Reflected XSS on ███ via jobid parameter #1309949 Valid Cross-site Scripting – 2022-08-24 – 14 Remote Code Execution (RCE) in a Sony Pictures WebSystem #330028 Valid Deserialization and Object Injection – 2019-01-23 – 22 SQL Injection on [█████████] #1213207 Valid SQL Injection – 2022-12-07 – 22 Response Manipulation leads to Admin Panel Login Bypass at https://██████/ #1508661 Valid Authentication – 2022-09-12 – 25 Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████ #1339430 Valid Command and Code Injection – 2022-07-06 – 26 LFI at http://www.████ #986380 Valid Command and Code Injection – 2022-12-16 – 37 Remote Code Execution (RCE) in a Sony WebSystem #329572 Valid Deserialization and Object Injection – 2019-01-23 – 40 Path Traversal issue at https://████/blaze/ #1320084 Valid File and Path Handling – 2022-10-06 – 40 SSRF on http://www.███████/crossdomain.php via url parameter #971590 Valid Server-Side Request Forgery – 2022-10-06 – 42 SQL injection at ███████ #2256032 Valid SQL Injection – 2024-01-24 – 63 Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking #3514490 No longer public No weakness recorded – – – 67 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks） #2642615 Valid Cryptography High 2025-07-08 – 71 SQL Injection at https://████ via ███ parameter #1935151 Valid SQL Injection – 2023-04-24 – 74 DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version) #3355766 Valid File and Path Handling High 2026-06-05 – 109