目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

access:pre-auth 标签下的 CVE 漏洞 19065

access:pre-auth 类型相关 19065 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2021-27466 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentreCWE-502 10.0 Critical2022-03-23
CVE-2021-27474 Rockwell Automation FactoryTalk AssetCentre 安全漏洞 — FactoryTalk AssetCentreCWE-676 10.0 Critical2022-03-23
CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentreCWE-89 10.0 Critical2022-03-23
CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentreCWE-89 10.0 Critical2022-03-23
CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentreCWE-502 10.0 Critical2022-03-23
CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentreCWE-89 10.0 Critical2022-03-23
CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentreCWE-502 10.0 Critical2022-03-23
CVE-2021-27422 GE Grid Solutions UR 信息泄露漏洞 — UR familyCWE-200 7.5 High2022-03-23
CVE-2022-25222 Money Transfer Management System SQL注入漏洞 — Money Transfer Management System 9.8 -2022-03-23
CVE-2022-27228 Bitrix Site Manager 输入验证错误漏洞 — n/a 9.8 -2022-03-22
CVE-2022-0760 WordPress plugin Simple Link Directory SQL注入漏洞 — Simple Link DirectoryCWE-89 9.8 -2022-03-21
CVE-2022-0747 WordPress plugin Infographic Maker SQL注入漏洞 — Infographic Maker – iListCWE-89 9.8 -2022-03-21
CVE-2022-0739 WordPress plugin BookingPress SQL注入漏洞 — BookingPress – Appointments Booking Calendar Plugin and Online Scheduling PluginCWE-89 9.8 -2022-03-21
CVE-2022-0694 WordPress plugin Advanced Booking Calendar SQL注入漏洞 — Advanced Booking CalendarCWE-89 9.8 -2022-03-21
CVE-2022-0591 WordPress plugin FormCraft 代码问题漏洞 — FormCraftCWE-918 9.1 -2022-03-21
CVE-2022-0229 WordPress plugin miniOrange 安全漏洞 — miniOrange's Google Authenticator 8.1 -2022-03-21
CVE-2022-24236 Snapt Aria安全漏洞 — n/a 4.3 -2022-03-21
CVE-2022-26960 elFinder 路径遍历漏洞 — n/a 9.1 -2022-03-21
CVE-2021-45876 GARO Wallbox GLB/GTB/GTC 命令注入漏洞 — n/a 9.8 -2022-03-21
CVE-2020-25180 Rockwell Automation ISaGRAF 信任管理问题漏洞 — ISaGRAF RuntimeCWE-321 5.3 Medium2022-03-18
CVE-2020-25184 Rockwell Automation ISaGRAF 安全漏洞 — ISaGRAF RuntimeCWE-256 7.8 High2022-03-18
CVE-2020-25176 Rockwell Automation ISaGRAF 路径遍历漏洞 — ISaGRAF RuntimeCWE-23 9.1 Critical2022-03-18
CVE-2020-25178 Rockwell Automation ISaGRAF 安全漏洞 — ISaGRAF RuntimeCWE-319 7.5 High2022-03-18
CVE-2020-25182 ISaGRAF 代码问题漏洞 — ISaGRAF RuntimeCWE-427 6.7 Medium2022-03-18
CVE-2021-45835 Online Admission System 代码问题漏洞 — n/a 9.8 -2022-03-18
CVE-2022-24655 Netgear EX6100v1 缓冲区错误漏洞 — n/a 9.8 -2022-03-18
CVE-2022-24637 Open Web Analytics Server 安全漏洞 — n/a 9.8 -2022-03-18
CVE-2021-44087 Attendance and Payroll System 安全漏洞 — n/a 9.8 -2022-03-17
CVE-2020-15591 F*EX 代码注入漏洞 — n/a 9.8 -2022-03-17
CVE-2022-0918 Red Hat 389 Directory Server 安全漏洞 — 389-ds-base 7.5 -2022-03-16

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 19065 条 CVE 漏洞。