Comparison Overview
University of York
University of York
Heslington, York, GB, YO10 5DD
Last Update: 02/04/2026
A member of the prestigious Russell Group, we are a dynamic, research-intensive university. We work collaboratively in partnership with institutions across the world to develop life-saving discoveries and new technologies that tackle some of the most pressing global ch...
University of Arizona
1401 E University, Tucson, Arizona, US, 85721-0066
Last Update: 03/04/2026
The University of Arizona is the leading public research university in the American Southwest and Arizona's only member of the prestigious Association of American Universities. As the state's land-grant university, our research and resources enrich communities around th...
Compliance Ranges Comparison
University of York
University of Arizona
Benchmark & Cyber Underwriting Signals
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for University of York in 2026.
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for University of Arizona in 2026.
Incident History - University of York (X = Date, Y = Severity)
University of York cyber incidents detection timeline including parent company and subsidiaries.
Incident History - University of Arizona (X = Date, Y = Severity)
University of Arizona cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
University of York
University of Arizona
FAQ
Latest Global CVEs
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.
A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests.
A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
Weintek cMT3092X HMI stores user account passwords in plaintext.