Most recent entries from all

EUVD-2026-262101

fkie_cve-2025-64730

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product.

GHSA-q4qj-8g79-gj6r

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the product.

jvndb-2025-000109

SNC-CX600W provided by Sony Corporation contains multiple vulnerabilities listed below.<ul><li>Cross-site request forgery (CWE-352) - CVE-2025-62497</li><li>Cross-site scripting (CWE-79) - CVE-2025-64730</li></ul>The following people reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-62497 Reporter: Junnosuke Kushibiki, Ryota Honda, Akihito Takeuchi, Daichi Uezono, Ryu Kuki, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University CVE-2025-64730 Reporter: Akihito Takeuchi, Daichi Uezono, Ryota Honda, Junnosuke Kushibiki, Ryu Kuki, Takayuki Sasaki, Katsunari Yoshioka of Yokohama National University