目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 19065

access:pre-auth 类型相关 19065 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2022-2001 WordPress plugin DX Share Selection 跨站请求伪造漏洞 — DX Share SelectionCWE-352 8.8 High2022-07-18
CVE-2022-2117 WordPress plugin GiveWP 信息泄露漏洞 — GiveWP – Donation Plugin and Fundraising PlatformCWE-200 5.3 Medium2022-07-18
CVE-2022-1912 WordPress plugin Button Widget Smartsoft 跨站请求伪造漏洞 — Button Widget SmartsoftCWE-352 8.8 High2022-07-18
CVE-2022-2437 WordPress plugin Feed Them Social 代码问题漏洞 — Feed Them Social – Social Media Feeds, Video, and Photo GalleriesCWE-502 9.8 Critical2022-07-18
CVE-2022-2435 WordPress plugin AnyMind Widget 跨站请求伪造漏洞 — AnyMind WidgetCWE-352 8.8 High2022-07-18
CVE-2022-2223 WordPress plugin Image Slider 跨站请求伪造漏洞 — Image SliderCWE-352 5.4 Medium2022-07-18
CVE-2022-2108 WordPress plugin Wbcom Designs – BuddyPress Group Review 安全漏洞 — Wbcom Designs – BuddyPress Group ReviewsCWE-862 6.5 Medium2022-07-18
CVE-2022-2039 WordPress plugin Free Live Chat Support 跨站请求伪造漏洞 — Free Live Chat SupportCWE-352 8.8 High2022-07-18
CVE-2022-24690 DSK DSKNet SQL注入漏洞 — n/a 8.2 -2022-07-18
CVE-2022-26479 Poly EagleEye Director 操作系统命令注入漏洞 — n/a 9.8 -2022-07-17
CVE-2022-26352 dotCMS 安全漏洞 — n/a 9.8 -2022-07-17
CVE-2022-1933 WordPress plugin CDI 跨站脚本漏洞 — CDI – Collect and Deliver Interface for WoocommerceCWE-79 6.1 -2022-07-17
CVE-2022-30245 Honeywell Alerton Compass 安全漏洞 — n/a 5.7 -2022-07-15
CVE-2022-30244 Honeywell Alerton Ascent Control Module 安全漏洞 — n/a 8.0 -2022-07-15
CVE-2022-30243 Honeywell Alerton Visual Logic 安全漏洞 — n/a 8.8 -2022-07-15
CVE-2022-30242 Honeywell Alerton Ascent Control Module 安全漏洞 — n/a 5.7 -2022-07-15
CVE-2022-35409 Mbed TLS 缓冲区错误漏洞 — n/a 9.1 -2022-07-15
CVE-2022-35403 ZOHO ManageEngine ServiceDesk Plus 安全漏洞 — n/a 7.5 -2022-07-12
CVE-2022-35228 SAP BusinessObjects Central Management Console 跨站请求伪造漏洞 — SAP BusinessObjects Business Intelligence Platform (Central management Console)CWE-352 8.1 -2022-07-12
CVE-2022-32247 SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise PortalCWE-79 6.1 -2022-07-12
CVE-2022-28771 SAP Business One License service API 访问控制错误漏洞 — SAP Business One License service APICWE-306 7.5 -2022-07-12
CVE-2022-24800 October CMS 竞争条件问题漏洞 — octoberCWE-362 8.1 High2022-07-12
CVE-2022-33736 Siemens Opcenter Quality 授权问题漏洞 — Opcenter Quality V13.1CWE-303 9.1 -2022-07-12
CVE-2022-33138 Siemens SIMATIC 访问控制错误漏洞 — SIMATIC MV540 HCWE-306 9.1 -2022-07-12
CVE-2022-29884 Siemens SICAM A8000 CP-8000 资源管理错误漏洞 — CP-8000 MASTER MODULE WITH I/O -25/+70°CCWE-772 9.1 -2022-07-12
CVE-2022-26649 多款Siemens SCALANCE产品安全漏洞 — SCALANCE X200-4P IRTCWE-120 9.6 Critical2022-07-12
CVE-2022-26648 Siemens SCALANCE 安全漏洞 — SCALANCE X200-4P IRTCWE-120 8.2 High2022-07-12
CVE-2022-26647 Siemens SCALANCE 安全特征问题特征问题漏洞 — SCALANCE X200-4P IRTCWE-330 8.8 High2022-07-12
CVE-2021-44222 Siemens SIMATIC eaSie Core Package 访问控制错误漏洞 — SIMATIC eaSie Core PackageCWE-306 9.8 -2022-07-12
CVE-2022-1952 WordPress plugin Free Booking Plugin for Hotels, Restaurant and Car Rental 代码问题漏洞 — Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNCCWE-434 9.8 -2022-07-11

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 19065 条 CVE 漏洞。