目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24644

access:pre-auth 类型相关 24644 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2023-37440 Aruba Networks EdgeConnect SD-WAN Orchestrator 代码问题漏洞 — EdgeConnect SD-WAN Orchestrator 5.5 Medium 2023-08-22
CVE-2023-37425 Aruba Networks EdgeConnect SD-WAN Orchestrator 跨站脚本漏洞 — EdgeConnect SD-WAN Orchestrator 8.0 High 2023-08-22
CVE-2023-37424 Aruba Networks EdgeConnect SD-WAN Orchestrator 安全漏洞 — EdgeConnect SD-WAN Orchestrator 8.1 High 2023-08-22
CVE-2022-48547 Cacti 跨站脚本漏洞 — n/a 6.1 - 2023-08-22
CVE-2023-39939 LuxSoft LuxCal Web Calendar SQL注入漏洞 — LuxCal Web Calendar 9.1 - 2023-08-21
CVE-2023-39543 LuxSoft LuxCal Web Calendar 跨站脚本漏洞 — LuxCal Web Calendar 6.1 - 2023-08-21
CVE-2023-20212 ClamAV 安全漏洞 — Cisco Secure Endpoint CWE-825 7.5 High 2023-08-18
CVE-2023-39454 ELECOM WRC-X1800GS-B 安全漏洞 — WRC-X1800GS-B CWE-120 9.8 - 2023-08-18
CVE-2023-39445 ELECOM LAN-WH300N/RE 安全漏洞 — LAN-WH300N/RE 8.4 - 2023-08-18
CVE-2023-38132 ELECOM LAN-W451NGR 安全漏洞 — LAN-W451NGR 9.8 - 2023-08-18
CVE-2023-35991 Logitec LAN 安全漏洞 — LAN-W300N/DR 8.8 - 2023-08-18
CVE-2023-32626 Logitec LAN 安全漏洞 — LAN-W300N/RS 9.8 - 2023-08-18
CVE-2023-39415 Proself 授权问题漏洞 — Proself Enterprise/Standard Edition 9.1 - 2023-08-18
CVE-2023-4040 WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞 — Stripe Payment Plugin for WooCommerce 5.3 Medium 2023-08-18
CVE-2023-36846 Juniper Networks Junos OS SRX 访问控制错误漏洞 — Junos OS CWE-306 5.3 Medium 2023-08-17
CVE-2023-36845 Juniper Networks Junos OS EX 安全漏洞 — Junos OS CWE-473 9.8 Critical 2023-08-17
CVE-2023-36844 Juniper Networks Junos OS EX 安全漏洞 — Junos OS CWE-473 5.3 Medium 2023-08-17
CVE-2023-36847 Juniper Networks Junos OS EX 访问控制错误漏洞 — Junos OS CWE-306 5.3 Medium 2023-08-17
CVE-2023-2917 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServer CWE-20 9.8 Critical 2023-08-17
CVE-2023-2915 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServer CWE-20 7.5 High 2023-08-17
CVE-2023-35009 IBM Cognos Analytics 安全漏洞 — Cognos Analytics CWE-209 5.3 Medium 2023-08-16
CVE-2023-20197 ClamAV 安全漏洞 — Cisco Secure Endpoint CWE-835 7.5 High 2023-08-16
CVE-2023-20232 Cisco Unified Contact Center Express 输入验证错误漏洞 — Cisco Unified Contact Center Express CWE-20 5.3 Medium 2023-08-16
CVE-2023-20222 Cisco Evolved Programmable Network Manager 跨站脚本漏洞 — Cisco Prime Infrastructure CWE-80 4.8 Medium 2023-08-16
CVE-2023-20221 Cisco IP Phone 跨站请求伪造漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-352 6.5 Medium 2023-08-16
CVE-2023-20237 Cisco Intersight 命令注入漏洞 — Cisco Intersight Virtual Appliance CWE-284 4.3 Medium 2023-08-16
CVE-2023-20242 Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 4.8 Medium 2023-08-16
CVE-2023-20228 Cisco Integrated Management Controller 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-80 6.1 Medium 2023-08-16
CVE-2023-40349 Jenkins Plugin Gogs 安全漏洞 — Jenkins Gogs Plugin 7.5 - 2023-08-16
CVE-2023-40348 Jenkins Plugin Gogs 安全漏洞 — Jenkins Gogs Plugin 5.3 - 2023-08-16

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24644 条 CVE 漏洞。