目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24647

access:pre-auth 类型相关 24647 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2023-44192 Juniper Networks Junos OS和Juniper Networks Junos OS QFX 输入验证错误漏洞 — Junos OS CWE-20 7.5 High 2023-10-12
CVE-2023-44191 Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-770 7.5 High 2023-10-12
CVE-2023-44183 Juniper Networks Junos OS 输入验证错误漏洞 — Junos OS CWE-20 6.5 Medium 2023-10-12
CVE-2023-36843 Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-168 7.5 High 2023-10-12
CVE-2023-36841 Juniper Networks Junos OS 资源管理错误漏洞 — Junos OS CWE-400 7.5 High 2023-10-12
CVE-2023-36839 Juniper Networks Junos OS和Junos OS Evolved 安全漏洞 — Junos OS CWE-1284 6.5 Medium 2023-10-12
CVE-2023-22392 Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-401 6.5 Medium 2023-10-12
CVE-2023-27314 NetApp ONTAP 安全漏洞 — ONTAP 9 CWE-400 7.5 High 2023-10-12
CVE-2023-5531 WordPress plugin Thumbnail Slider With Lightbox 跨站请求伪造漏洞 — Thumbnail Slider With Lightbox CWE-352 4.3 Medium 2023-10-12
CVE-2023-41261 Plixer Scrutinizer 授权问题漏洞 — n/a 7.5 - 2023-10-12
CVE-2023-41262 Scrutinizer NetFlow & sFlow Analyzer SQL注入漏洞 — n/a 9.8 - 2023-10-12
CVE-2023-41263 Scrutinizer NetFlow & sFlow Analyzer 日志信息泄露漏洞 — n/a 7.5 - 2023-10-12
CVE-2023-45194 Micro Research MR-GM Series 信任管理问题漏洞 — MR-GM2 6.5 - 2023-10-11
CVE-2023-4309 Election Services SQL注入漏洞 — Internet Election Service CWE-89 10.0 Critical 2023-10-10
CVE-2023-42782 Fortinet FortiAnalyzer 数据伪造问题漏洞 — FortiAnalyzer CWE-345 5.0 Medium 2023-10-10
CVE-2023-41675 Fortinet FortiOS 和 FortiProxy 资源管理错误漏洞 — FortiOS CWE-416 4.8 Medium 2023-10-10
CVE-2023-30806 Sangfor Next-Gen Application Firewall 操作系统命令注入漏洞 — Net-Gen Application Firewall CWE-78 9.8 Critical 2023-10-10
CVE-2023-30805 Sangfor Next-Gen Application Firewall 操作系统命令注入漏洞 — Net-Gen Application Firewall CWE-78 9.8 Critical 2023-10-10
CVE-2023-30804 Sangfor Next-Gen Application Firewall 安全漏洞 — Net-Gen Application Firewall CWE-200 4.9 Medium 2023-10-10
CVE-2023-30803 Sangfor Next-Gen Application Firewall 安全漏洞 — Net-Gen Application Firewall CWE-290 9.8 Critical 2023-10-10
CVE-2023-30802 Sangfor Next-Gen Application Firewall 安全漏洞 — Net-Gen Application Firewall CWE-540 5.3 Medium 2023-10-10
CVE-2023-43625 Siemens Simcenter Amesim 代码注入漏洞 — Simcenter Amesim CWE-94 9.8 Critical 2023-10-10
CVE-2023-43623 Siemens Mendix 安全漏洞 — Mendix Forgot Password (Mendix 10 compatible) CWE-203 5.3 Medium 2023-10-10
CVE-2023-4469 WordPress Plugin Profile Extra Fields by BestWebSoft 安全漏洞 — Profile Extra Fields by BestWebSoft CWE-862 5.3 Medium 2023-10-06
CVE-2023-32485 Dell SmartFabric Storage Software 输入验证错误漏洞 — Dell SmartFabric Storage Software CWE-20 9.8 Critical 2023-10-05
CVE-2023-43072 Dell SmartFabric Storage Software 访问控制错误漏洞 — Dell SmartFabric Storage Software CWE-284 4.4 Medium 2023-10-05
CVE-2022-4145 Red Hat OpenShift 注入漏洞 — openshift CWE-74 4.3 Medium 2023-10-05
CVE-2023-43809 Soft Serve 授权问题漏洞 — soft-serve CWE-287 7.5 High 2023-10-04
CVE-2023-20259 Cisco 多款产品安全漏洞 — Cisco Emergency Responder CWE-400 8.6 High 2023-10-04
CVE-2023-20101 Cisco Emergency Responder 信任管理问题漏洞 — Cisco Emergency Responder CWE-798 9.8 Critical 2023-10-04

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24647 条 CVE 漏洞。