目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

access:pre-auth 标签下的 CVE 漏洞 19065

access:pre-auth 类型相关 19065 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2022-20745 多款Cisco产品输入验证错误漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-20 8.6 High2022-05-03
CVE-2021-42528 Adobe XMP Toolkit SDK 代码问题漏洞 — XMP ToolkitCWE-476 5.5 Medium2022-05-02
CVE-2022-0952 WordPress plugin Sitemap by click5 安全漏洞 — Sitemap by click5 8.8 -2022-05-02
CVE-2022-0783 WordPress plugin Multiple Shipping Address Woocommerce SQL注入漏洞 — Multiple Shipping Address WoocommerceCWE-89 9.8 -2022-05-02
CVE-2022-0773 WordPress plugin Documentor SQL注入漏洞 — Documentor – Create Product DocumentationCWE-89 9.8 -2022-05-02
CVE-2022-0771 WordPress plugin SiteSuperCharger SQL注入漏洞 — SiteSuperChargerCWE-89 9.8 -2022-05-02
CVE-2021-25086 WordPress plugin Advanced Page Visit Counter 跨站脚本漏洞 — Advanced Page Visit Counter – Advanced WordPress Visit CounterCWE-79 6.1 -2022-05-02
CVE-2021-25002 WordPress plugin Tipsacarrier 安全漏洞 — TipsacarrierCWE-862 7.5 -2022-05-02
CVE-2021-31674 Cyclos 4 PRO 跨站脚本漏洞 — n/a 6.1 -2022-05-01
CVE-2021-43938 Elcomplus SmartPPT 信息泄露漏洞 — SmartPTT SCADA ServerCWE-200 8.1 High2022-04-29
CVE-2021-44596 Wondershare 安全漏洞 — n/a 9.8 -2022-04-29
CVE-2022-29415 WordPress plugin Ravpage 跨站脚本漏洞 — Ravpage (WordPress plugin)CWE-79 6.1 Medium2022-04-28
CVE-2022-28719 Hammock AssetView 访问控制错误漏洞 — AssetView 8.1 -2022-04-28
CVE-2021-34589 Bender ebee 充电控制器 信息泄露漏洞 — CC612CWE-200 7.5 High2022-04-27
CVE-2021-46423 Telesquare TLR-2005Ksh 安全漏洞 — n/a 5.3 -2022-04-27
CVE-2021-46421 Franklin Fueling Systems 路径遍历漏洞 — n/a 7.5 -2022-04-27
CVE-2021-46420 Franklin Fueling Systems 路径遍历漏洞 — n/a 7.5 -2022-04-27
CVE-2022-27332 Zammad 访问控制错误漏洞 — n/a 9.1 -2022-04-27
CVE-2021-36895 WordPress plugin Tripetto 跨站脚本漏洞 — Tripetto (WordPress plugin)CWE-79 4.7 Medium2022-04-26
CVE-2022-1390 WordPress plugin Admin Word Count Column路径遍历漏洞 — Admin Word Count ColumnCWE-22 9.8 -2022-04-25
CVE-2022-0782 WordPress plugin Donations SQL注入漏洞 — DonationsCWE-89 9.8 -2022-04-25
CVE-2022-0769 WordPress plugin Users Ultra SQL注入漏洞 — Users Ultra Membership, Users Community and Member Profiles With PayPal Integration PluginCWE-89 9.8 -2022-04-25
CVE-2022-0693 WordPress plugin Master Elements SQL注入漏洞 — Master ElementsCWE-89 9.8 -2022-04-25
CVE-2022-0657 WordPress plugin RRatingg SQL注入漏洞 — 5 Stars Rating Funnel WordPress Plugin | RRatinggCWE-89 9.8 -2022-04-25
CVE-2022-0656 WordPress plugin Web To Print Shop : uDraw 安全漏洞 — Web To Print Shop : uDrawCWE-552 7.5 -2022-04-25
CVE-2021-45841 TerraMaster FS-210信任管理问题漏洞 — n/a 7.4 -2022-04-25
CVE-2021-3897 Lenovo Fan Power Controller2 授权问题漏洞 — Fan Power Controller2 (FPC2)CWE-288 9.8 Critical2022-04-22
CVE-2021-3849 Lenovo Fan Power Controller2和Lenovo System Management Module 授权问题漏洞 — Fan Power Controller2 (FPC2)CWE-288 9.8 Critical2022-04-22
CVE-2022-26674 ASUS RT-AX88U 格式化字符串错误漏洞 — RT-AX88UCWE-134 9.8 Critical2022-04-22
CVE-2022-26672 ASUS WebStorage 信任管理问题漏洞 — WebStorageCWE-798 7.3 High2022-04-22

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 19065 条 CVE 漏洞。