CWE-37

6 CVEs classified under CWE-37. Browse by severity and year.

Top CVEs for CWE-37
CVE	Severity	Score	Published	Summary
`CVE-2022-25347`	Critical	`9.8`	2022-03-29	Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files t…
`CVE-2018-10498`	Medium	`5.5`	2018-09-24	This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacke…
`CVE-2024-12806`	Medium	`4.9`	2025-01-09	A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.
`CVE-2023-20087`	Medium	`4.9`	2023-05-18	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to downloa…
`CVE-2023-20077`	Medium	`4.9`	2023-05-18	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to downloa…
`CVE-2022-20962`	Low	`3.8`	2022-11-04	A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized…

All CVEs classified under CWE-37 — newest first (page 1 of 1)
CVE	Severity	Score	Published	Summary
`CVE-2024-12806`	Medium	`4.9`	2025-01-09	A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.
`CVE-2023-20087`	Medium	`4.9`	2023-05-18	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to downloa…
`CVE-2023-20077`	Medium	`4.9`	2023-05-18	Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to downloa…
`CVE-2022-20962`	Low	`3.8`	2022-11-04	A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to make unauthorized…
`CVE-2022-25347`	Critical	`9.8`	2022-03-29	Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files t…
`CVE-2018-10498`	Medium	`5.5`	2018-09-24	This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacke…