Union-Endicott High School
Last Update: 2025-03-07 (UTC)
Between 900 and 1000
Excellent
None
NAICS: None
NAICS Definition:
Employees: 55
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
Union-Endicott High School
VS
Secretaria de Educação do Estado de Pernambuco
Secretaria de Educação do Estado de Pernambuco
Last Update: 2025-03-05 (UTC)
Excellent
Between 900 and 1000
For 52 years, the Department of Education of Pernambuco was linked to the health department of the State. The disconnect between the two bodies and the consequent acquisition of autonomy of the SE came through Law 466, on 22 April 1949, during the administration of then Governor Alexandre José Barbosa Lima Sobrinho. The regulation of the Secretary of State for Education and Culture was approved by Decree No. 75, June 8, 1949. At that time, the first secretary, Silvio de Lira Rabelo, had assumed the folder for a month and a half. After the regulation, the Department had changed the nomenclature four times: - Decree 3197 of August 13, 1974 - approves the rules of the Department of Education and Culture; - Decree 15,717 of April 27, 1992 - approves the rules of the Department of Education, Culture and Sports; - Decree 18,594 of July 17, 1995 - approves the rules of the Department of Education and Sports; - Decree 21,682 of September 1, 1999 - approves the rules of the Department of Education to the present day.
NAICS: None
NAICS Definition: Others
Employees: 13,694
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
Union-Endicott High School
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Secretaria de Educação do Estado de Pernambuco
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
Union-Endicott High School
100%
Compliance Rate
0/4 Standards Verified
Secretaria de Educação do Estado de Pernambuco
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Education Management Industry Average (This Year)
No incidents recorded for Union-Endicott High School in 2025.
Incidents vs Education Management Industry Average (This Year)
No incidents recorded for Secretaria de Educação do Estado de Pernambuco in 2025.
Incident History — Union-Endicott High School (X = Date, Y = Severity)
Union-Endicott High School cyber incidents detection timeline including parent company and subsidiaries
Incident History — Secretaria de Educação do Estado de Pernambuco (X = Date, Y = Severity)
Secretaria de Educação do Estado de Pernambuco cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
Union-Endicott High School
Incidents
No Incident
Secretaria de Educação do Estado de Pernambuco
Incidents
No Incident
FAQ
Both Union-Endicott High School company and Secretaria de Educação do Estado de Pernambuco company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.
Historically, Secretaria de Educação do Estado de Pernambuco company has disclosed a higher number of cyber incidents compared to Union-Endicott High School company.
In the current year, Secretaria de Educação do Estado de Pernambuco company and Union-Endicott High School company have not reported any cyber incidents.
Neither Secretaria de Educação do Estado de Pernambuco company nor Union-Endicott High School company has reported experiencing a ransomware attack publicly.
Neither Secretaria de Educação do Estado de Pernambuco company nor Union-Endicott High School company has reported experiencing a data breach publicly.
Neither Secretaria de Educação do Estado de Pernambuco company nor Union-Endicott High School company has reported experiencing targeted cyberattacks publicly.
Neither Union-Endicott High School company nor Secretaria de Educação do Estado de Pernambuco company has reported experiencing or disclosing vulnerabilities publicly.
Neither Union-Endicott High School company nor Secretaria de Educação do Estado de Pernambuco company has publicly disclosed detailed information about the number of their subsidiaries.
Secretaria de Educação do Estado de Pernambuco company employs more people globally than Union-Endicott High School company, reflecting its scale as a Education Management.
Latest Global CVEs (Not Company-Specific)
Description
FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to be enabled by the instance administrator beforehand for the attack to work as it relies on api/query.php. An account takeover is possible by sending a change password request via the XSS payload / setting UserJS for persistence / stealing the autofill password / displaying a phishing page with a spoofed URL using history.replaceState() If the victim is an administrator, the attacker can also perform administrative actions. This issue is fixed in version 1.27.0.
Risk Information
cvss3
Base: 6.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
Description
go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation, which can cause the whole node to crash. These malicious messages aren't self-propagating since the bug is in the validator. An attacker needs to directly send the message to all targets. This issue is fixed in version 0.8.7.
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vulnerability where verification results are cached without properly considering the context of the message. An attacker can bypass justification verification by submitting a valid message with a correct justification and then reusing the same cached justification in contexts where it would normally be invalid. This occurs because the cached verification does not properly validate the relationship between the justification and the specific message context it's being used with. This issue is fixed in version 0.8.9.
Risk Information
cvss3
Base: 5.9
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
Description
mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8.
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
References
- https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915
- https://github.com/mondeja/mkdocs-include-markdown-plugin/issues/274
- https://github.com/mondeja/mkdocs-include-markdown-plugin/pull/277
- https://github.com/mondeja/mkdocs-include-markdown-plugin/security/advisories/GHSA-v39m-5m9j-m9w9
Description
go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong address routing or even ESMTP parameter smuggling. For successful exploitation, it is required that the user's code allows for arbitrary mail address input (i. e. through a web form or similar). If only static mail addresses are used (i. e. in a config file) and the mail addresses in use do not consist of quoted local parts, this should not affect users. This issue is fixed in version 0.7.1
Risk Information
cvss4
Base: 8.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
