目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

access:pre-auth 标签下的 CVE 漏洞 23467

access:pre-auth 类型相关 23467 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE IDタイトルCVSS深刻度公開日
CVE-2019-12815 ProFTPD 访问控制错误漏洞 — n/a 9.8 -2019-07-19
CVE-2019-9228 多款AudioCodes产品资源管理错误漏洞 — n/a 7.5 -2019-07-19
CVE-2019-12725 Zeroshell 操作系统命令注入漏洞 — n/a 9.8 -2019-07-19
CVE-2019-1579 Palo Alto Networks PAN-OS 输入验证错误漏洞 — Palo Alto Networks GlobalProtect Portal/Gateway Interface 8.1 -2019-07-19
CVE-2015-7882 Authentication bypass when using LDAP authentication in MongoDB Enterprise Server — n/a 8.1 -2019-07-19
CVE-2019-1010136 ChinaMobile GPN2.4P21-C-CN 访问控制错误漏洞 — GPN2.4P21-C-CN 7.5 -2019-07-19
CVE-2019-13984 RANGER Studio Directus 代码问题漏洞 — n/a 8.8 -2019-07-19
CVE-2019-1010246 Rapid7 MailCleaner 信息泄露漏洞 — MailCleaner 7.5 -2019-07-18
CVE-2019-1010248 Synetics i-doit SQL注入漏洞 — I-doit 9.8 -2019-07-18
CVE-2019-1943 Cisco Small Business Series Switches Open Redirect Vulnerability — Cisco Small Business 300 Series Managed SwitchesCWE-601 6.1 -2019-07-17
CVE-2019-1940 Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability — Cisco Industrial Network DirectorCWE-310 5.9 -2019-07-17
CVE-2019-1941 Cisco Identity Services Engine Cross-Site Scripting Vulnerability — Cisco Identity Services Engine SoftwareCWE-79 6.1 -2019-07-17
CVE-2019-1919 Cisco FindIT Network Management Software Static Credentials Vulnerability — Cisco FindIT Network ManagerCWE-798 7.8 -2019-07-17
CVE-2019-1920 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability — Cisco Aironet Access Point SoftwareCWE-20 7.4 -2019-07-17
CVE-2019-1917 Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability — Cisco Vision Dynamic Signage DirectorCWE-287 9.8 -2019-07-17
CVE-2019-13577 MAPLE WBT SNMP Administrator 缓冲区错误漏洞 — n/a 9.8 -2019-07-17
CVE-2019-6160 多款Lenovo产品访问控制错误漏洞 — NAS products 7.5 -2019-07-16
CVE-2019-1010060 NASA CFITSIO 缓冲区错误漏洞 — CFITSIO 9.8 -2019-07-16
CVE-2019-6824 Schneider Electric ProClima 缓冲区错误漏洞 — ProClima all versions prior to version 8.0.0CWE-119 9.8 -2019-07-15
CVE-2019-6823 Schneider Electric ProClima 代码注入漏洞 — ProClima all versions prior to version 8.0.0CWE-94 9.8 -2019-07-15
CVE-2019-1010304 Mirumee Saleor 访问控制错误漏洞 — Saleor 5.3 -2019-07-15
CVE-2019-1010306 Slanger Message handler&request validator 命令注入漏洞 — Slanger 9.8 -2019-07-15
CVE-2019-13598 Vera Edge Home Controller 操作系统命令注入漏洞 — n/a 9.8 -2019-07-14
CVE-2019-10970 Rockwell Automation PanelView 5510 访问控制错误漏洞 — Rockwell Automation PanelView 5510CWE-284 9.8 -2019-07-11
CVE-2019-7003 ACM SQL Injection — Avaya Control ManagerCWE-89 9.1 -2019-07-11
CVE-2019-11062 SUNNET WMPro v5.0 and v5.1 has OS Command Injection — WMProCWE-78 9.8 -2019-07-11
CVE-2019-1873 Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-400 7.5 -2019-07-10
CVE-2019-13279 TRENDnet TEW-827DRU 缓冲区错误漏洞 — n/a 9.8 -2019-07-10
CVE-2019-13278 TRENDnet TEW-827DRU 命令注入漏洞 — n/a 9.8 -2019-07-10
CVE-2019-13276 TRENDnet TEW-827DRU 缓冲区错误漏洞 — n/a 9.8 -2019-07-10

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 23467 条 CVE 漏洞。