目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

access:pre-auth 标签下的 CVE 漏洞 19025

access:pre-auth 类型相关 19025 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2020-29563 Western Digital My Cloud 授权问题漏洞 — n/a 9.8 -2020-12-11
CVE-2020-29574 Sophos Cyberoam OS SQL注入漏洞 — n/a 9.8 -2020-12-11
CVE-2020-29254 Tiki Wiki 跨站请求伪造漏洞 — n/a 8.8 -2020-12-11
CVE-2020-24633 Aruba Networks ArubaOS 安全漏洞 — Aruba 9000 Gateway 9.8 -2020-12-11
CVE-2020-7540 多款Schneider Electric产品访问控制错误漏洞 — Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions)CWE-306 9.8 -2020-12-11
CVE-2020-24444 Adobe Experience Manager 代码问题漏洞 — Experience ManagerCWE-918 5.8 Medium2020-12-10
CVE-2020-26829 SAP Netweaver 授权问题漏洞 — SAP NetWeaver AS JAVA (P2P Cluster Communication) 10.0 -2020-12-09
CVE-2020-27902 Apple iOS和Apple iPadOS 授权问题漏洞 — iOS and iPadOS 4.6 -2020-12-08
CVE-2020-14207 WordPress plugin SQL注入漏洞 — n/a 5.3 -2020-12-08
CVE-2020-14206 WordPress DiveBook 跨站脚本漏洞 — n/a 6.1 -2020-12-08
CVE-2020-28946 Plum Ik-401 访问控制错误漏洞 — n/a 7.5 -2020-12-08
CVE-2020-25692 OpenLDAP 代码问题漏洞 — openldapCWE-476 7.5 -2020-12-08
CVE-2020-17531 Apache Tapestry 代码问题漏洞 — Apache TapestryCWE-502 9.8 -2020-12-08
CVE-2020-29597 IncomCMS 安全漏洞 — n/a 9.8 -2020-12-07
CVE-2020-27408 OpenSIS Community Edition 访问控制错误漏洞 — n/a 9.1 -2020-12-04
CVE-2020-28937 OpenClinic GA 授权问题漏洞 — n/a 7.5 -2020-12-03
CVE-2020-29284 SourceCodester Multi Restaurant Table Reservation System SQL注入漏洞 — n/a 9.8 -2020-12-02
CVE-2020-5423 Cloud Foundry Cloud Controller 资源管理错误漏洞 — CAPICWE-400 7.5 -2020-12-02
CVE-2020-14305 Linux kernel 缓冲区错误漏洞 — kernelCWE-787 8.1 -2020-12-02
CVE-2020-28582 Trend Micro Apex One 信息泄露漏洞 — Trend Micro Apex One 5.3 -2020-12-01
CVE-2020-28583 Trend Micro Apex One 信息泄露漏洞 — Trend Micro Apex One 5.3 -2020-12-01
CVE-2020-28576 Trend Micro Apex One 信息泄露漏洞 — Trend Micro Apex One 5.3 -2020-12-01
CVE-2020-28577 Trend Micro OfficeScan XG 信息泄露漏洞 — Trend Micro Apex One 5.3 -2020-12-01
CVE-2020-28573 Trend Micro OfficeScan XG和Trend Micro Apex One 信息泄露漏洞 — Trend Micro Apex One 5.3 -2020-12-01
CVE-2020-28970 Western Digital My Cloud OS 授权问题漏洞 — n/a 9.8 -2020-12-01
CVE-2020-28940 Western Digital My Cloud OS devices 授权问题漏洞 — n/a 9.8 -2020-12-01
CVE-2020-28971 西部数据 Western Digital My Cloud 授权问题漏洞 — n/a 9.8 -2020-12-01
CVE-2020-28993 ATX miniCMTS200a Broadband Gateway 路径遍历漏洞 — n/a 9.1 -2020-12-01
CVE-2020-26762 Edimax Technology Ipcam Ic-3116w和Edimax Technology Ipcam Ic-3140w 缓冲区错误漏洞 — n/a 9.8 -2020-12-01
CVE-2020-7533 多款 Schneider Electric 产品信任管理问题漏洞 — Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy offers and their Communication Modules (see security notification for version information)CWE-287 9.8 -2020-12-01

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 19025 条 CVE 漏洞。