access:pre-auth 类型相关 24626 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-22161 | Juniper Networks Junos OS 资源管理错误漏洞 — Junos OS CWE-400 | 7.5 | High | 2022-01-19 |
| CVE-2022-22160 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS CWE-391 | 6.5 | Medium | 2022-01-19 |
| CVE-2022-22153 | Juniper Networks Junos OS 资源管理错误漏洞 — Junos OS CWE-407 | 7.5 | High | 2022-01-19 |
| CVE-2021-33912 | libspf2 缓冲区错误漏洞 — n/a | 9.8 | - | 2022-01-19 |
| CVE-2021-33913 | libspf2 缓冲区错误漏洞 — n/a | 9.8 | - | 2022-01-19 |
| CVE-2022-21695 | OnionShare 授权问题漏洞 — onionshare CWE-287 | 4.3 | Medium | 2022-01-18 |
| CVE-2022-0236 | WordPress 安全漏洞 — WP Import Export CWE-862 | 7.5 | High | 2022-01-18 |
| CVE-2021-38697 | Saraban 代码问题漏洞 — n/a | 9.8 | - | 2022-01-18 |
| CVE-2022-23178 | Crestron Hd-Md4X2-4K-E 授权问题漏洞 — n/a | 9.8 | - | 2022-01-15 |
| CVE-2021-3965 | HP DesignJet安全漏洞 — HP DesignJet Printer | 7.5 | - | 2022-01-14 |
| CVE-2022-0130 | Tenable Network Security Tenable.Sc 代码注入漏洞 — Tenable.sc | 8.1 | - | 2022-01-14 |
| CVE-2021-44739 | Adobe Acrobat Reader Dc 信息泄露漏洞 — Acrobat Reader CWE-200 | 4.3 | - | 2022-01-14 |
| CVE-2021-44702 | Adobe Acrobat Reader Dc 信息泄露漏洞 — Acrobat Reader CWE-200 | 4.3 | - | 2022-01-14 |
| CVE-2021-44741 | Adobe Acrobat Reader Dc 代码问题漏洞 — Acrobat Reader CWE-476 | 3.3 | Low | 2022-01-14 |
| CVE-2021-44740 | Adobe Acrobat and Reader DC 代码问题漏洞 — Acrobat Reader CWE-476 | 3.3 | Low | 2022-01-14 |
| CVE-2021-20613 | Mitsubishi Electric MELSEC-F Series 安全漏洞 — MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 | 7.5 | - | 2022-01-14 |
| CVE-2021-20612 | Mitsubishi Electric MELSEC-F Series 安全漏洞 — MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 | 7.5 | - | 2022-01-14 |
| CVE-2021-45468 | Imperva SecureSphere 环境问题漏洞 — n/a | 9.8 | - | 2022-01-14 |
| CVE-2022-23227 | NUUO NVRmini2访问控制错误漏洞 — n/a | 9.8 | - | 2022-01-14 |
| CVE-2021-42551 | AlCoda NetBiblio WebOpac 跨站脚本漏洞 — NetBiblio WebOPAC CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20698 | ClamAV 缓冲区错误漏洞 — ClamAV CWE-20 | 7.5 | High | 2022-01-14 |
| CVE-2022-20639 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20638 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20637 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20636 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20635 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20660 | Cisco IP Phone 安全漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-312 | 4.6 | Medium | 2022-01-14 |
| CVE-2022-20647 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20646 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
| CVE-2022-20645 | Cisco Security Manager 跨站脚本漏洞 — Cisco Security Manager CWE-79 | 6.1 | Medium | 2022-01-14 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24626 条 CVE 漏洞。