access:pre-auth 类型相关 24639 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-22522 | Carlo Gavazzi UWP 信任管理问题漏洞 — UWP 3.0 Monitoring Gateway and Controller CWE-798 | 9.8 | Critical | 2022-09-28 |
| CVE-2022-30935 | b2evolution 安全特征问题漏洞 — n/a | 9.1 | - | 2022-09-28 |
| CVE-2022-39054 | Cowell enterprise travel management system 跨站脚本漏洞 — enterprise travel management system CWE-79 | 6.1 | Medium | 2022-09-28 |
| CVE-2022-39053 | Heimavista Rpage 跨站脚本漏洞 — Rpage CWE-79 | 6.1 | Medium | 2022-09-28 |
| CVE-2022-39035 | Smart eVision 跨站脚本漏洞 — Smart eVision CWE-79 | 6.1 | Medium | 2022-09-28 |
| CVE-2022-39033 | Smart eVision 路径遍历漏洞 — Smart eVision CWE-22 | 9.8 | Critical | 2022-09-28 |
| CVE-2022-39030 | Smart eVision 安全漏洞 — Smart eVision CWE-200 | 7.5 | High | 2022-09-28 |
| CVE-2022-28813 | Carlo Gavazzi UWP SQL注入漏洞 — UWP 3.0 Monitoring Gateway and Controller CWE-89 | 7.5 | High | 2022-09-28 |
| CVE-2022-3323 | Advantech iView SQL注入漏洞 — Advantech iView | 7.5 | - | 2022-09-27 |
| CVE-2022-37346 | EC-CUBE 代码问题漏洞 — Product Image Bulk Upload Plugin | 9.8 | - | 2022-09-27 |
| CVE-2022-41570 | EyesOfNetwork SQL注入漏洞 — n/a | 9.8 | - | 2022-09-27 |
| CVE-2022-30004 | Online Market Place Site SQL注入漏洞 — n/a | 9.8 | - | 2022-09-26 |
| CVE-2022-3119 | WordPress plugin OAuth client Single Sign On 跨站请求伪造漏洞 — OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) CWE-287 | 9.1 | - | 2022-09-26 |
| CVE-2022-2987 | WordPress plugin Ldap WP Login / Active Directory Integration 安全漏洞 — Ldap WP Login / Active Directory Integration CWE-862 | 5.3 | - | 2022-09-26 |
| CVE-2021-24890 | WordPress plugin Scripts Organizer 安全漏洞 — scripts-organizer CWE-862 | 8.8 | - | 2022-09-26 |
| CVE-2022-36340 | WordPress plugin MailOptin 安全漏洞 — MailOptin (WordPress plugin) CWE-862 | 6.5 | Medium | 2022-09-23 |
| CVE-2022-40630 | Tacitine EN6200 授权问题漏洞 — Firewall CWE-384 | 6.5 | Medium | 2022-09-23 |
| CVE-2022-40629 | Tacitine EN6200 安全漏洞 — Firewall CWE-200 | 7.5 | High | 2022-09-23 |
| CVE-2022-40628 | Tacitine EN6200 代码注入漏洞 — Firewall CWE-94 | 9.8 | Critical | 2022-09-23 |
| CVE-2022-40194 | WordPress plugin Customer Reviews for WooCommerce 信息泄露漏洞 — Customer Reviews for WooCommerce (WordPress plugin) CWE-200 | 5.3 | Medium | 2022-09-23 |
| CVE-2022-40193 | WordPress plugin Awesome Filterable Portfolio 跨站脚本漏洞 — Awesome Filterable Portfolio (WordPress plugin) CWE-79 | 6.1 | Medium | 2022-09-23 |
| CVE-2022-35238 | WordPress plugin Awesome Filterable Portfolio 安全漏洞 — Awesome Filterable Portfolio (WordPress plugin) CWE-264 | 6.5 | Medium | 2022-09-23 |
| CVE-2022-2266 | YORDAM University Library Automation System 跨站脚本漏洞 — Yordam Bilgi Teknolojileri CWE-79 | 6.1 | Medium | 2022-09-22 |
| CVE-2022-41238 | Jenkins DotCi Plugin 安全漏洞 — Jenkins DotCi Plugin | 9.8 | - | 2022-09-21 |
| CVE-2022-2265 | Directory Management System 路径遍历漏洞 — Çekino Bilgi Teknolojileri CWE-35 | 7.5 | High | 2022-09-21 |
| CVE-2022-0495 | KOHA SQL注入漏洞 — Parantez Teknoloji CWE-89 | 9.4 | Critical | 2022-09-21 |
| CVE-2022-2315 | DataBank Database Software Accreditation Tracking/Presentation Module SQL注入漏洞 — Database Software CWE-89 | 9.4 | Critical | 2022-09-21 |
| CVE-2022-23685 | Aruba Networks ClearPass Policy Manager 跨站请求伪造漏洞 — Aruba ClearPass Policy Manager | 8.8 | - | 2022-09-20 |
| CVE-2022-37884 | Aruba Networks ClearPass Policy Manager 安全漏洞 — Aruba ClearPass Policy Manager | 7.5 | - | 2022-09-20 |
| CVE-2020-36602 | 多款Huawei产品缓冲区错误漏洞 — 576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOTA-CM-H-Shark-BD;586-HOTA-CM-H-Shark-BD;588-HOTA-CM-H-Shark-BD;606-HOTA-CM-H-Shark-BD;BI-ACC-REPORT;CM-H-Shark-BD | 6.1 | - | 2022-09-20 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24639 条 CVE 漏洞。