This issue affects Mediawiki - Refreshed skin: before 1.46.1, 1.45.5, 1.43.10.
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js event loop and denying service to other requests.
- https://gist.github.com/mmadersbacher/46050b4224eb979431986cdef1dd2ad3
- https://github.com/alexcorvi/anchorme.js
- https://github.com/alexcorvi/anchorme.js/blob/f3ae9850baa344f27b46bb149e9b891831d273b1/src/index.ts#L109
- https://www.npmjs.com/package/anchorme
- https://www.vulncheck.com/advisories/anchorme-through-3.0.8-regular-expression-denial-of-service