Nuovo Pignone
Last Update: 2025-03-14 (UTC)
Between 750 and 799
https://onlinecareer360.com/
NAICS: 211
NAICS Definition:
Employees: 1,001-5,000
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
Nuovo Pignone
VS
Sonatrach
Sonatrach
Last Update: 2025-05-06 (UTC)
Between 750 and 799
Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil & Gas industry chain. Upstream (E&P), Midstream (Transport) and Downstream (Marketing, Refining and Petchems).
NAICS: 211
NAICS Definition: Oil and Gas Extraction
Employees: 41,220
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
Nuovo Pignone
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Sonatrach
ISO 27001
Not verified
SOC2 Type 1
Not verified
SOC2 Type 2
Not verified
GDPR
Not verified
PCI DSS
Not verified
HIPAA
Not verified
Compliance Summary
Nuovo Pignone
100%
Compliance Rate
0/4 Standards Verified
Sonatrach
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Nuovo Pignone in 2025.
Incidents vs Oil and Gas Industry Average (This Year)
No incidents recorded for Sonatrach in 2025.
Incident History — Nuovo Pignone (X = Date, Y = Severity)
Nuovo Pignone cyber incidents detection timeline including parent company and subsidiaries
Incident History — Sonatrach (X = Date, Y = Severity)
Sonatrach cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
Nuovo Pignone
Incidents
No Incident
Sonatrach
Incidents
No Incident
FAQ
Sonatrach company demonstrates a stronger AI Cybersecurity Score compared to Nuovo Pignone company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.
Historically, Sonatrach company has disclosed a higher number of cyber incidents compared to Nuovo Pignone company.
In the current year, Sonatrach company and Nuovo Pignone company have not reported any cyber incidents.
Neither Sonatrach company nor Nuovo Pignone company has reported experiencing a ransomware attack publicly.
Neither Sonatrach company nor Nuovo Pignone company has reported experiencing a data breach publicly.
Neither Sonatrach company nor Nuovo Pignone company has reported experiencing targeted cyberattacks publicly.
Neither Nuovo Pignone company nor Sonatrach company has reported experiencing or disclosing vulnerabilities publicly.
Neither Nuovo Pignone nor Sonatrach holds any compliance certifications.
Neither company holds any compliance certifications.
Neither Nuovo Pignone company nor Sonatrach company has publicly disclosed detailed information about the number of their subsidiaries.
Sonatrach company employs more people globally than Nuovo Pignone company, reflecting its scale as a Oil and Gas.
Neither Nuovo Pignone nor Sonatrach holds SOC 2 Type 1 certification.
Neither Nuovo Pignone nor Sonatrach holds SOC 2 Type 2 certification.
Neither Nuovo Pignone nor Sonatrach holds ISO 27001 certification.
Neither Nuovo Pignone nor Sonatrach holds PCI DSS certification.
Neither Nuovo Pignone nor Sonatrach holds HIPAA certification.
Neither Nuovo Pignone nor Sonatrach holds GDPR certification.
Latest Global CVEs (Not Company-Specific)
Description
The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Risk Information
cvss3
Base: 6.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
Description
The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.
Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.
Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.
Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
cvss4
Base: 8.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
