目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24643

access:pre-auth 类型相关 24643 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-31710 VMware vRealize Log Insight 代码问题漏洞 — vRealize Log Insight (vRLI) 7.5 - 2023-01-25
CVE-2022-31711 VMware vRealize Log Insight 信息泄露漏洞 — vRealize Log Insight (vRLI) 7.5 - 2023-01-25
CVE-2022-27508 多款Citrix Systems产品资源管理错误漏洞 — Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway CWE-400 7.5 - 2023-01-24
CVE-2022-0316 多款WordPress theme 代码问题漏洞 — WeStand 9.8 - 2023-01-23
CVE-2022-4305 WordPress plugin The Login as User or Customer 安全漏洞 — Login as User or Customer 9.8 - 2023-01-23
CVE-2022-4383 WordPress plugin CBX Petition SQL注入漏洞 — CBX Petition for WordPress 9.8 - 2023-01-23
CVE-2021-24881 WordPress和WordPress plugin 安全漏洞 — Passster 7.5 - 2023-01-23
CVE-2022-4307 WordPress plugin The Pardakht Delkhah 跨站脚本漏洞 — پلاگین پرداخت دلخواه 6.1 - 2023-01-23
CVE-2022-37718 EdgeNexus ADC 操作系统命令注入漏洞 — n/a 8.8 - 2023-01-23
CVE-2021-43447 Ascensio System ONLYOFFICE 访问控制错误漏洞 — n/a 7.5 - 2023-01-23
CVE-2023-23607 Dasherr 代码问题漏洞 — Dasherr CWE-434 9.8 Critical 2023-01-20
CVE-2022-40267 Mitsubishi Electric MELSEC iQ-F series 安全漏洞 — MELSEC iQ-F Series FX5U-32MT/ES CWE-337 5.9 Medium 2023-01-20
CVE-2023-23691 Dell MEC PV ME5 环境问题漏洞 — Dell PowerVault ME5 CWE-444 8.1 High 2023-01-20
CVE-2022-47732 Yeastar N412和Yeastar N824 安全漏洞 — n/a 7.5 - 2023-01-20
CVE-2023-22331 Contec CONPROSYS HMI System 安全漏洞 — CONPROSYS HMI System (CHS) 7.5 - 2023-01-20
CVE-2023-22339 Contec CONPROSYS HMI System 安全漏洞 — CONPROSYS HMI System (CHS) 7.5 - 2023-01-20
CVE-2023-23488 WordPress Plugin The Paid Memberships Pro SQL注入漏洞 — Paid Memberships Pro WordPress Plugin 9.8 - 2023-01-20
CVE-2023-23489 WordPress Plugin The Easy Digital Downloads SQL注入漏洞 — Easy Digital Downloads WordPress Plugin 9.8 - 2023-01-20
CVE-2023-0403 WordPress plugin Social Warfare 跨站请求伪造漏洞 — Social Sharing Plugin – Social Warfare CWE-352 5.4 Medium 2023-01-19
CVE-2022-3738 WAGO 访问控制错误漏洞 — Series WAGO PFC100 CWE-306 5.9 Medium 2023-01-19
CVE-2023-20058 Cisco Unified Intelligence Center 跨站脚本漏洞 — Cisco Unified Contact Center Enterprise CWE-79 6.1 - 2023-01-19
CVE-2023-20019 Cisco BroadWorks Application 跨站脚本漏洞 — Cisco BroadWorks CWE-79 6.1 Medium 2023-01-19
CVE-2023-20047 Cisco Webex 安全漏洞 — Cisco Webex Room Phone CWE-400 6.5 Medium 2023-01-19
CVE-2023-20018 Cisco IP Phone 安全漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-288 8.6 High 2023-01-19
CVE-2023-20020 Cisco BroadWorks Application 输入验证错误漏洞 — Cisco BroadWorks CWE-835 8.6 High 2023-01-19
CVE-2023-20025 Cisco Small Business RV016 输入验证错误漏洞 — Cisco Small Business RV Series Router Firmware CWE-293 9.0 Critical 2023-01-19
CVE-2023-20057 Cisco Email Security Appliance 注入漏洞 — Cisco Email Security Appliance (ESA) CWE-792 - - 2023-01-19
CVE-2023-0126 SonicWALL SMA1000 series 路径遍历漏洞 — SonicWall SMA1000 CWE-22 7.5 - 2023-01-19
CVE-2023-0385 WordPress plugin Custom 404 Pro 跨站请求伪造漏洞 — Custom 404 Pro CWE-352 4.3 Medium 2023-01-18
CVE-2023-21893 Oracle Database Server 安全漏洞 — Data Provider for .NET 7.5 High 2023-01-17

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24643 条 CVE 漏洞。