Browse / Sony

Sony

See its reports on the map

What gets reported to Sony

• Code Execution4
• SQL Injection3
• Path Traversal2
• Authentication2
• Access Control1
• Server-Side Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Uncontrolled Search Path Element · high
   109 votes
2. SQL Injection at https://████ via ███ parameterSQL Injection · critical
   74 votes
3. 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Key Exchange without Entity Authentication · high
   71 votes
4. Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijackingImproper Access Control - Generic
   67 votes
5. SQL injection at ███████SQL Injection · critical
   63 votes
6. SSRF on http://www.███████/crossdomain.php via url parameterServer-Side Request Forgery (SSRF) · critical
   42 votes
7. Path Traversal issue at https://████/blaze/Path Traversal · high
   40 votes
8. Remote Code Execution (RCE) in a Sony WebSystemDeserialization of Untrusted Data · critical
   40 votes
9. LFI at http://www.████Command Injection - Generic · high
   37 votes
10. Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████OS Command Injection · critical
    26 votes
11. Response Manipulation leads to Admin Panel Login Bypass at https://██████/Improper Authentication - Generic · high
    25 votes
12. SQL Injection on [█████████]SQL Injection · high
    22 votes
13. Remote Code Execution (RCE) in a Sony Pictures WebSystemDeserialization of Untrusted Data · critical
    22 votes
14. Reflected XSS on ███ via jobid parameterCross-site Scripting (XSS) - Reflected · medium
    14 votes