目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24643

access:pre-auth 类型相关 24643 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2023-22415 Juniper Networks Junos OS 缓冲区错误漏洞 — Junos OS CWE-787 7.5 High 2023-01-12
CVE-2023-22416 Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-120 7.5 High 2023-01-12
CVE-2023-22417 Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-401 7.5 High 2023-01-12
CVE-2022-4874 Netcomm路由器 授权问题漏洞 — NF20 7.5 - 2023-01-11
CVE-2022-3841 Red Hat Advanced Cluster Management for Kubernetes 代码问题漏洞 — RHACM 9.1 - 2023-01-11
CVE-2022-43389 Zyxel NR7101 安全漏洞 — NR7101 firmware CWE-120 8.6 High 2023-01-11
CVE-2022-43393 Zyxel GS1920 代码问题漏洞 — GS1920-24v2 firmware CWE-754 8.2 High 2023-01-11
CVE-2022-4707 WordPress plugin Royal Elementor Addons 跨站请求伪造漏洞 — Royal Addons for Elementor – Addons and Templates Kit for Elementor CWE-352 4.3 Medium 2023-01-10
CVE-2022-4710 WordPress plugin Royal Elementor Addons 跨站脚本漏洞 — Royal Addons for Elementor – Addons and Templates Kit for Elementor CWE-79 6.1 Medium 2023-01-10
CVE-2022-43514 Siemens Automation License Manager 路径遍历漏洞 — Automation License Manager V5 CWE-22 7.7 High 2023-01-10
CVE-2022-43513 Siemens Automation License Manager 安全漏洞 — Automation License Manager V5 CWE-73 8.2 High 2023-01-10
CVE-2023-0017 SAP NetWeaver AS 访问控制错误漏洞 — NetWeaver AS for Java CWE-284 9.4 Critical 2023-01-10
CVE-2022-4422 BULUTDESK CALLCENTER SQL注入漏洞 — Bulutdesk Callcenter CWE-89 9.8 Critical 2023-01-10
CVE-2022-4310 WordPress Plugin Slimstat Analytics 跨站脚本漏洞 — Slimstat Analytics 6.1 - 2023-01-09
CVE-2022-43972 Linksys WRT54GL 代码问题漏洞 — WRT54GL Wireless-G Broadband Router CWE-476 6.5 Medium 2023-01-09
CVE-2022-0668 JFrog Artifactory 安全漏洞 — JFrog Artifactory CWE-274 5.3 Medium 2023-01-08
CVE-2023-0088 WordPress plugin Swifty Page Manager 跨站请求伪造漏洞 — Swifty Page Manager CWE-352 8.8 High 2023-01-05
CVE-2023-0086 WordPress plugin JetWidgets for Elementor 跨站请求伪造漏洞 — JetWidgets For Elementor CWE-352 5.4 Medium 2023-01-05
CVE-2023-0038 WordPress plugin Survey Maker 跨站脚本漏洞 — Survey Maker CWE-79 7.2 High 2023-01-03
CVE-2022-39039 aEnrich a+HRD 代码问题漏洞 — a+HRD CWE-918 9.8 Critical 2023-01-03
CVE-2022-39040 aEnrich a+HRD 路径遍历漏洞 — a+HRD CWE-22 7.5 High 2023-01-03
CVE-2022-39041 aEnrich a+HRD SQL注入漏洞 — a+HRD CWE-89 9.8 Critical 2023-01-03
CVE-2022-39042 aEnrich a+HRD 授权问题漏洞 — a+HRD CWE-287 9.8 Critical 2023-01-03
CVE-2022-46304 ServiSign 操作系统命令注入漏洞 — ServiSign CWE-78 8.8 High 2023-01-03
CVE-2022-46305 ServiSign 路径遍历漏洞 — ServiSign CWE-22 6.5 Medium 2023-01-03
CVE-2022-46306 ServiSign 路径遍历漏洞 — ServiSign CWE-22 8.8 High 2023-01-03
CVE-2022-47618 Merit LILIN AH55B04 DVR和AH55B08 DVR 信任管理问题漏洞 — AH55B04 DVR firmware CWE-798 9.8 Critical 2023-01-03
CVE-2021-32824 Apache Dubbo 代码问题漏洞 — Dubbo CWE-502 9.8 Critical 2023-01-03
CVE-2022-4329 WordPress plugin Product list Widget for Woocommerce 跨站脚本漏洞 — Product list Widget for Woocommerce 6.1 - 2023-01-02
CVE-2022-4099 WordPress plugin Joy Of Text Lite SQL注入漏洞 — Joy Of Text Lite 9.8 - 2023-01-02

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24643 条 CVE 漏洞。