目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24643

access:pre-auth 类型相关 24643 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-29056 Fortinet FortiMail 安全漏洞 — FortiMail CWE-307 3.5 Low 2023-03-09
CVE-2023-20049 Cisco ASR 9000 Series 缓冲区错误漏洞 — Cisco IOS XR Software CWE-805 8.6 High 2023-03-09
CVE-2023-20064 Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-862 4.6 Medium 2023-03-09
CVE-2022-46752 Dell BIOS 安全漏洞 — CPG BIOS CWE-285 4.6 Medium 2023-03-08
CVE-2022-20929 Cisco Enterprise NFV Infrastructure Software 数据伪造问题漏洞 — Cisco Enterprise NFV Infrastructure Software CWE-347 7.8 High 2023-03-08
CVE-2023-22889 Zephyr 代码注入漏洞 — n/a 9.8 - 2023-03-08
CVE-2023-22890 Zephyr 代码问题漏洞 — n/a 7.5 - 2023-03-08
CVE-2023-22892 Zephyr 安全漏洞 — n/a 7.5 - 2023-03-08
CVE-2023-1263 WordPress plugin CMP–Coming Soon & Maintenance 信息泄露漏洞 — CMP – Coming Soon & Maintenance Plugin by NiteoThemes CWE-200 5.3 Medium 2023-03-07
CVE-2022-41329 Fortinet FortiProxy 信息泄露漏洞 — FortiProxy CWE-200 5.2 Medium 2023-03-07
CVE-2022-41333 Fortinet FortiRecorder 资源管理错误漏洞 — FortiRecorder CWE-400 6.8 High 2023-03-07
CVE-2021-4333 WordPress plugin WP Statistics 跨站请求伪造漏洞 — WP Statistics – Simple, privacy-friendly Google Analytics alternative CWE-352 6.5 Medium 2023-03-07
CVE-2020-36669 WordPress plugin JetBackup – WP Backup, Migrate & Restore 跨站请求伪造漏洞 — JetBackup – Backup, Restore & Migrate CWE-352 8.8 High 2023-03-07
CVE-2022-4328 WordPress plugin WooCommerce Checkout Field Manager 代码问题漏洞 — WooCommerce Checkout Field Manager 9.8 - 2023-03-06
CVE-2023-22858 BlogEngine 安全漏洞 — BlogEngine.NET CWE-862 5.3 Medium 2023-03-06
CVE-2023-0968 WordPress plugin Watu Quiz 跨站脚本漏洞 — Watu Quiz CWE-79 6.1 Medium 2023-03-03
CVE-2023-0457 Mitsubishi Electric MELSEC iQ-F series 信息泄露漏洞 — MELSEC iQ-F Series FX5U-32MT/ES CWE-256 7.5 High 2023-03-03
CVE-2022-41862 PostgreSQL 安全漏洞 — postgresql CWE-200 3.7 - 2023-03-03
CVE-2023-20078 Cisco IP Phone 缓冲区错误漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-121 9.8 Critical 2023-03-03
CVE-2023-20079 Cisco IP Phone 缓冲区错误漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-121 9.8 Critical 2023-03-03
CVE-2023-20088 Cisco Finesse 授权问题漏洞 — Cisco Unified Contact Center Enterprise CWE-285 5.3 Medium 2023-03-03
CVE-2023-20104 Cisco Webex 跨站脚本漏洞 — Cisco Webex Teams CWE-79 6.1 Medium 2023-03-03
CVE-2023-26052 Saleor 安全漏洞 — saleor CWE-209 3.7 Low 2023-03-02
CVE-2023-0084 WordPress plugin Metform Elementor Contact Form Builder 跨站脚本漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor CWE-79 7.2 High 2023-03-02
CVE-2023-0085 WordPress Plugin Metform Elementor Contact Form Builder 安全漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor CWE-693 5.3 Medium 2023-03-02
CVE-2023-0656 SonicWALL SonicOS 缓冲区错误漏洞 — SonicOS CWE-121 7.5 - 2023-03-02
CVE-2023-23689 Dell PowerScale OneFS 资源管理错误漏洞 — PowerScale OneFS CWE-400 5.3 Medium 2023-02-28
CVE-2023-22757 Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 8.1 High 2023-02-28
CVE-2023-22756 Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 8.1 High 2023-02-28
CVE-2023-22755 Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 8.1 High 2023-02-28

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24643 条 CVE 漏洞。