access:pre-auth 类型相关 24630 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-28005 | 3CX Phone system（web）management console 安全漏洞 — n/a | 9.8 | - | 2022-05-06 |
| CVE-2022-20785 | ClamAV 安全漏洞 — Cisco AMP for Endpoints CWE-401 | 7.5 | High | 2022-05-04 |
| CVE-2022-20771 | ClamAV 资源管理错误漏洞 — Cisco AMP for Endpoints CWE-399 | 7.5 | High | 2022-05-04 |
| CVE-2022-20770 | ClamAV 资源管理错误漏洞 — Cisco AMP for Endpoints CWE-399 | 8.6 | High | 2022-05-04 |
| CVE-2022-23443 | Fortinet FortiSOAR 安全漏洞 — Fortinet FortiSOAR | 7.5 | High | 2022-05-04 |
| CVE-2022-20715 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliances Software 输入验证错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-399 | 8.6 | High | 2022-05-03 |
| CVE-2022-20730 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-241 | 4.0 | Medium | 2022-05-03 |
| CVE-2022-20740 | Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center 6.1.0 CWE-80 | 6.1 | Medium | 2022-05-03 |
| CVE-2022-20742 | 多款Cisco产品安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-325 | 7.4 | High | 2022-05-03 |
| CVE-2022-20767 | Cisco Firepower Threat Defense 资源管理错误漏洞 — Cisco Firepower Threat Defense Software CWE-399 | 8.6 | High | 2022-05-03 |
| CVE-2022-20760 | 多款Cisco产品资源管理错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-400 | 8.6 | High | 2022-05-03 |
| CVE-2022-20757 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-770 | 8.6 | High | 2022-05-03 |
| CVE-2022-20751 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-770 | 8.6 | High | 2022-05-03 |
| CVE-2022-20748 | Cisco Firepower Threat Defense 资源管理错误漏洞 — Cisco Firepower Threat Defense Software CWE-664 | 5.3 | Medium | 2022-05-03 |
| CVE-2022-20746 | Cisco Firepower Threat Defense 代码问题漏洞 — Cisco Firepower Threat Defense Software CWE-476 | 8.6 | High | 2022-05-03 |
| CVE-2022-20745 | 多款Cisco产品输入验证错误漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-20 | 8.6 | High | 2022-05-03 |
| CVE-2021-42528 | Adobe XMP Toolkit SDK 代码问题漏洞 — XMP Toolkit CWE-476 | 5.5 | Medium | 2022-05-02 |
| CVE-2022-0952 | WordPress plugin Sitemap by click5 安全漏洞 — Sitemap by click5 | 8.8 | - | 2022-05-02 |
| CVE-2022-0783 | WordPress plugin Multiple Shipping Address Woocommerce SQL注入漏洞 — Multiple Shipping Address Woocommerce CWE-89 | 9.8 | - | 2022-05-02 |
| CVE-2022-0773 | WordPress plugin Documentor SQL注入漏洞 — Documentor – Create Product Documentation CWE-89 | 9.8 | - | 2022-05-02 |
| CVE-2022-0771 | WordPress plugin SiteSuperCharger SQL注入漏洞 — SiteSuperCharger CWE-89 | 9.8 | - | 2022-05-02 |
| CVE-2021-25086 | WordPress plugin Advanced Page Visit Counter 跨站脚本漏洞 — Advanced Page Visit Counter – Advanced WordPress Visit Counter CWE-79 | 6.1 | - | 2022-05-02 |
| CVE-2021-25002 | WordPress plugin Tipsacarrier 安全漏洞 — Tipsacarrier CWE-862 | 7.5 | - | 2022-05-02 |
| CVE-2021-31674 | Cyclos 4 PRO 跨站脚本漏洞 — n/a | 6.1 | - | 2022-05-01 |
| CVE-2021-43938 | Elcomplus SmartPPT 信息泄露漏洞 — SmartPTT SCADA Server CWE-200 | 8.1 | High | 2022-04-29 |
| CVE-2021-44596 | Wondershare 安全漏洞 — n/a | 9.8 | - | 2022-04-29 |
| CVE-2022-29415 | WordPress plugin Ravpage 跨站脚本漏洞 — Ravpage (WordPress plugin) CWE-79 | 6.1 | Medium | 2022-04-28 |
| CVE-2022-28719 | Hammock AssetView 访问控制错误漏洞 — AssetView | 8.1 | - | 2022-04-28 |
| CVE-2021-34589 | Bender ebee 充电控制器 信息泄露漏洞 — CC612 CWE-200 | 7.5 | High | 2022-04-27 |
| CVE-2021-46423 | Telesquare TLR-2005Ksh 安全漏洞 — n/a | 5.3 | - | 2022-04-27 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24630 条 CVE 漏洞。