Comparison Overview

Yami

VS

NetEase

Yami

140 S State College Blvd, Greater Los Angeles, California, 92821, US
Last Update: 2025-03-12 (UTC)
Between 800 and 900
http://www.yamibuy.com/

Strong

Founded in 2013, Yami’s mission is to bring the world closer for everyone to experience and enjoy. We make it easy to discover exciting flavors and trending products from across the pacific. Named Inc. Magazine’s fastest growing start-up on the ”Inc. 500 List.”, we’re committed to connecting people with authentic food, beauty, home, and wellness experiences through our e-commerce platform, iOS, and Android apps. Join us to unbox the best of Asia. Learn more at Yamibuy.com

NAICS: None
NAICS Definition:
Employees: 331
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

NetEase

No.599 Wangshang Road, Binjiang District Hangzhou, Zhejiang 310052, CN
Last Update: 2025-05-06 (UTC)

Strong

Between 800 and 900
https://ir.netease.com

As a leading internet technology company based in China, NetEase, Inc. (NASDAQ: NTES and HKEX:9999, "NetEase") provides premium online services centered around content creation. With extensive offerings across its expanding gaming ecosystem, NetEase develops and operates some of China's most popular and longest running mobile and PC games. Powered by industry-leading inhouse R&D capabilities in China and globally, NetEase creates superior gaming experiences, inspires players and passionately delivers value for its thriving community worldwide. Beyond games, NetEase service offerings include its majority-controlled subsidiaries Youdao (NYSE:DAO), China's leading technology-focused intelligent learning company, and Cloud Music (HKEX:9899), China's leading online music content community, as well as Yanxuan, NetEase's private label consumer lifestyle brand.

NAICS: 513
NAICS Definition: Others
Employees: 10,001+
Subsidiaries: 4
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/yamibuy-com.jpeg
Yami
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/netease.jpeg
NetEase
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Yami
100%
Compliance Rate
0/4 Standards Verified
NetEase
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Yami in 2025.

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for NetEase in 2025.

Incident History — Yami (X = Date, Y = Severity)

Yami cyber incidents detection timeline including parent company and subsidiaries

Incident History — NetEase (X = Date, Y = Severity)

NetEase cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/yamibuy-com.jpeg
Yami
Incidents

No Incident

https://images.rankiteo.com/companyimages/netease.jpeg
NetEase
Incidents

No Incident

FAQ

Both Yami company and NetEase company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, NetEase company has disclosed a higher number of cyber incidents compared to Yami company.

In the current year, NetEase company and Yami company have not reported any cyber incidents.

Neither NetEase company nor Yami company has reported experiencing a ransomware attack publicly.

Neither NetEase company nor Yami company has reported experiencing a data breach publicly.

Neither NetEase company nor Yami company has reported experiencing targeted cyberattacks publicly.

Neither Yami company nor NetEase company has reported experiencing or disclosing vulnerabilities publicly.

NetEase company has more subsidiaries worldwide compared to Yami company.

Yami company employs more people globally than NetEase company, reflecting its scale as a Technology, Information and Internet.

Latest Global CVEs (Not Company-Specific)

Description

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Description

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the file /admin/voters_add.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Published
Date
2025-10-08
Updated
Date
2025-10-08
Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References