access:pre-auth 类型相关 24642 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-3900 | WordPress plugin Cooked Pro 代码问题漏洞 — Cooked Pro | 9.8 | - | 2022-12-12 |
| CVE-2022-3982 | WordPress plugin Booking Calendar 代码问题漏洞 — Booking calendar, Appointment Booking System | 9.8 | - | 2022-12-12 |
| CVE-2022-3915 | WordPress plugin Dokan SQL注入漏洞 — Dokan | 9.8 | - | 2022-12-12 |
| CVE-2022-3912 | WordPress plugin User Registration 代码问题漏洞 — User Registration | 7.5 | - | 2022-12-12 |
| CVE-2022-3485 | IFM Moneo Appliance 授权问题漏洞 — moneo appliance CWE-640 | 9.8 | Critical | 2022-12-12 |
| CVE-2022-41559 | TIBCO Software Nimbus 输入验证错误漏洞 — TIBCO Nimbus | 9.3 | Critical | 2022-12-12 |
| CVE-2022-46905 | WebSoft HCM 跨站脚本漏洞 — n/a | 6.1 | - | 2022-12-12 |
| CVE-2022-25836 | Bluetooth Core Specification 安全漏洞 — n/a | 7.5 | - | 2022-12-12 |
| CVE-2022-25837 | Bluetooth Core Specification 安全漏洞 — n/a | 6.4 | - | 2022-12-12 |
| CVE-2022-44790 | BigCommerec Interspire Email Marketer SQL注入漏洞 — n/a | 7.5 | - | 2022-12-09 |
| CVE-2022-20968 | Cisco IP Phone 缓冲区错误漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-787 | 8.1 | High | 2022-12-08 |
| CVE-2022-33186 | Brocade Fabric OS 操作系统命令注入漏洞 — Brocade Fabric OS | 9.1 | - | 2022-12-08 |
| CVE-2022-44932 | Tenda A18 安全漏洞 — n/a | - | - | 2022-12-08 |
| CVE-2022-45498 | Tenda W6 安全漏洞 — n/a | 7.5 | - | 2022-12-08 |
| CVE-2022-45504 | Tenda W6 安全漏洞 — n/a | 7.5 | - | 2022-12-08 |
| CVE-2022-20691 | Cisco ATA 190 资源管理错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-400 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-20690 | Cisco ATA 190 输入验证错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-130 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-20689 | Cisco ATA 190 输入验证错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-130 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-20688 | Cisco ATA 190 输入验证错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-125 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-20687 | Cisco ATA 190 输入验证错误漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-120 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-20686 | Cisco ATA 190 代码注入漏洞 — Cisco Analog Telephone Adaptor (ATA) Software CWE-130 | 5.3 | Medium | 2022-12-07 |
| CVE-2022-42458 | Shift Tech bingo!CMS 授权问题漏洞 — bingo!CMS | 9.8 | - | 2022-12-07 |
| CVE-2022-45113 | Six Apart Movable Type 输入验证错误漏洞 — Movable Type | 6.5 | - | 2022-12-07 |
| CVE-2022-45122 | Six Apart Movable Type 跨站脚本漏洞 — Movable Type | 6.1 | - | 2022-12-07 |
| CVE-2022-46154 | KodExplorer 路径遍历漏洞 — KodExplorer CWE-22 | 8.6 | High | 2022-12-06 |
| CVE-2022-35843 | Fortinet FortiOS授权问题漏洞 — FortiOS CWE-284 | 7.7 | High | 2022-12-06 |
| CVE-2022-46169 | Cacti 命令注入漏洞 — cacti CWE-74 | 9.8 | Critical | 2022-12-05 |
| CVE-2022-35254 | Pulse Secure Pulse Connect Secure 资源管理错误漏洞 — Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway CWE-416 | 7.5 | - | 2022-12-05 |
| CVE-2022-35258 | Pulse Secure Pulse Connect Secure 安全漏洞 — Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway CWE-128 | 7.5 | - | 2022-12-05 |
| CVE-2022-38336 | Mobatek MobaXterm 授权问题漏洞 — n/a | 8.1 | - | 2022-12-05 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24642 条 CVE 漏洞。