access:pre-auth 类型相关 19015 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-27520 | Epson printer 跨站请求伪造漏洞 — SEIKO EPSON printers/network interface Web Config | 7.1 | - | 2023-04-11 |
| CVE-2023-28341 | Zoho ManageEngine Applications Manager 跨站脚本漏洞 — n/a | 6.1 | - | 2023-04-11 |
| CVE-2023-1927 | WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1926 | WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1925 | WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1924 | WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1923 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1922 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1921 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1920 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1919 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1918 | WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache PluginCWE-352 | 4.3 | Medium | 2023-04-06 |
| CVE-2023-1912 | WordPress plugin Limit Login Attempts 跨站脚本漏洞 — Limit Login AttemptsCWE-79 | 7.2 | High | 2023-04-06 |
| CVE-2023-25542 | Dell Trusted Device Agent 访问控制错误漏洞 — Dell Trusted Device ClientCWE-276 | 7.0 | High | 2023-04-06 |
| CVE-2023-28500 | Adobe LiveCycle ES4 代码问题漏洞 — n/a | 9.8 | - | 2023-04-06 |
| CVE-2023-29473 | Atos Unify OpenScape 4000 命令注入漏洞 — n/a | 9.8 | Critical | 2023-04-06 |
| CVE-2023-29474 | Atos Unify OpenScape 4000 命令注入漏洞 — n/a | 9.8 | Critical | 2023-04-06 |
| CVE-2023-29475 | Atos Unify OpenScape 4000 命令注入漏洞 — n/a | 9.8 | Critical | 2023-04-06 |
| CVE-2023-1782 | HashiCorp Nomad 安全漏洞 — NomadCWE-862 | 10.0 | Critical | 2023-04-05 |
| CVE-2022-4941 | WordPress plugin WCFM Marketplace 跨站请求伪造漏洞 — WCFM Membership – WooCommerce Memberships for Multivendor MarketplaceCWE-352 | 6.3 | Medium | 2023-04-05 |
| CVE-2022-4940 | WordPress plugin WCFM Marketplace 安全漏洞 — WCFM Membership – WooCommerce Memberships for Multivendor MarketplaceCWE-862 | 7.3 | High | 2023-04-05 |
| CVE-2022-4939 | WordPress plugin WCFM Marketplace 安全漏洞 — WCFM Membership – WooCommerce Memberships for Multivendor MarketplaceCWE-862 | 9.8 | Critical | 2023-04-05 |
| CVE-2022-4938 | WordPress plugin Frontend Manager 跨站请求伪造漏洞 — WCFM – Frontend Manager for WooCommerceCWE-352 | 6.3 | Medium | 2023-04-05 |
| CVE-2022-4936 | WordPress plugin WCFM Marketplace 跨站请求伪造漏洞 — WCFM Marketplace – Multivendor Marketplace for WooCommerceCWE-352 | 6.3 | Medium | 2023-04-05 |
| CVE-2023-1871 | WordPress plugin YourChannel 跨站请求伪造漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-352 | 5.4 | Medium | 2023-04-05 |
| CVE-2023-1870 | WordPress plugin YourChannel 跨站请求伪造漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-352 | 4.3 | Medium | 2023-04-05 |
| CVE-2023-1868 | WordPress plugin YourChannel 安全漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-862 | 6.5 | Medium | 2023-04-05 |
| CVE-2023-1867 | WordPress plugin YourChannel 跨站请求伪造漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-352 | 5.4 | Medium | 2023-04-05 |
| CVE-2023-1866 | WordPress plugin YourChannel 跨站请求伪造漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-352 | 5.4 | Medium | 2023-04-05 |
| CVE-2023-1865 | WordPress plugin YourChannel 安全漏洞 — YourChannel: Everything you want in a YouTube plugin.CWE-862 | 6.5 | Medium | 2023-04-05 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 19015 条 CVE 漏洞。