access:pre-auth 类型相关 24643 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-33925 | cms-corephp SQL注入漏洞 — n/a | 9.8 | - | 2023-02-15 |
| CVE-2022-22564 | Dell EMC Unity 加密问题漏洞 — Unity CWE-327 | 5.9 | Medium | 2023-02-14 |
| CVE-2023-25614 | SAP NetWeaver AS 跨站脚本漏洞 — NetWeaver AS ABAP (BSP Framework) CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-24522 | SAP NetWeaver AS 跨站脚本漏洞 — NetWeaver AS ABAP (BSP Framework) CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-24521 | SAP NetWeaver AS 跨站脚本漏洞 — NetWeaver AS ABAP (BSP Framework) CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-23860 | SAP NetWeaver AS 输入验证错误漏洞 — NetWeaver AS for ABAP and ABAP Platform CWE-601 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-23859 | SAP NetWeaver AS 跨站脚本漏洞 — NetWeaver AS for ABAP and ABAP Platform CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-23858 | SAP NetWeaver AS 跨站脚本漏洞 — SAP NetWeaver AS for ABAP and ABAP Platform CWE-79 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-23853 | SAP NetWeaver Application Server 输入验证错误漏洞 — NetWeaver Application Server for ABAP and ABAP Platform CWE-601 | 6.1 | Medium | 2023-02-14 |
| CVE-2023-0655 | SonicWall Email 安全漏洞 — SonicWall Email Security CWE-209 | 5.3 | - | 2023-02-14 |
| CVE-2023-22375 | Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站请求伪造漏洞 — Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G | 8.8 | - | 2023-02-14 |
| CVE-2023-22376 | Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G 跨站脚本漏洞 — Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G | 6.1 | - | 2023-02-14 |
| CVE-2022-3891 | WordPress plugin WP FullCalendar 安全漏洞 — WP FullCalendar | 5.3 | - | 2023-02-13 |
| CVE-2023-0159 | WordPress plugin Extensive VC Addons for WPBakery page builder 路径遍历漏洞 — Extensive VC Addons for WPBakery page builder | 7.5 | - | 2023-02-13 |
| CVE-2022-4445 | WordPress plugin FL3R FeelBox SQL注入漏洞 — FL3R FeelBox | 9.8 | - | 2023-02-13 |
| CVE-2022-45724 | COMFAST CF-WR6110N 授权问题漏洞 — n/a | 6.3 | - | 2023-02-13 |
| CVE-2022-48323 | Sunlogin Sunflower Simplified 路径遍历漏洞 — n/a | 9.8 | - | 2023-02-13 |
| CVE-2023-22367 | Ichiran 信任管理问题漏洞 — Ichiran App for iOS and Ichiran App for Android | 5.9 | - | 2023-02-13 |
| CVE-2023-22854 | Mitel MiContact Center Business 安全漏洞 — n/a | 7.5 | - | 2023-02-13 |
| CVE-2023-25717 | Ruckus Wireless SmartZone 代码注入漏洞 — n/a | 9.8 | - | 2023-02-13 |
| CVE-2023-25561 | DataHub 安全漏洞 — datahub CWE-755 | 5.7 | Medium | 2023-02-10 |
| CVE-2022-46675 | Dell Wyse Management Suite 安全漏洞 — Wyse Management Suite CWE-209 | 5.3 | Medium | 2023-02-10 |
| CVE-2022-34448 | Dell PowerPath Management Appliance 跨站请求伪造漏洞 — PowerPath Management Appliance CWE-352 | 8.8 | High | 2023-02-10 |
| CVE-2022-34444 | Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS CWE-327 | 5.9 | Medium | 2023-02-10 |
| CVE-2022-34389 | Dell SupportAssist for Home PCs 安全漏洞 — SupportAssist CWE-307 | 3.7 | Low | 2023-02-10 |
| CVE-2022-24410 | Dell BIOS 安全漏洞 — CPG BIOS CWE-200 | 6.8 | Medium | 2023-02-10 |
| CVE-2022-45699 | APsystems Energy Communication Unit 操作系统命令注入漏洞 — n/a | 9.8 | - | 2023-02-10 |
| CVE-2022-3568 | WordPress plugin ImageMagick Engine 跨站请求伪造漏洞 — ImageMagick Engine CWE-502 | 8.8 | High | 2023-02-09 |
| CVE-2023-24688 | mojoPortal 安全漏洞 — n/a | 5.3 | - | 2023-02-09 |
| CVE-2023-0726 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-08 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24643 条 CVE 漏洞。