Browse CVEs

CRITICAL 9.8 CVE-2020-36923 Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. … Bravia Signage after 1.7.8 Fix from $2,3002026-01-06 HIGH 7.5 CVE-2020-36922 Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system d… Bravia Signage after 1.7.8 Fix from $1,9502026-01-06 MEDIUM 6.1 CVE-2020-36924 Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts throug… Bravia Signage after 1.7.8 Fix from $1,6002026-01-06 CRITICAL 9.8 CVE-2020-36885 Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execut… Snc Dh120t Firmware after 1.82.01 Fix from $2,3002025-12-10 MEDIUM 6.1 CVE-2025-64730 Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the … Snc Cx600w Firmware Mitigation only Fix from $1,6002025-11-25 MEDIUM 6.5 CVE-2025-62497 Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logge… Snc Cx600w Firmware 2.8.0+ Fix from $1,6002025-11-25 HIGH 8.8 CVE-2025-5476 Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass auth… Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 HIGH 8.8 CVE-2025-5478 Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to … Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 HIGH 8.8 CVE-2025-5820 Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentica… Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 HIGH 7.5 CVE-2025-5475 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers … Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 HIGH 7.5 CVE-2025-5477 Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a… Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 HIGH 7.5 CVE-2025-5479 Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a… Xav Ax8500 Firmware 3.02.00+ Fix from $1,9502025-06-21 MEDIUM 6.8 CVE-2024-23922 Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers t… Xav Ax5500 Firmware Patch available Fix from $1,6002024-09-23 MEDIUM 6.8 CVE-2024-23972 Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attack… Xav Ax5500 Firmware Patch available Fix from $1,6002024-09-23 HIGH 7.8 CVE-2022-41796 Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a … Content Transfer after 1.3 Fix from $1,9502022-10-24 MEDIUM 6.8 CVE-2022-3349 A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component e… Playstation 4 Firmware No fix yet Fix from $1,6002022-09-28 CRITICAL 9.8 CVE-2022-23747EPSS 10% In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during mu… Xperia 1 Firmware No fix yet Fix from $2,3002022-08-17 MEDIUM 6.7 CVE-2022-27094 Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. Playmemories Home No fix yet Fix from $1,6002022-05-20 HIGH 7.8 CVE-2021-20793 Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and p… Audio Usb Driver after 1.10 Fix from $1,9502021-08-26 MEDIUM 5.9 CVE-2021-38544 Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and… Srs Xb33 Firmware after 2021-08-09 Fix from $1,6002021-08-11 HIGH 8.8 CVE-2020-5589 SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with… Wf 1000x Firmware Mitigation only Fix from $1,9502020-06-09 HIGH 7.8 CVE-2019-19364 A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (v… Catalyst Browse after 2019.1 Fix from $1,9502019-12-04 MEDIUM 5.5 CVE-2019-15743 The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc_windy/blanc_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys… Xperia Touch Firmware Mitigation only Fix from $1,6002019-11-14 HIGH 7.8 CVE-2019-15416 The Sony keyaki_kddi Android device with a build fingerprint of Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys conta… Xperia Xzs Firmware Mitigation only Fix from $1,9502019-11-14 HIGH 7.5 CVE-2019-11889 Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV. Bravia Firmware No fix yet Fix from $1,9502019-07-09 HIGH 7.5 CVE-2019-11890 Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi… Bravia Firmware No fix yet Fix from $1,9502019-07-09 HIGH 7.8 CVE-2019-5981 Improper authorization vulnerability in VAIO Update 7.3.0.03150 and earlier allows an attackers to execute arbitrary executable file with administrat… Vaio Update after 7.3.0.03150 Fix from $1,9502019-07-05 HIGH 7.5 CVE-2019-5982 Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attac… Vaio Update after 7.3.0.03150 Fix from $1,9502019-07-05 HIGH 8.8 CVE-2018-16593 The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection. R5c Firmware 8.216 / 8.464+ Fix from $1,9502019-06-19 HIGH 8.1 CVE-2018-16594 The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal. R5c Firmware 8.216 / 8.464+ Fix from $1,9502019-06-19