Vulnerabilities > Sony

DATE CVE VULNERABILITY TITLE RISK
2019-04-19 CVE-2019-10886 Missing Authentication for Critical Function vulnerability in Sony Photo Sharing Plus
An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs).
network
sony CWE-306
4.3
2019-04-04 CVE-2019-10844 Improper Input Validation vulnerability in Sony Neural Network Libraries
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
network
low complexity
sony CWE-20
7.5
2018-11-15 CVE-2018-0690 Unspecified vulnerability in Sony Music Center FOR PC
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.
network
high complexity
sony
5.1
2018-09-04 CVE-2018-0656 Untrusted Search Path vulnerability in Sony Digital Paper APP 1.4.0.16050
Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
sony CWE-426
6.8
2018-08-14 CVE-2018-3938 Out-of-bounds Write vulnerability in Sony products
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00.
network
low complexity
sony CWE-787
7.5
2018-08-14 CVE-2018-3937 OS Command Injection vulnerability in Sony products
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00.
network
low complexity
sony CWE-78
6.5
2018-06-26 CVE-2018-0600 Untrusted Search Path vulnerability in Sony Playmemories Home 5.5.01
Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
6.8
2017-12-27 CVE-2017-17010 Untrusted Search Path vulnerability in Sony Content Manager Assistant
Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
sony CWE-426
6.8
2017-12-22 CVE-2017-10909 Untrusted Search Path vulnerability in Sony Music Center 1.0.00/1.0.01
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
sony CWE-426
critical
9.3
2017-12-01 CVE-2017-10892 Untrusted Search Path vulnerability in Sony Music Center 1.0.00
Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
network
sony CWE-426
critical
9.3