目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

access:pre-auth 标签下的 CVE 漏洞 19036

access:pre-auth 类型相关 19036 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2023-22414 Juniper Networks Junos OS和Juniper Networks Junos OS PTX 安全漏洞 — Junos OSCWE-401 6.5 Medium2023-01-12
CVE-2023-22415 Juniper Networks Junos OS 缓冲区错误漏洞 — Junos OSCWE-787 7.5 High2023-01-12
CVE-2023-22416 Juniper Networks Junos OS 安全漏洞 — Junos OSCWE-120 7.5 High2023-01-12
CVE-2023-22417 Juniper Networks Junos OS 安全漏洞 — Junos OSCWE-401 7.5 High2023-01-12
CVE-2022-3870 GitLab Enterprise Edition和GitLab Community Edition 安全漏洞 — GitLab 5.3 Medium2023-01-12
CVE-2022-46463 Harbor 访问控制错误漏洞 — n/a 7.5 -2023-01-12
CVE-2022-4874 Netcomm路由器 授权问题漏洞 — NF20 7.5 -2023-01-11
CVE-2022-3841 Red Hat Advanced Cluster Management for Kubernetes 代码问题漏洞 — RHACM 9.1 -2023-01-11
CVE-2022-43389 Zyxel NR7101 安全漏洞 — NR7101 firmwareCWE-120 8.6 High2023-01-11
CVE-2022-43393 Zyxel GS1920 代码问题漏洞 — GS1920-24v2 firmwareCWE-754 8.2 High2023-01-11
CVE-2022-4707 WordPress plugin Royal Elementor Addons 跨站请求伪造漏洞 — Royal Addons for Elementor – Addons and Templates Kit for ElementorCWE-352 4.3 Medium2023-01-10
CVE-2022-4710 WordPress plugin Royal Elementor Addons 跨站脚本漏洞 — Royal Addons for Elementor – Addons and Templates Kit for ElementorCWE-79 6.1 Medium2023-01-10
CVE-2022-43514 Siemens Automation License Manager 路径遍历漏洞 — Automation License Manager V5CWE-22 7.7 High2023-01-10
CVE-2022-43513 Siemens Automation License Manager 安全漏洞 — Automation License Manager V5CWE-73 8.2 High2023-01-10
CVE-2023-0017 SAP NetWeaver AS 访问控制错误漏洞 — NetWeaver AS for JavaCWE-284 9.4 Critical2023-01-10
CVE-2022-4422 BULUTDESK CALLCENTER SQL注入漏洞 — Bulutdesk CallcenterCWE-89 9.8 Critical2023-01-10
CVE-2022-4310 WordPress Plugin Slimstat Analytics 跨站脚本漏洞 — Slimstat Analytics 6.1 -2023-01-09
CVE-2022-43972 Linksys WRT54GL 代码问题漏洞 — WRT54GL Wireless-G Broadband RouterCWE-476 6.5 Medium2023-01-09
CVE-2022-0668 JFrog Artifactory 安全漏洞 — JFrog ArtifactoryCWE-274 5.3 Medium2023-01-08
CVE-2023-0088 WordPress plugin Swifty Page Manager 跨站请求伪造漏洞 — Swifty Page ManagerCWE-352 8.8 High2023-01-05
CVE-2023-0086 WordPress plugin JetWidgets for Elementor 跨站请求伪造漏洞 — JetWidgets For ElementorCWE-352 5.4 Medium2023-01-05
CVE-2023-0038 WordPress plugin Survey Maker 跨站脚本漏洞 — Survey MakerCWE-79 7.2 High2023-01-03
CVE-2021-32824 Apache Dubbo 代码问题漏洞 — DubboCWE-502 9.8 Critical2023-01-03
CVE-2022-39039 aEnrich a+HRD 代码问题漏洞 — a+HRDCWE-918 9.8 Critical2023-01-03
CVE-2022-39040 aEnrich a+HRD 路径遍历漏洞 — a+HRDCWE-22 7.5 High2023-01-03
CVE-2022-39041 aEnrich a+HRD SQL注入漏洞 — a+HRDCWE-89 9.8 Critical2023-01-03
CVE-2022-39042 aEnrich a+HRD 授权问题漏洞 — a+HRDCWE-287 9.8 Critical2023-01-03
CVE-2022-46304 ServiSign 操作系统命令注入漏洞 — ServiSign CWE-78 8.8 High2023-01-03
CVE-2022-46305 ServiSign 路径遍历漏洞 — ServiSignCWE-22 6.5 Medium2023-01-03
CVE-2022-46306 ServiSign 路径遍历漏洞 — ServiSignCWE-22 8.8 High2023-01-03

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 19036 条 CVE 漏洞。