Comparison Overview
Travel + Leisure Co.
Travel + Leisure Co.
6277 Sea Harbor Dr, Orlando, Florida, US, 32821
Last Update: 01/04/2026
Travel + Leisure Co., the world's leading vacation ownership and membership travel company, provides more than six million vacations to travelers every year. The company’s extensive Vacation Ownership portfolio includes trusted and iconic vacation club brands with a com...
TUI
Karl-Wiechert Allee 23, Hannover, Lower Saxony, DE, 30625
Last Update: 05/04/2026
We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading...
Compliance Ranges Comparison
Travel + Leisure Co.
TUI
Benchmark & Cyber Underwriting Signals
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for Travel + Leisure Co. in 2026.
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for TUI in 2026.
Incident History - Travel + Leisure Co. (X = Date, Y = Severity)
Travel + Leisure Co. cyber incidents detection timeline including parent company and subsidiaries.
Incident History - TUI (X = Date, Y = Severity)
TUI cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Travel + Leisure Co.
TUI
FAQ
Latest Global CVEs
clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation.
A vulnerability was identified in theonedev onedev up to 15.0.5. This vulnerability affects the function canAccessIssue of the file /issues/ of the component Pull Request Handler. Such manipulation of the argument issue leads to improper authorization. It is possible to launch the attack remotely. Upgrading to version 15.0.6 is able to resolve this issue. It is advisable to upgrade the affected component.
A vulnerability was determined in theonedev onedev up to 15.0.5. This affects an unknown part of the file /repositories/{projectId}/default-branch of the component REST API. This manipulation of the argument project.defaultBranch causes improper authorization. It is possible to initiate the attack remotely. Upgrading to version 15.0.6 is able to mitigate this issue. Upgrading the affected component is advised.
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from remote. Upgrading to version 15.0.6 can resolve this issue. It is recommended to upgrade the affected component.
A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown functionality of the file /projects. The manipulation of the argument project.forkedFromId leads to improper authorization. The attack is possible to be carried out remotely. Upgrading to version 15.0.6 addresses this issue. Upgrading the affected component is recommended.