目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24644

access:pre-auth 类型相关 24644 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2023-1617 B&R Industrial Automation B&R VC4 授权问题漏洞 — B&R VC4 CWE-287 9.8 Critical 2023-04-14
CVE-2023-1285 Mitsubishi Electric GC-ENET-COM 竞争条件问题漏洞 — GC-ENET-COM CWE-364 7.5 High 2023-04-14
CVE-2022-45175 LIVEBOX Collaboration vDesk 安全漏洞 — n/a 6.5 - 2023-04-14
CVE-2023-25597 Mitel MiCollab 授权问题漏洞 — n/a 5.3 - 2023-04-14
CVE-2023-30521 Jenkins Plugin Assembla merge request builder 安全漏洞 — Jenkins Assembla merge request builder Plugin 7.5 - 2023-04-12
CVE-2023-30519 Jenkins Plugin Quay.io trigger 安全漏洞 — Jenkins Quay.io trigger Plugin 7.5 - 2023-04-12
CVE-2023-28121 WordPress plugin WooCommerce Payments 授权问题漏洞 — WooCommerce Payments WordPress Plugin CWE-287 9.8 - 2023-04-12
CVE-2022-35850 Fortinet FortiAuthenticator 跨站脚本漏洞 — FortiAuthenticator CWE-80 4.2 Medium 2023-04-11
CVE-2023-22642 Fortinet FortiManager 信任管理问题漏洞 — FortiAnalyzer CWE-295 6.8 High 2023-04-11
CVE-2022-43955 Fortinet FortiWeb 跨站脚本漏洞 — FortiWeb CWE-79 8.0 High 2023-04-11
CVE-2022-41331 Fortinet FortiPresence 访问控制错误漏洞 — FortiPresence CWE-306 9.3 Critical 2023-04-11
CVE-2022-43951 FortiNAC 安全漏洞 — FortiNAC CWE-200 4.8 Medium 2023-04-11
CVE-2022-41330 Fortinet FortiOS 跨站脚本漏洞 — FortiProxy CWE-79 8.3 High 2023-04-11
CVE-2023-28766 Siemens SIPROTEC 5 代码问题漏洞 — SIPROTEC 5 6MD85 (CP300) CWE-476 7.5 High 2023-04-11
CVE-2023-28489 Siemens SICAM A8000 命令注入漏洞 — CP-8031 MASTER MODULE CWE-77 9.8 Critical 2023-04-11
CVE-2023-28761 SAP NetWeaver Enterprise Portal 访问控制错误漏洞 — NetWeaver Enterprise Portal CWE-306 6.5 Medium 2023-04-11
CVE-2023-24527 SAP NetWeaver AS 访问控制错误漏洞 — NetWeaver AS Java for Deploy Service CWE-306 5.3 Medium 2023-04-11
CVE-2023-25413 ATEN International PE8108 安全漏洞 — n/a 7.5 - 2023-04-11
CVE-2023-25415 ATEN International PE8108 安全漏洞 — n/a 5.3 - 2023-04-11
CVE-2023-27520 Epson printer 跨站请求伪造漏洞 — SEIKO EPSON printers/network interface Web Config 7.1 - 2023-04-11
CVE-2023-28341 Zoho ManageEngine Applications Manager 跨站脚本漏洞 — n/a 6.1 - 2023-04-11
CVE-2023-1927 WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1926 WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1925 WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1924 WordPress plugin WP Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1923 WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1922 WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1921 WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1920 WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06
CVE-2023-1919 WordPress Plugin Fastest Cache 跨站请求伪造漏洞 — WP Fastest Cache – WordPress Cache Plugin CWE-352 4.3 Medium 2023-04-06

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24644 条 CVE 漏洞。