目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24630

access:pre-auth 类型相关 24630 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-30242 Honeywell Alerton Ascent Control Module 安全漏洞 — n/a 5.7 - 2022-07-15
CVE-2022-35409 Mbed TLS 缓冲区错误漏洞 — n/a 9.1 - 2022-07-15
CVE-2022-35403 ZOHO ManageEngine ServiceDesk Plus 安全漏洞 — n/a 7.5 - 2022-07-12
CVE-2022-35228 SAP BusinessObjects Central Management Console 跨站请求伪造漏洞 — SAP BusinessObjects Business Intelligence Platform (Central management Console) CWE-352 8.1 - 2022-07-12
CVE-2022-32247 SAP NetWeaver和SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 6.1 - 2022-07-12
CVE-2022-28771 SAP Business One License service API 访问控制错误漏洞 — SAP Business One License service API CWE-306 7.5 - 2022-07-12
CVE-2022-24800 October CMS 竞争条件问题漏洞 — october CWE-362 8.1 High 2022-07-12
CVE-2022-33736 Siemens Opcenter Quality 授权问题漏洞 — Opcenter Quality V13.1 CWE-303 9.1 - 2022-07-12
CVE-2022-33138 Siemens SIMATIC 访问控制错误漏洞 — SIMATIC MV540 H CWE-306 9.1 - 2022-07-12
CVE-2022-29884 Siemens SICAM A8000 CP-8000 资源管理错误漏洞 — CP-8000 MASTER MODULE WITH I/O -25/+70°C CWE-772 9.1 - 2022-07-12
CVE-2022-26649 多款Siemens SCALANCE产品安全漏洞 — SCALANCE X200-4P IRT CWE-120 9.6 Critical 2022-07-12
CVE-2022-26648 Siemens SCALANCE 安全漏洞 — SCALANCE X200-4P IRT CWE-120 8.2 High 2022-07-12
CVE-2022-26647 Siemens SCALANCE 安全特征问题特征问题漏洞 — SCALANCE X200-4P IRT CWE-330 8.8 High 2022-07-12
CVE-2021-44222 Siemens SIMATIC eaSie Core Package 访问控制错误漏洞 — SIMATIC eaSie Core Package CWE-306 9.8 - 2022-07-12
CVE-2022-1952 WordPress plugin Free Booking Plugin for Hotels, Restaurant and Car Rental 代码问题漏洞 — Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC CWE-434 9.8 - 2022-07-11
CVE-2022-1951 WordPress core plugin for kitestudio 跨站脚本漏洞 — core plugin for kitestudio themes CWE-79 6.1 - 2022-07-11
CVE-2022-1938 WordPress plugin Awin Data Feed 跨站脚本漏洞 — Awin Data Feed CWE-79 5.4 - 2022-07-11
CVE-2022-1937 WordPress plugin Awin Data Feed 跨站脚本漏洞 — Awin Data Feed CWE-79 6.1 - 2022-07-11
CVE-2022-1057 WordPress plugin Pricing Deals for WooCommerce SQL注入漏洞 — Pricing Deals for WooCommerce CWE-89 9.8 - 2022-07-11
CVE-2022-35411 rpc.py 代码问题漏洞 — n/a 9.8 - 2022-07-08
CVE-2021-46825 Symantec Advanced Secure Gateway 环境问题漏洞 — Advance Secure Gateway and ProxySG 5.3 - 2022-07-07
CVE-2022-20815 Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 6.1 Medium 2022-07-06
CVE-2022-20800 Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unity Connection CWE-79 6.1 Medium 2022-07-06
CVE-2022-20752 Cisco Unified Communications Manager 和 Cisco Unity Connection安全漏洞 — Cisco Unified Communications Manager CWE-208 5.3 Medium 2022-07-06
CVE-2022-31126 Roxy-WI 注入漏洞 — roxy-wi CWE-74 10.0 Critical 2022-07-06
CVE-2022-31125 Roxy-WI 授权问题漏洞 — roxy-wi CWE-287 10.0 Critical 2022-07-06
CVE-2022-1946 WordPress plugin Gallery 跨站脚本漏洞 — Gallery – Image and Video Gallery with Thumbnails CWE-79 6.1 - 2022-07-04
CVE-2021-37524 FusionPBX 跨站脚本漏洞 — n/a 6.1 - 2022-07-01
CVE-2022-1963 GitLab 信息泄露漏洞 — GitLab 5.3 Medium 2022-07-01
CVE-2022-1953 WordPress plugin WooCommerce 路径遍历漏洞 — Product Configurator for WooCommerce CWE-22 9.1 - 2022-06-27

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24630 条 CVE 漏洞。