access:pre-auth 类型相关 24639 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-1989 | CODESYS 安全漏洞 — CODESYS Visualization CWE-204 | 5.3 | Medium | 2022-08-23 |
| CVE-2022-35733 | UNIMO Technology Digital Video Recorder 访问控制错误漏洞 — UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016 | 9.8 | - | 2022-08-23 |
| CVE-2022-35191 | D-Link AC1200 安全漏洞 — n/a | 7.5 | - | 2022-08-22 |
| CVE-2022-33932 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-419 | 5.3 | Medium | 2022-08-22 |
| CVE-2022-2594 | WordPress plugin Advanced Custom Fields 代码问题漏洞 — Advanced Custom Fields CWE-434 | 7.5 | - | 2022-08-22 |
| CVE-2022-2551 | WordPress plugin Duplicator 安全漏洞 — Duplicator – WordPress Migration Plugin CWE-425 | 7.5 | - | 2022-08-22 |
| CVE-2022-2544 | WordPress plugin Ninja Job Board 安全漏洞 — Ninja Job Board – Ultimate WordPress Job Board Plugin CWE-425 | 7.5 | - | 2022-08-22 |
| CVE-2022-2375 | WordPress plugin WP Sticky Button 跨站脚本漏洞 — WP Sticky Button – Click to Chat CWE-79 | 6.1 | - | 2022-08-22 |
| CVE-2022-2276 | WordPress plugin WP Edit Menu 安全漏洞 — WP Edit Menu CWE-862 | 4.3 | - | 2022-08-22 |
| CVE-2021-24910 | WordPress plugin Transposh WordPress Translation 跨站脚本漏洞 — Transposh WordPress Translation CWE-79 | 6.1 | - | 2022-08-22 |
| CVE-2022-35654 | Pegasystem PEGA Platform 跨站脚本漏洞 — Pega Infinity CWE-79 | 6.1 | - | 2022-08-22 |
| CVE-2022-37133 | D-Link DIR-816 安全漏洞 — n/a | 7.5 | - | 2022-08-22 |
| CVE-2022-30296 | Intel Datacenter Group Event 安全漏洞 — version | 7.5 | - | 2022-08-18 |
| CVE-2022-25899 | Intel Open AMT Cloud Toolkit 安全漏洞 — Intel(R) | 9.8 | - | 2022-08-18 |
| CVE-2022-23182 | Intel Data Center Manager 安全漏洞 — Intel(R) Data Center Manager software | 8.8 | - | 2022-08-18 |
| CVE-2022-22730 | Intel Edge Insights for Industrial 授权问题漏洞 — Intel(R) Edge Insights for Industrial software | 9.8 | - | 2022-08-18 |
| CVE-2022-21212 | Intel PROSet/Wireless WiFi Software 输入验证错误漏洞 — Intel(R) PROSet/Wireless WiFi products | 6.5 | - | 2022-08-18 |
| CVE-2022-21160 | Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞 — Intel(R) PROSet/Wireless WiFi products | 7.5 | - | 2022-08-18 |
| CVE-2022-21197 | Intel PROSet/Wireless WiFi Software 输入验证错误漏洞 — Intel(R) PROSet/Wireless WiFi products | 7.5 | - | 2022-08-18 |
| CVE-2022-21139 | Intel PROSet/Wireless WiFi Software 加密问题漏洞 — Intel(R) PROSet/Wireless WiFi products | 8.8 | - | 2022-08-18 |
| CVE-2022-37422 | Payara 路径遍历漏洞 — n/a | 7.5 | - | 2022-08-18 |
| CVE-2022-37062 | Teledyne FLIR AX8 访问控制错误漏洞 — n/a | 7.5 | - | 2022-08-18 |
| CVE-2022-37060 | Teledyne FLIR AX8 路径遍历漏洞 — n/a | 7.5 | - | 2022-08-18 |
| CVE-2021-23168 | Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞 — Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products | 6.5 | - | 2022-08-18 |
| CVE-2021-44545 | Intel PROSet/Wireless WiFi Software 输入验证错误漏洞 — Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products | 6.5 | - | 2022-08-18 |
| CVE-2022-28697 | Intel Active Management Technology 安全漏洞 — Intel(R) AMT and Intel(R) Standard Manageability | 6.8 | - | 2022-08-18 |
| CVE-2022-30601 | Intel Active Management Technology 安全漏洞 — Intel(R) AMT and Intel(R) Standard Manageability | 9.8 | - | 2022-08-18 |
| CVE-2022-35122 | Ecowitt GW1100 Series Weather Stations 访问控制错误漏洞 — n/a | 9.1 | - | 2022-08-17 |
| CVE-2022-1401 | Device42 访问控制错误漏洞 — CMDB CWE-863 | 6.9 | Medium | 2022-08-16 |
| CVE-2022-38184 | Esri Portal For ArcGis 安全漏洞 — Portal for ArcGIS CWE-284 | 7.5 | High | 2022-08-16 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24639 条 CVE 漏洞。