Skip to content
Noroxi

Sony records

75 published records for vendor sony.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
14
With a fix record
1.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

75 records
  • CVE-2007-3488
    45Plan

    Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    sony · sony network camera snc-p5Jun 29, 2007

  • CVE-2008-0748
    45Plan

    Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    sony · axruploadserver activex controlFeb 13, 2008

  • CVE-2022-23747
    42Plan

    In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed

    CriticalCVSS 9.8No exploitEPSS 10%

    sony · xperia 1 firmwareAug 17, 2022

  • CVE-2006-4289
    42Plan

    Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspe

    CriticalCVSS 10.0No exploitEPSS 6%

    sony · vaio media serverAug 22, 2006

  • CVE-2012-0985
    41Plan

    Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wirel

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    sony · smartwi connection utillityJun 7, 2012

  • CVE-2018-3938
    41Plan

    An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5

    CriticalCVSS 10.0No exploitEPSS 3%

    sony · snc-eb600 firmwareAug 14, 2018

  • CVE-2007-5709
    40Plan

    Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file nam

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    sony · sonicstage connect playerOct 30, 2007

  • CVE-2019-10844
    39Monitor

    nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which

    CriticalCVSS 9.8No exploitEPSS 2%

    sony · neural network librariesApr 4, 2019

  • CVE-2020-36885
    37Monitor

    Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi

    CriticalCVSS 9.3No exploitEPSS 1%

    sony · snc-dh120t firmwareDec 10, 2025

  • CVE-2016-7834
    36Monitor

    SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, S

    HighCVSS 8.8Proof of conceptEPSS 4%

    sony · snc series firmwareApr 13, 2017

  • CVE-2017-2277
    36Monitor

    WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage co

    CriticalCVSS 9.1No exploitEPSS 1%

    sony · wg-c10 firmwareJul 21, 2017

  • CVE-2024-23934
    35Monitor

    Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    sony · xav-ax5500Sep 23, 2024

  • CVE-2018-16593
    35Monitor

    The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.

    HighCVSS 8.8No exploitEPSS 1%

    sony · r5c firmwareJun 19, 2019

  • CVE-2016-7830
    35Monitor

    Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices

    HighCVSS 8.8No exploitEPSS 1%

    sony · pcs-xg100 firmwareJun 9, 2017

  • CVE-2020-5589
    35Monitor

    SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP

    HighCVSS 8.8No exploitEPSS 1%

    sony · wf-1000x firmwareJun 9, 2020

  • CVE-2025-5478
    35Monitor

    Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    sony · xav-ax8500 firmwareJun 20, 2025

  • CVE-2025-5476
    35Monitor

    Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    sony · xav-ax8500 firmwareJun 20, 2025

  • CVE-2025-5820
    35Monitor

    Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    sony · xav-ax8500 firmwareJun 20, 2025

  • CVE-2012-2210
    34Monitor

    The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TC

    HighCVSS 7.8Proof of conceptEPSS 9%

    sony · bravia tvApr 11, 2012

  • CVE-2019-11336
    33Monitor

    Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by

    HighCVSS 8.1No exploitEPSS 3%

    sony · photo sharing plusMay 14, 2019

  • CVE-2017-10909
    32Monitor

    Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan hor

    HighCVSS 7.8No exploitEPSS 2%

    sony · music centerDec 22, 2017

  • CVE-2018-16594
    32Monitor

    The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.

    HighCVSS 8.1No exploitEPSS 1%

    sony · r5c firmwareJun 19, 2019

  • CVE-2018-3937
    31Monitor

    An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 f

    HighCVSS 7.2No exploitEPSS 10%

    sony · snc-eb600 firmwareAug 14, 2018

  • CVE-2006-4235
    31Monitor

    Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to exe

    HighCVSS 7.5No exploitEPSS 5%

    sony · sonicstage mastering studioAug 21, 2006

  • CVE-2019-11890
    31Monitor

    Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired

    HighCVSS 7.5No exploitEPSS 4%

    sony · bravia firmwareJul 9, 2019