access:pre-auth 类型相关 24770 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-44286 | Dell PowerProtect Data Domain 安全漏洞 — PowerProtect DD CWE-79 | 8.8 | High | 2023-12-14 |
| CVE-2023-46143 | PHOENIX CONTACT多个产品 安全漏洞 — Automation Worx Software Suite CWE-494 | 7.5 | High | 2023-12-14 |
| CVE-2023-46141 | PHOENIX CONTACT Automation Worx Software Suite 安全漏洞 — Automation Worx Software Suite CWE-732 | 9.8 | Critical | 2023-12-14 |
| CVE-2023-5592 | PHOENIX CONTACT ProConOS/ProConOS eCLR 安全漏洞 — MULTIPROG CWE-494 | 7.5 | High | 2023-12-14 |
| CVE-2023-0757 | 编号已被CVE保留 — MULTIPROG CWE-732 | 9.8 | Critical | 2023-12-14 |
| CVE-2023-40630 | Joomla 安全漏洞 — JCDashboards component for Joomla CWE-918 | 9.1AI | Critical AI | 2023-12-14 |
| CVE-2023-47076 | Adobe InDesign 代码问题漏洞 — InDesign Desktop CWE-476 | 5.5 | Medium | 2023-12-13 |
| CVE-2023-47536 | Fortinet FortiOS 访问控制错误漏洞 — FortiOS CWE-284 | 2.8 | Low | 2023-12-13 |
| CVE-2022-27488 | Fortinet FortiVoice 安全漏洞 — FortiVoice CWE-352 | 7.5 | High | 2023-12-13 |
| CVE-2023-50439 | PRIMX Zed 安全漏洞 — n/a | 5.3AI | Medium AI | 2023-12-13 |
| CVE-2023-50440 | PRIMX Zed 安全漏洞 — n/a | 7.2AI | High AI | 2023-12-13 |
| CVE-2023-50441 | PRIMX ZONECENTRAL 安全漏洞 — n/a | 9.9AI | Critical AI | 2023-12-13 |
| CVE-2023-50443 | PRIMX CRYHOD 安全漏洞 — n/a | 9.3AI | Critical AI | 2023-12-13 |
| CVE-2023-50444 | PRIMX Zed 安全漏洞 — n/a | 7.5AI | High AI | 2023-12-13 |
| CVE-2023-50263 | Nautobot 安全漏洞 — nautobot CWE-200 | 3.7 | Low | 2023-12-12 |
| CVE-2023-6193 | quiche 安全漏洞 — quiche CWE-400 | 5.3 | Medium | 2023-12-12 |
| CVE-2023-49713 | JTEKT ELECTRONICS HMI GC-A2 series 安全漏洞 — GC-A22W-CW | 7.5AI | High AI | 2023-12-12 |
| CVE-2023-49143 | JTEKT ELECTRONICS HMI GC-A2 series 安全漏洞 — GC-A22W-CW | 7.5AI | High AI | 2023-12-12 |
| CVE-2023-49140 | JTEKT ELECTRONICS HMI GC-A2 series 安全漏洞 — GC-A22W-CW | 7.5AI | High AI | 2023-12-12 |
| CVE-2023-41963 | JTEKT ELECTRONICS HMI GC-A2 series 安全漏洞 — GC-A22W-CW | 7.5AI | High AI | 2023-12-12 |
| CVE-2023-50424 | SAP BTP Security Services Integration Library 安全漏洞 — github.com/sap/cloud-security-client-go CWE-749 | 9.1 | Critical | 2023-12-12 |
| CVE-2023-50423 | SAP BTP Security Services Integration Library 安全漏洞 — sap-xssec CWE-749 | 9.1 | Critical | 2023-12-12 |
| CVE-2023-50422 | SAP BTP Security Services Integration Library 安全漏洞 — cloud-security-services-integration-library CWE-749 | 9.1 | Critical | 2023-12-12 |
| CVE-2023-49583 | SAP BTP Security Services Integration Library 安全漏洞 — @sap/xssec CWE-749 | 9.1 | Critical | 2023-12-12 |
| CVE-2023-49581 | SAP GUI 信息泄露漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-89 | 4.1 | Medium | 2023-12-12 |
| CVE-2023-49580 | SAP GUI 其他漏洞 — SAP GUI for Windows and SAP GUI for Java CWE-732 | 7.3 | High | 2023-12-12 |
| CVE-2023-42479 | SAP Biller Direct 跨站脚本漏洞 — SAP Biller Direct CWE-79 | 6.1 | Medium | 2023-12-12 |
| CVE-2023-42923 | Apple iOS 和 iPadOS 安全漏洞 — iOS and iPadOS | 4.6AI | Medium AI | 2023-12-12 |
| CVE-2023-36648 | ProLion CryptoSpike 安全漏洞 — n/a | 9.1AI | Critical AI | 2023-12-12 |
| CVE-2023-36649 | ProLion CryptoSpike 安全漏洞 — n/a | 9.1AI | Critical AI | 2023-12-12 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24770 条 CVE 漏洞。