Comparison Overview
NIH Clinical Center (CC)
NIH Clinical Center (CC)
10 Center Dr, Bethesda, 20814, US
Last Update: 05/04/2026
Official account of the NIH Clinical Center Privacy policy: http://go.usa.gov/x9svN Comment policy: https://bit.ly/3G6xq94 Engagement ≠ endorsement Since 1953, the NIH Clinical Center, the world's largest hospital dedicated to clinical research, has pioneered research...
Technical University of Munich
Arcisstraße 21, München, Munich, Bavaria, DE, 80333
Last Update: 02/04/2026
Our university combines top-class facilities for cutting-edge research with unique learning opportunities for 52,000 students. Whether our researchers are investigating the origins of life, matter and the universe or looking for solutions to the major challenges for our...
Compliance Ranges Comparison
NIH Clinical Center (CC)
Technical University of Munich
Benchmark & Cyber Underwriting Signals
Incidents vs Research Services Industry Avg (This Year)
No incidents recorded for NIH Clinical Center (CC) in 2026.
Incidents vs Research Services Industry Avg (This Year)
No incidents recorded for Technical University of Munich in 2026.
Incident History - NIH Clinical Center (CC) (X = Date, Y = Severity)
NIH Clinical Center (CC) cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Technical University of Munich (X = Date, Y = Severity)
Technical University of Munich cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
NIH Clinical Center (CC)
Technical University of Munich
FAQ
Latest Global CVEs
Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invoke plugin:shell|execute to run attacker-controlled operating system commands with the privileges of the NoteGen process. In combination with script execution in the webview (for example via chat XSS), this enables full remote code execution on the user's machine.
NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-controlled content that reaches the model prompt (for example a malicious skill REFERENCE.md that instructs the model to emit HTML) can cause the model response to include executable markup such as an img onerror handler. When the user views the chat response, that markup runs as JavaScript in the privileged Tauri webview, enabling arbitrary script execution in the application context (cross-site scripting).