access:pre-auth 类型相关 24640 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-37913 | Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators | 9.8 | - | 2022-10-28 |
| CVE-2022-37914 | Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators | 9.8 | - | 2022-10-28 |
| CVE-2022-37915 | Aruba Networks EdgeConnect Enterprise Orchestrator 安全漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises) | 9.8 | - | 2022-10-28 |
| CVE-2022-38744 | Rockwell Automation FactoryTalk Alarm and Events Server 授权问题漏洞 — FactoryTalk Alarm and Events Server CWE-287 | 7.5 | High | 2022-10-27 |
| CVE-2021-45476 | YORDAM University Library Automation System 跨站脚本漏洞 — Yordam Library Information Document Automation Program CWE-79 | 4.7 | Medium | 2022-10-27 |
| CVE-2021-45475 | YORDAM University Library Automation System 信息泄露漏洞 — Yordam Library Information Document Automation Program CWE-200 | 5.3 | Medium | 2022-10-27 |
| CVE-2022-43364 | IP-COM EW9 安全漏洞 — n/a | 7.5 | - | 2022-10-27 |
| CVE-2022-43366 | IP-COM EW9 信息泄露漏洞 — n/a | 7.5 | - | 2022-10-27 |
| CVE-2022-40703 | AliveCor KardiaMobile 授权问题漏洞 — Kardia App CWE-302 | 5.2 | Medium | 2022-10-26 |
| CVE-2022-20933 | Cisco Meraki MX Series Security Appliances 安全漏洞 — Cisco Meraki MX Firmware CWE-234 | 8.6 | High | 2022-10-26 |
| CVE-2022-38197 | Esri ArcGIS Server 输入验证错误漏洞 — ArcGIS Server CWE-601 | 6.1 | Medium | 2022-10-25 |
| CVE-2022-38198 | Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 | 6.1 | Medium | 2022-10-25 |
| CVE-2022-38199 | Esri ArcGIS Server 安全漏洞 — ArcGIS Server CWE-494 | 6.1 | Medium | 2022-10-25 |
| CVE-2022-36452 | Mitel MiCollab 代码问题漏洞 — n/a | 9.8 | - | 2022-10-25 |
| CVE-2022-41711 | Badaso 代码问题漏洞 — Badaso | 9.8 | - | 2022-10-25 |
| CVE-2022-34439 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-770 | 5.3 | Medium | 2022-10-21 |
| CVE-2022-26870 | Dell EMC PowerStore 授权问题漏洞 — PowerStore CWE-288 | 7.0 | High | 2022-10-21 |
| CVE-2022-27494 | Aethon TUG Home Base Server 跨站脚本漏洞 — TUG Home Base Server | 8.2 | High | 2022-10-21 |
| CVE-2022-1070 | Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server | 8.2 | High | 2022-10-21 |
| CVE-2022-1059 | Aethon TUG Home Base Server 跨站脚本漏洞 — TUG Home Base Server | 8.2 | High | 2022-10-21 |
| CVE-2022-26423 | Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server | 8.2 | High | 2022-10-21 |
| CVE-2022-1066 | Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server | 8.2 | High | 2022-10-21 |
| CVE-2022-43400 | Siemens Siveillance Video Mobile Server 授权问题漏洞 — Siveillance Video Mobile Server V2022 R2 CWE-1390 | 9.8 | - | 2022-10-21 |
| CVE-2022-43421 | Jenkins Tuleap Git Branch Source Plugin 安全漏洞 — Jenkins Tuleap Git Branch Source Plugin | 7.5 | - | 2022-10-19 |
| CVE-2016-20016 | MV POWER CCTV DVR 安全漏洞 — n/a | 9.8 | - | 2022-10-19 |
| CVE-2016-20017 | D-Link DSL-2750B 命令注入漏洞 — n/a | 9.8 | - | 2022-10-19 |
| CVE-2022-39058 | Changing Information Technology RAVA certificate validation system 路径遍历漏洞 — RAVA certificate validation system CWE-22 | 7.5 | High | 2022-10-18 |
| CVE-2022-39056 | Changing Information Technology RAVA certificate validation system SQL注入漏洞 — RAVA certificate validation system CWE-89 | 9.8 | Critical | 2022-10-18 |
| CVE-2022-39055 | Changing Information Technology RAVA certificate validation system 代码问题漏洞 — RAVA certificate validation system CWE-918 | 5.3 | Medium | 2022-10-18 |
| CVE-2022-22250 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 6.5 | Medium | 2022-10-18 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24640 条 CVE 漏洞。