access:pre-auth 类型相关 24630 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-1916 | WordPress plugin Active Products Tables for WooCommerce 跨站脚本漏洞 — Active Products Tables for WooCommerce. Professional products tables for WooCommerce store CWE-79 | 6.1 | - | 2022-06-27 |
| CVE-2022-1904 | WordPress plugin Pricing Tables 跨站脚本漏洞 — Pricing Tables WordPress Plugin – Easy Pricing Tables CWE-79 | 6.1 | - | 2022-06-27 |
| CVE-2022-1903 | WordPress plugin ARMember 安全漏洞 — ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup CWE-862 | 8.1 | - | 2022-06-27 |
| CVE-2022-1574 | WordPress plugin HTML2WP 代码问题漏洞 — HTML2WP | 9.8 | - | 2022-06-27 |
| CVE-2022-0444 | WordPress plugin XCloner 安全漏洞 — Backup, Restore and Migrate WordPress Sites With the XCloner Plugin | 4.3 | - | 2022-06-27 |
| CVE-2022-2105 | Secheron SEPCOS Control and Protection Relay 安全漏洞 — SEPCOS Control and Protection Relay firmware package CWE-841 | 9.4 | Critical | 2022-06-24 |
| CVE-2022-1517 | Illumina Local Run Manager 代码注入漏洞 — NextSeq 550Dx CWE-250 | 10.0 | Critical | 2022-06-24 |
| CVE-2022-23170 | Sysaid Technologies SysAid 代码问题漏洞 — SysAid - Okta SSO integration CWE-611 | 5.9 | Medium | 2022-06-24 |
| CVE-2022-31804 | CODESYS Gateway Server安全漏洞 — CODESYS Gateway Server V2 CWE-789 | 7.5 | High | 2022-06-24 |
| CVE-2022-31803 | CODESYS Gateway Server 资源管理错误漏洞 — CODESYS Gateway Server V2 CWE-400 | 5.3 | Medium | 2022-06-24 |
| CVE-2022-31801 | 多款Phoenix Contact产品数据伪造问题漏洞 — MULTIPROG CWE-345 | 9.8 | Critical | 2022-06-21 |
| CVE-2022-31800 | 多款Phoenix Contact产品数据伪造问题漏洞 — ILC 1x0 CWE-345 | 9.8 | Critical | 2022-06-21 |
| CVE-2022-1905 | WordPress plugin Events Made Easy SQL注入漏洞 — Events Made Easy CWE-89 | 9.8 | - | 2022-06-20 |
| CVE-2022-26668 | ASUS Control Center 安全漏洞 — Control Center CWE-269 | 7.3 | High | 2022-06-20 |
| CVE-2022-21742 | Realtek USB driver 安全漏洞 — USB FE/1GbE/2.5GbE/5GbE NIC Family CWE-120 | 6.2 | Medium | 2022-06-20 |
| CVE-2021-45918 | National Health Insurance 缓冲区错误漏洞 — health insurance web service component CWE-122 | 7.5 | High | 2022-06-20 |
| CVE-2022-31784 | Mitel MiVoice Business Express 安全漏洞 — n/a | 9.8 | - | 2022-06-17 |
| CVE-2022-32276 | Grafana 授权问题漏洞 — n/a | 9.1 | - | 2022-06-17 |
| CVE-2022-31295 | Online Discussion Forum Site 安全漏洞 — n/a | 4.3 | - | 2022-06-16 |
| CVE-2022-27511 | Citrix Application Delivery Management 安全漏洞 — Citrix Application Delivery Management (Citrix ADM) CWE-284 | 9.8 | - | 2022-06-16 |
| CVE-2022-24562 | IOBit IOTransfer 访问控制错误漏洞 — n/a | 9.8 | - | 2022-06-16 |
| CVE-2022-31294 | Sourcecodester Online Discussion Forum Site 跨站请求伪造漏洞 — n/a | 6.5 | - | 2022-06-16 |
| CVE-2021-41420 | MaianAffiliate 跨站脚本漏洞 — n/a | 5.4 | - | 2022-06-16 |
| CVE-2022-24946 | Mitsubishi Electric MELSEC-Q Series 安全漏洞 — Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubishi Electric MELSEC-Q Series Q03UDECPU; Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU; Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU; Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU; Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V; Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G); Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS; Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P); Mitsubishi Electric MELSEC-L series L26CPU-(P)BT; Mitsubishi Electric MELIPC Series MI5122-VW | 7.5 | - | 2022-06-15 |
| CVE-2021-43756 | Adobe Media Encoder 缓冲区错误漏洞 — Media Encoder CWE-787 | 7.8 | High | 2022-06-15 |
| CVE-2022-20825 | Cisco Small Business 缓冲区错误漏洞 — Cisco Small Business RV Series Router Firmware CWE-121 | 9.8 | Critical | 2022-06-15 |
| CVE-2022-20817 | Cisco Unified IP Phones 安全特征问题漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-338 | 7.4 | High | 2022-06-15 |
| CVE-2022-20798 | Cisco多款产品 授权问题漏洞 — Cisco Email Security Appliance (ESA) CWE-287 | 9.8 | Critical | 2022-06-15 |
| CVE-2022-20736 | Cisco AppDynamics Controller 安全漏洞 — Cisco AppDynamics CWE-939 | 5.3 | Medium | 2022-06-15 |
| CVE-2022-20733 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-287 | 5.3 | Medium | 2022-06-15 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24630 条 CVE 漏洞。