Comparison Overview
Vanderbilt University–New York City
Vanderbilt University–New York City
N/A
Last Update: 20/04/2026
Vanderbilt University’s New York City campus expands the university’s mission into one of the world’s most dynamic centers of culture, industry and innovation. Located in Manhattan’s Chelsea neighborhood, the campus creates new opportunities for students, faculty and pa...
University of Ottawa
550 Cumberland, Ottawa, K1N 6N5, CA
Last Update: 02/04/2026
À l’Université d’Ottawa, la plus grande université bilingue au monde, la population étudiante peut choisir d’étudier en français, en anglais, ou dans les deux langues. Située au cœur de la capitale du Canada, pays du G7, notre université jouit d’un accès direct aux plus...
Compliance Ranges Comparison
Vanderbilt University–New York City
University of Ottawa
Benchmark & Cyber Underwriting Signals
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for Vanderbilt University–New York City in 2026.
Incidents vs Higher Education Industry Avg (This Year)
No incidents recorded for University of Ottawa in 2026.
Incident History - Vanderbilt University–New York City (X = Date, Y = Severity)
Vanderbilt University–New York City cyber incidents detection timeline including parent company and subsidiaries.
Incident History - University of Ottawa (X = Date, Y = Severity)
University of Ottawa cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Vanderbilt University–New York City
University of Ottawa
FAQ
Latest Global CVEs
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.
Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.