目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24640

access:pre-auth 类型相关 24640 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-37913 Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators 9.8 - 2022-10-28
CVE-2022-37914 Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators 9.8 - 2022-10-28
CVE-2022-37915 Aruba Networks EdgeConnect Enterprise Orchestrator 安全漏洞 — Aruba EdgeConnect Enterprise Orchestrator (on-premises) 9.8 - 2022-10-28
CVE-2022-38744 Rockwell Automation FactoryTalk Alarm and Events Server 授权问题漏洞 — FactoryTalk Alarm and Events Server CWE-287 7.5 High 2022-10-27
CVE-2021-45476 YORDAM University Library Automation System 跨站脚本漏洞 — Yordam Library Information Document Automation Program CWE-79 4.7 Medium 2022-10-27
CVE-2021-45475 YORDAM University Library Automation System 信息泄露漏洞 — Yordam Library Information Document Automation Program CWE-200 5.3 Medium 2022-10-27
CVE-2022-43364 IP-COM EW9 安全漏洞 — n/a 7.5 - 2022-10-27
CVE-2022-43366 IP-COM EW9 信息泄露漏洞 — n/a 7.5 - 2022-10-27
CVE-2022-40703 AliveCor KardiaMobile 授权问题漏洞 — Kardia App CWE-302 5.2 Medium 2022-10-26
CVE-2022-20933 Cisco Meraki MX Series Security Appliances 安全漏洞 — Cisco Meraki MX Firmware CWE-234 8.6 High 2022-10-26
CVE-2022-38197 Esri ArcGIS Server 输入验证错误漏洞 — ArcGIS Server CWE-601 6.1 Medium 2022-10-25
CVE-2022-38198 Esri ArcGIS Server 跨站脚本漏洞 — ArcGIS Server CWE-79 6.1 Medium 2022-10-25
CVE-2022-38199 Esri ArcGIS Server 安全漏洞 — ArcGIS Server CWE-494 6.1 Medium 2022-10-25
CVE-2022-36452 Mitel MiCollab 代码问题漏洞 — n/a 9.8 - 2022-10-25
CVE-2022-41711 Badaso 代码问题漏洞 — Badaso 9.8 - 2022-10-25
CVE-2022-34439 Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-770 5.3 Medium 2022-10-21
CVE-2022-26870 Dell EMC PowerStore 授权问题漏洞 — PowerStore CWE-288 7.0 High 2022-10-21
CVE-2022-27494 Aethon TUG Home Base Server 跨站脚本漏洞 — TUG Home Base Server 8.2 High 2022-10-21
CVE-2022-1070 Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server 8.2 High 2022-10-21
CVE-2022-1059 Aethon TUG Home Base Server 跨站脚本漏洞 — TUG Home Base Server 8.2 High 2022-10-21
CVE-2022-26423 Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server 8.2 High 2022-10-21
CVE-2022-1066 Aethon TUG Home Base Server 安全漏洞 — TUG Home Base Server 8.2 High 2022-10-21
CVE-2022-43400 Siemens Siveillance Video Mobile Server 授权问题漏洞 — Siveillance Video Mobile Server V2022 R2 CWE-1390 9.8 - 2022-10-21
CVE-2022-43421 Jenkins Tuleap Git Branch Source Plugin 安全漏洞 — Jenkins Tuleap Git Branch Source Plugin 7.5 - 2022-10-19
CVE-2016-20016 MV POWER CCTV DVR 安全漏洞 — n/a 9.8 - 2022-10-19
CVE-2016-20017 D-Link DSL-2750B 命令注入漏洞 — n/a 9.8 - 2022-10-19
CVE-2022-39058 Changing Information Technology RAVA certificate validation system 路径遍历漏洞 — RAVA certificate validation system CWE-22 7.5 High 2022-10-18
CVE-2022-39056 Changing Information Technology RAVA certificate validation system SQL注入漏洞 — RAVA certificate validation system CWE-89 9.8 Critical 2022-10-18
CVE-2022-39055 Changing Information Technology RAVA certificate validation system 代码问题漏洞 — RAVA certificate validation system CWE-918 5.3 Medium 2022-10-18
CVE-2022-22250 Juniper Networks Junos OS 安全漏洞 — Junos OS 6.5 Medium 2022-10-18

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24640 条 CVE 漏洞。