目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24633

access:pre-auth 类型相关 24633 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-34907 FileWave 信任管理问题漏洞 — n/a 9.8 - 2022-07-25
CVE-2022-33965 WordPress plugin WP Visitor Statistics SQL注入漏洞 — WP Visitor Statistics (WordPress plugin) CWE-89 9.3 Critical 2022-07-25
CVE-2022-2240 WordPress plugin Request a Quote 跨站脚本漏洞 — Request a Quote CWE-1236 8.8 - 2022-07-25
CVE-2022-0594 WordPress plugin Shareaholic 信息泄露漏洞 — Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic CWE-863 5.3 - 2022-07-25
CVE-2022-36444 Atos Unify OpenScape 安全漏洞 — n/a 8.6 High 2022-07-25
CVE-2022-33901 WordPress plugin MultiSafepay plugin for WooCommerce 安全漏洞 — MultiSafepay plugin for WooCommerce (WordPress plugin) 5.3 Medium 2022-07-22
CVE-2021-36200 Johnson Controls Metasys ADS/ADX/OAS Servers 访问控制错误漏洞 — Metasys ADS/ADX/OAS server CWE-306 5.3 Medium 2022-07-22
CVE-2022-34487 WordPress plugin Shortcode Addons 安全漏洞 — Shortcode Addons (WordPress plugin) CWE-264 9.8 Critical 2022-07-21
CVE-2022-33198 WordPress plugin Accordions 安全漏洞 — Accordions (WordPress plugin) CWE-264 9.8 Critical 2022-07-21
CVE-2022-30628 Supersmart 安全漏洞 — Supersmart.me – Walk Through 4.8 Medium 2022-07-21
CVE-2022-20916 Cisco IoT Control Center 跨站脚本漏洞 — Cisco IoT Control Center CWE-80 6.1 Medium 2022-07-21
CVE-2022-20857 Cisco Nexus Dashboard 访问控制错误漏洞 — Cisco Nexus Dashboard CWE-306 9.8 Critical 2022-07-21
CVE-2022-20858 Cisco Nexus Dashboard 访问控制错误漏洞 — Cisco Nexus Dashboard CWE-306 9.8 Critical 2022-07-21
CVE-2022-20860 Cisco Nexus Dashboard 信任管理问题漏洞 — Cisco Nexus Dashboard CWE-295 7.4 High 2022-07-21
CVE-2022-20861 Cisco Nexus Dashboard 跨站请求伪造漏洞 — Cisco Nexus Dashboard CWE-306 9.8 Critical 2022-07-21
CVE-2022-34367 Dell EMC Data Protection Central 跨站请求伪造漏洞 — Data Protection Central CWE-352 5.4 Medium 2022-07-20
CVE-2022-31234 Dell EMC PowerStore 安全漏洞 — PowerStore CWE-307 8.1 High 2022-07-20
CVE-2022-26138 Atlassian Confluence Server 信任管理问题漏洞 — Questions For Confluence CWE-798 9.8 - 2022-07-20
CVE-2022-26137 Atlassian Crowd和Atlassian Jira 访问控制错误漏洞 — Bamboo Server CWE-180 8.8 - 2022-07-20
CVE-2022-26136 Atlassian Crowd和Atlassian Jira 授权问题漏洞 — Bamboo Server CWE-180 8.8 - 2022-07-20
CVE-2022-33319 Mitsubishi Electric MC Works64 缓冲区错误漏洞 — GENESIS64 CWE-125 8.2 High 2022-07-20
CVE-2022-33318 Mitsubishi Electric MC Works64 代码问题漏洞 — GENESIS64 CWE-502 9.8 Critical 2022-07-20
CVE-2022-33320 Mitsubishi Electric MC Works64 代码问题漏洞 — GENESIS64 CWE-502 7.8 High 2022-07-20
CVE-2022-33315 Mitsubishi Electric MC Works64和ICONICS GENESIS64 代码问题漏洞 — GENESIS64 CWE-502 7.8 High 2022-07-20
CVE-2022-33317 Mitsubishi Electric MC Works64和ICONICS GENESIS64 安全漏洞 — GENESIS64 CWE-829 7.8 High 2022-07-20
CVE-2022-33316 Mitsubishi Electric MC Works64 和 ICONICS GENESIS64 代码问题漏洞 — GENESIS64 CWE-502 7.8 High 2022-07-20
CVE-2022-34049 WAVLINK WN530HG4 安全漏洞 — n/a 5.3 - 2022-07-20
CVE-2022-29834 ICONICS GENESIS64 路径遍历漏洞 — GENESIS64 CWE-22 7.5 High 2022-07-20
CVE-2022-2141 MiCODUS MV720 GPS 访问控制错误漏洞 — MV720 CWE-287 9.8 Critical 2022-07-20
CVE-2022-22217 Juniper Networks Junos OS 代码问题漏洞 — Junos OS CWE-754 6.1 Medium 2022-07-20

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24633 条 CVE 漏洞。