Comparison Overview

Passion Parties

VS

Marisa S.A.

Passion Parties

731 Pilot Road, Las Vegas, NV, 89119, US
Last Update: 2025-03-04 (UTC)
Between 800 and 900
http://www.passionparties.com

Strong

Passion Parties provides products that arouse passion and enrich relationships. We like to think of ourselves as more than a company, but a movement of women who are passionately proud of what we do. First, we’re proud of the influence we have on so many. When we share the Passion Parties story, we introduce women to the very best part of their lives and themselves. We help them to understand their true potential, while making the kind of money they’ve always dreamed of. We’re also proud to help women better understand their bodies and themselves. This self-awareness leads to a healthier and more fulfilling relationship, and a stronger sense of confidence. Passion Parties builds relationships in the bedroom and in business. We value communication, understanding and respect, which is why we’re passionately proud of where we’re going. Together, we’re building a legacy filled with empowerment, joy and passion. Simply put, we’re bringing passion to life!

NAICS: 43
NAICS Definition: Retail Trade
Employees: 1,111
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Marisa S.A.

Rua James Holland, 422 - Barra Funda, São Paulo, SP, 01138-000, BR
Last Update: 2025-03-05 (UTC)

Excellent

Between 900 and 1000
http://www.marisa.com.br

Marisa S.A. is the largest Brazilian department store chain specialized in women’s clothing based on the number of stores in Brazil. The Company’s business strategy and operations focus primarily on middle-lower income women between the ages of 20 and 35. The Company’s target customers are members of the largest socioeconomic group in Brazil, according to the Brazilian Association of Population Studies (Associação Brasileira de Estudos Populacionais), or ABEP. Marisa designs and sells at competitive prices a wide variety of products that reflect current national and international fashion trends. Its products are sold primarily under the brand "Marisa"​ and are displayed in Marisa’s stores according to "lifestyle"​ categories. During Marisa’s more than 60 years in business, the Company has developed in-depth knowledge of the needs and tastes of its target customers. As a result, Marisa has developed a corporate image that reflects the affinity the Company believes it shares with Brazilian women. "Marisa"​ brand is recognized today throughout Brazil as young, modern and sexy. It is associated with the well-known slogan "By Women for Women"​ ("De Mulher para Mulher"​), a slogan that reflects Marisa’s image as a company that understands and responds to the needs and desires of its target market. For example, according to surveys carried out by Interscience, Marisa is the first choice of middle-lower income Brazilian women who want to be fashionable and to acquire quality lingerie at competitive prices.

NAICS: 452
NAICS Definition:
Employees: 13,981
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/passion-parties.jpeg
Passion Parties
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/lojasmarisa.jpeg
Marisa S.A.
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Passion Parties
100%
Compliance Rate
0/4 Standards Verified
Marisa S.A.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Passion Parties in 2025.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Marisa S.A. in 2025.

Incident History — Passion Parties (X = Date, Y = Severity)

Passion Parties cyber incidents detection timeline including parent company and subsidiaries

Incident History — Marisa S.A. (X = Date, Y = Severity)

Marisa S.A. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/passion-parties.jpeg
Passion Parties
Incidents

No Incident

https://images.rankiteo.com/companyimages/lojasmarisa.jpeg
Marisa S.A.
Incidents

No Incident

FAQ

Marisa S.A. company company demonstrates a stronger AI risk posture compared to Passion Parties company company, reflecting its advanced AI governance and monitoring frameworks.

Historically, Marisa S.A. company has disclosed a higher number of cyber incidents compared to Passion Parties company.

In the current year, Marisa S.A. company and Passion Parties company have not reported any cyber incidents.

Neither Marisa S.A. company nor Passion Parties company has reported experiencing a ransomware attack publicly.

Neither Marisa S.A. company nor Passion Parties company has reported experiencing a data breach publicly.

Neither Marisa S.A. company nor Passion Parties company has reported experiencing targeted cyberattacks publicly.

Neither Passion Parties company nor Marisa S.A. company has reported experiencing or disclosing vulnerabilities publicly.

Neither Passion Parties company nor Marisa S.A. company has publicly disclosed detailed information about the number of their subsidiaries.

Marisa S.A. company employs more people globally than Passion Parties company, reflecting its scale as a Retail.

Latest Global CVEs (Not Company-Specific)

Description

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and the Help Button, leading to a transition out of kiosk mode into local administrative access. NOTE: the reporter indicates that the "behavior was observed sporadically" during "limited time on the client site," making it not "possible to gain more information about the specific kiosk mode crashing issue," and the only conclusion was "there appears to be some form of race condition." Accordingly, there can be doubt that a reproducible cybersecurity vulnerability was identified; sporadic software crashes can also be caused by a hardware fault on a single device (for example, transient RAM errors). The reporter also describes a variety of other issues, including initial access via USB because of the absence of a "lock-pick resistant locking solution for the External Controller PC cabinet," which is not a cybersecurity vulnerability (section 4.1.5 of the CNA Operational Rules). Finally, it is unclear whether the device or OS configuration was inappropriate, given that the risks are typically limited to insider threats within the mail operations room of a large company.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent operations are performed on the same repository URL. The vulnerability is located in numerous repository related handlers in the util/db/repository_secrets.go file. A valid API token with repositories resource permissions (create, update, or delete actions) is required to trigger the race condition. This vulnerability causes the entire Argo CD server to crash and become unavailable. Attackers can repeatedly and continuously trigger the race condition to maintain a denial-of-service state, disrupting all GitOps operations. This issue is fixed in versions 2.14.20, 3.2.0-rc2, 3.1.8 and 3.0.19.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Description

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with the device. Remediation is available in Version 6.9.1, released on September 23, 2025.

Published
Date
2025-09-30
Updated
Date
2025-09-30
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.

Published
Date
2025-09-30
Updated
Date
2025-09-30
References