sony Vulnerability Advisory Catalog

Total 72 security vulnerabilities recorded for sony software and firmware.

← Back to All Vendors
Component: xperia_xzs_firmware

The Sony keyaki_kddi Android device with a build fingerprint of Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys contai...

📅 2019-11-14
CVSS 7.8 Dossier →
Component: bravia_firmware

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi ...

📅 2019-07-09
CVSS 7.5 Dossier →
Component: bravia_firmware

Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV....

📅 2019-07-09
CVSS 7.5 Dossier →
Component: vaio_update

Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack...

📅 2019-07-05
CVSS 7.5 Dossier →
Component: vaio_update

Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrati...

📅 2019-07-05
CVSS 7.8 Dossier →
Component: r5c_firmware

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow....

📅 2019-06-19
CVSS 6.5 Dossier →
Component: r5c_firmware

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal....

📅 2019-06-19
CVSS 8.1 Dossier →
Component: r5c_firmware

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection....

📅 2019-06-19
CVSS 8.8 Dossier →
Component: photo_sharing_plus

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the...

📅 2019-05-14
CVSS 8.1 Dossier →
Component: xperia_l1_firmware

The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android frame...

📅 2019-04-25
CVSS 5.5 Dossier →
Component: photo_sharing_plus

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other ap...

📅 2019-04-19
CVSS 5.9 Dossier →
CVE-2019-10844 CRITICAL
Component: neural_network_libraries

nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be u...

📅 2019-04-04
CVSS 9.8 Dossier →
Component: music_center_for_pc

An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with...

📅 2018-11-15
CVSS 7.5 Dossier →
Component: digital_paper_app

Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a ...

📅 2018-09-04
CVSS 7.8 Dossier →
CVE-2018-3938 CRITICAL
Component: snc-eb600_firmware

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware ...

📅 2018-08-14
CVSS 9.1 Dossier →
CVE-2018-3937 CRITICAL
Component: snc-eb600_firmware

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1....

📅 2018-08-14
CVSS 9.1 Dossier →
Component: playmemories_home

Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via...

📅 2018-06-26
CVSS 7.8 Dossier →
Component: content_manager_assistant

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privile...

📅 2017-12-27
CVSS 7.8 Dossier →
Component: music_center

Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in ...

📅 2017-12-22
CVSS 7.8 Dossier →
Component: music_center

Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...

📅 2017-12-01
CVSS 7.8 Dossier →
Component: media_go

Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspe...

📅 2017-12-01
CVSS 7.8 Dossier →
Component: nfc_port_software_remover

Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL ...

📅 2017-08-02
CVSS 7.8 Dossier →
Component: nfc_port_firmware

Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC...

📅 2017-08-02
CVSS 7.8 Dossier →
CVE-2017-2277 CRITICAL
Component: wg-c10_firmware

WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to...

📅 2017-07-22
CVSS 9.1 Dossier →
Page 2 of 3 (72 Total Records)