Priority MEDIUM 57
A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00234 · Published 2026-10-26 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00234 · Published 2026-10-26 · No fix listed CWE-74
Priority LOW 38
Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01022 · Published 2026-08-20 · No fix listed CWE-78
Priority LOW 12
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability.
CVSS 3.0LOW 2.4· Physical · No auth · No interaction · EPSS 0.0027 · Published 2026-08-20 · No fix listed CWE-285
Priority LOW 37
Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.00457 · Published 2026-08-20 · No fix listed CWE-122
Priority LOW 37
Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.0· Adjacent network · No auth · User interaction · EPSS 0.00457 · Published 2026-08-20 · No fix listed CWE-122
Priority LOW 18
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability.
CVSS 3.0LOW 3.9· Physical · No auth · No interaction · EPSS 0.00251 · Published 2026-08-20 · No fix listed CWE-120
Priority MEDIUM 41
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00686 · Published 2026-08-20 · No fix listed CWE-120
Priority LOW 16
Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability.
CVSS 3.0LOW 3.5· Adjacent network · No auth · User interaction · EPSS 0.00244 · Published 2026-08-20 · No fix listed CWE-125
Priority LOW 32
Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017.
CVSS 4.0HIGH 7.0· Physical · No auth · No interaction · EPSS 0.00172 · Published 2026-07-21 · No fix listed CWE-325
Priority LOW 25
Incorrect default permissions issue exists in Optical Disc Archive Software for Windows 5.5.3 and earlier.
CVSS 4.0MEDIUM 5.4· Local · Low privileges · User interaction · EPSS 0.00089 · Published 2026-06-16 · No fix listed CWE-276
Priority LOW 33
A privilege escalation vulnerability exists in PlayStation 4 firmware versions 13.00 through 13.02.
CVSS 3.1HIGH 7.4· Local · No auth · No interaction · EPSS 0.00085 · Published 2026-06-02 · Fixed in 13.02 CWE-367
Priority MEDIUM 63
Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00541 · Published 2026-01-06 · No fix listed CWE-829
Priority HIGH 70
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00971 · Published 2026-01-06 · No fix listed CWE-639
Priority HIGH 70
Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0064 · Published 2026-01-06 · No fix listed CWE-497
Priority HIGH 81
Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01229 · Published 2025-12-10 · No fix listed CWE-787
Priority LOW 38
The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00198 · Published 2025-12-01 · No fix listed CWE-427
Priority LOW 21
Cross-site scripting vulnerability exists in SNC-CX600W all versions.
CVSS 4.0MEDIUM 4.8· Adjacent network · No auth · User interaction · EPSS 0.00204 · Published 2025-11-25 · No fix listed CWE-79
Priority LOW 10
Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0.
CVSS 4.0LOW 2.1· Network · No auth · User interaction · EPSS 0.0012 · Published 2025-11-25 · No fix listed CWE-352
Priority LOW 38
Optical Disc Archive Software provided by Sony Corporation registers a Windows service with an unquoted file path.
CVSS 4.0HIGH 8.4· Local · High privileges · No interaction · EPSS 0.00168 · Published 2025-11-05 · No fix listed CWE-428
Priority LOW 35
Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00342 · Published 2025-06-21 · No fix listed CWE-190
Priority LOW 35
Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00377 · Published 2025-06-21 · No fix listed CWE-122
Priority MEDIUM 40
Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00421 · Published 2025-06-21 · No fix listed CWE-190
Priority LOW 35
Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00377 · Published 2025-06-21 · No fix listed CWE-122
Priority LOW 38
Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00364 · Published 2025-06-21 · No fix listed CWE-653
Load more