access:pre-auth 类型相关 24643 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-0722 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-08 |
| CVE-2023-0725 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-08 |
| CVE-2023-0724 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-08 |
| CVE-2023-0685 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-08 |
| CVE-2023-0723 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-07 |
| CVE-2023-0730 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-07 |
| CVE-2023-0727 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-07 |
| CVE-2023-0728 | WordPress plugin Wicked Folders 跨站请求伪造漏洞 — Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types CWE-352 | 5.4 | Medium | 2023-02-07 |
| CVE-2022-3229 | Rapid7 Metasploit 安全漏洞 — Unified Remote CWE-285 | 9.8 | - | 2023-02-06 |
| CVE-2022-4681 | WordPress plugin Hide My WP SQL注入漏洞 — Hide My WP | 9.8 | - | 2023-02-06 |
| CVE-2022-2933 | WordPress plugin 0mk Shortener 跨站请求伪造漏洞 — 0mk Shortener CWE-352 | 5.4 | Medium | 2023-02-06 |
| CVE-2022-48164 | WAVLINK WL-WN533A8 安全漏洞 — n/a | 7.5 | - | 2023-02-06 |
| CVE-2022-48166 | WAVLINK WL-WN530HG4 安全漏洞 — n/a | 9.1 | - | 2023-02-06 |
| CVE-2023-23849 | Synopsys Coverity Connect 跨站脚本漏洞 — Coverity CWE-79 | 6.1 | - | 2023-02-06 |
| CVE-2023-24576 | Dell EMC NetWorker 代码注入漏洞 — NetWorker, NVE CWE-94 | 7.5 | High | 2023-02-03 |
| CVE-2022-48165 | WAVLINK WL-WN530H4 安全漏洞 — n/a | 7.5 | - | 2023-02-03 |
| CVE-2023-25135 | Gimmie vBulletin 代码问题漏洞 — n/a | 9.8 | - | 2023-02-03 |
| CVE-2023-25136 | OpenSSH 资源管理错误漏洞 — n/a | 7.4 | - | 2023-02-03 |
| CVE-2021-37304 | jeecg 安全漏洞 — n/a | 9.1 | - | 2023-02-03 |
| CVE-2023-24574 | Dell Enterprise SONiC OS 资源管理错误漏洞 — Enterprise SONiC OS CWE-400 | 7.5 | High | 2023-02-02 |
| CVE-2022-40269 | Mitsubishi Electric GOT2000 和GT SoftGOT2000 安全漏洞 — GOT2000 Series GT27 model CWE-290 | 6.8 | Medium | 2023-02-02 |
| CVE-2022-40268 | Mitsubishi Electric GOT2000和GT SoftGOT2000 安全漏洞 — GOT2000 Series GT27 model CWE-1021 | 6.1 | Medium | 2023-02-02 |
| CVE-2022-33323 | Mitsubishi Electric MELFA Robot Controllers 安全漏洞 — MELFA SD/SQ Series Controller CR1DA-771 of RV-2SD CWE-489 | 7.5 | High | 2023-02-02 |
| CVE-2022-48113 | TOTOLINK N200RE 信任管理问题漏洞 — n/a | 9.8 | - | 2023-02-02 |
| CVE-2023-25013 | TYPO3 访问控制错误漏洞 — n/a | 8.6 | High | 2023-02-02 |
| CVE-2023-25014 | TYPO3 访问控制错误漏洞 — n/a | 8.6 | High | 2023-02-02 |
| CVE-2023-22418 | F5 BIG-IP 输入验证错误漏洞 — BIG-IP CWE-601 | 6.1 | Medium | 2023-02-01 |
| CVE-2022-46679 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-410 | 6.5 | Medium | 2023-02-01 |
| CVE-2022-45102 | Dell EMC Data Protection Central 安全漏洞 — Data Protection Central CWE-644 | 5.4 | Medium | 2023-02-01 |
| CVE-2022-45100 | Dell PowerScale OneFS 信任管理问题漏洞 — PowerScale OneFS CWE-295 | 8.1 | High | 2023-02-01 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24643 条 CVE 漏洞。