access:pre-auth 类型相关 24643 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-22754 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 8.1 | High | 2023-02-28 |
| CVE-2023-22753 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 8.1 | High | 2023-02-28 |
| CVE-2023-22752 | Aruba Networks ArubaOS 缓冲区错误漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-22751 | Aruba Networks ArubaOS 缓冲区错误漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-22750 | Aruba Networks ArubaOS 命令注入漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-22749 | Aruba Networks ArubaOS 命令注入漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-22748 | Aruba Networks ArubaOS 命令注入漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-22747 | Aruba Networks ArubaOS 命令注入漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2023-02-28 |
| CVE-2023-1028 | WordPress plugin WP Meta SEO 跨站请求伪造漏洞 — WP Meta SEO CWE-352 | 4.3 | Medium | 2023-02-28 |
| CVE-2023-1080 | WordPress plugin GN Publisher 跨站脚本漏洞 — GN Publisher: Google News Compatible RSS Feeds CWE-79 | 6.1 | Medium | 2023-02-28 |
| CVE-2023-25264 | Tornado 授权问题漏洞 — n/a | 7.5 | - | 2023-02-28 |
| CVE-2023-26255 | Jira plugin STAGIL Navigation 路径遍历漏洞 — n/a | 7.5 | - | 2023-02-28 |
| CVE-2023-26256 | Jira plugin STAGIL Navigation 路径遍历漏洞 — n/a | 7.5 | - | 2023-02-28 |
| CVE-2023-27293 | OpenCats 跨站脚本漏洞 — OpenCATS | 6.1 | - | 2023-02-28 |
| CVE-2023-0331 | WordPress Plugin Correos Oficial SQL注入漏洞 — Correos Oficial | 7.5 | - | 2023-02-27 |
| CVE-2022-45140 | 多款WAGO产品 访问控制错误漏洞 — Compact Controller CC100 (751-9301) CWE-306 | 9.8 | Critical | 2023-02-27 |
| CVE-2022-45138 | 多款WAGO产品 访问控制错误漏洞 — Compact Controller CC100 (751-9301) CWE-306 | 9.8 | Critical | 2023-02-27 |
| CVE-2023-1068 | WordPress Plugin Download Read More Excerpt Link 跨站请求伪造漏洞 — Read More Excerpt Link CWE-352 | 4.3 | Medium | 2023-02-27 |
| CVE-2023-26035 | ZoneMinder 安全漏洞 — zoneminder CWE-862 | 7.2 | High | 2023-02-25 |
| CVE-2023-1029 | WordPress plugin WP Meta SEO 跨站请求伪造漏洞 — WP Meta SEO CWE-352 | 4.3 | Medium | 2023-02-24 |
| CVE-2021-33224 | Umbraco Forms 代码问题漏洞 — n/a | 9.8 | - | 2023-02-24 |
| CVE-2023-20011 | Cisco Application Policy Infrastructure Controller 跨站请求伪造漏洞 — Cisco Application Policy Infrastructure Controller (APIC) CWE-352 | 8.8 | High | 2023-02-23 |
| CVE-2023-20012 | Cisco Nexus 9300-FX3 Series 授权问题漏洞 — Cisco Unified Computing System (Managed) CWE-287 | 5.3 | Medium | 2023-02-23 |
| CVE-2023-20016 | Cisco FXOS Software和UCS Manager 安全特征问题漏洞 — Cisco Unified Computing System (Managed) CWE-321 | 6.3 | Medium | 2023-02-23 |
| CVE-2023-20089 | Cisco Nexus 9000 Series Fabric Switches 安全漏洞 — Cisco NX-OS System Software in ACI Mode CWE-789 | 7.4 | High | 2023-02-23 |
| CVE-2023-26326 | WordPress Plugin BuddyForms 代码问题漏洞 — BuddyForms WordPress Plugin | 9.8 | - | 2023-02-23 |
| CVE-2022-37938 | HPE Serviceguard 代码问题漏洞 — HPE Serviceguard for Linux | 9.8 | - | 2023-02-22 |
| CVE-2022-37937 | HPE Serviceguard 缓冲区错误漏洞 — HPE Serviceguard for Linux | 9.8 | - | 2023-02-22 |
| CVE-2022-37936 | HPE Serviceguard 代码问题漏洞 — HPE Serviceguard for Linux | 9.8 | - | 2023-02-22 |
| CVE-2023-0846 | Opennms Group OpenNMS 跨站脚本漏洞 — Horizon CWE-79 | 6.7 | Medium | 2023-02-22 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24643 条 CVE 漏洞。