access:pre-auth 类型相关 24131 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-3121 | 多款Cisco产品跨站脚本漏洞 — Cisco 550X Series Stackable Managed SwitchesCWE-79 | 6.1 | - | 2020-01-26 |
| CVE-2019-16029 | Cisco Smart Software Manager On-Prem 输入验证错误漏洞 — Cisco Smart Software Manager On-PremCWE-20 | 9.1 | - | 2020-01-26 |
| CVE-2019-16022 | Cisco IOS XR 资源管理错误漏洞 — Cisco IOS XR SoftwareCWE-399 | 8.6 | - | 2020-01-26 |
| CVE-2019-16020 | Cisco IOS XR 资源管理错误漏洞 — Cisco IOS XR SoftwareCWE-399 | 8.6 | - | 2020-01-26 |
| CVE-2019-16018 | Cisco IOS XR 资源管理错误漏洞 — Cisco IOS XR SoftwareCWE-399 | 7.4 | - | 2020-01-26 |
| CVE-2019-15989 | Cisco IOS XR 代码问题漏洞 — Cisco IOS XR SoftwareCWE-754 | 6.8 | - | 2020-01-26 |
| CVE-2020-3139 | Cisco Application Policy Infrastructure Controller 输入验证错误漏洞 — Cisco Application Policy Infrastructure Controller (APIC)CWE-20 | 5.3 | - | 2020-01-26 |
| CVE-2020-3136 | Cisco Jabber Guest 跨站脚本漏洞 — Cisco Jabber GuestCWE-79 | 6.1 | - | 2020-01-26 |
| CVE-2020-6964 | 多款GE产品访问控制错误漏洞 — GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 MonitorsCWE-306 | 10.0 | - | 2020-01-24 |
| CVE-2019-19632 | Big Switch Big Monitoring Fabric、Big Cloud Fabric和Multi-Cloud Director 跨站脚本漏洞 — n/a | 8.2 | - | 2020-01-24 |
| CVE-2019-19893 | IXP EasyInstall 路径遍历漏洞 — n/a | 7.5 | - | 2020-01-23 |
| CVE-2019-19897 | IXP EasyInstall 操作系统命令注入漏洞 — n/a | 9.8 | - | 2020-01-23 |
| CVE-2019-16516 | ConnectWise Control 信息泄露漏洞 — n/a | 5.3 | - | 2020-01-23 |
| CVE-2019-19840 | Ruckus Wireless Unleashed 缓冲区错误漏洞 — n/a | 9.8 | - | 2020-01-22 |
| CVE-2020-5221 | uftpd 路径遍历漏洞 — uftpdCWE-22 | 6.5 | Medium | 2020-01-22 |
| CVE-2019-19843 | Ruckus Wireless 输入验证错误漏洞 — n/a | 9.8 | - | 2020-01-22 |
| CVE-2020-6960 | 多款Honeywell产品 SQL注入漏洞 — Honeywell Maxpro VMS & NVRCWE-89 | 9.8 | - | 2020-01-22 |
| CVE-2020-6959 | 多款Honeywell产品 代码问题漏洞 — Honeywell Maxpro VMS & NVRCWE-502 | 9.8 | - | 2020-01-22 |
| CVE-2019-17357 | Cacti SQL注入漏洞 — n/a | 6.5 | - | 2020-01-21 |
| CVE-2016-11018 | WordPress Huge-IT gallery-images SQL注入漏洞 — n/a | 9.8 | - | 2020-01-21 |
| CVE-2020-7229 | Simplejobscript.com SJS SQL注入漏洞 — n/a | 9.8 | - | 2020-01-21 |
| CVE-2019-14767 | DIMO YellowBox CRM 路径遍历漏洞 — n/a | 7.5 | - | 2020-01-21 |
| CVE-2019-14615 | Intel Processor Graphics 信息泄露漏洞 — Intel(R) Processors | 6.2 | - | 2020-01-17 |
| CVE-2019-15855 | Maarch RM 路径遍历漏洞 — n/a | 9.1 | - | 2020-01-17 |
| CVE-2019-17361 | SaltStack Salt 命令注入漏洞 — n/a | 9.8 | - | 2020-01-17 |
| CVE-2019-3997 | SimpliSafe SS3 授权问题漏洞 — SimpliSafe SS3 | 4.3 | - | 2020-01-16 |
| CVE-2019-9500 | Linux kernel 缓冲区错误漏洞 — brcmfmac WiFi driverCWE-122 | 7.9 | High | 2020-01-16 |
| CVE-2019-9503 | Broadcom brcmfmac WiFi driver 输入验证错误漏洞 — brcmfmac WiFi driverCWE-20 | 7.9 | High | 2020-01-16 |
| CVE-2020-7048 | WordPress WP Database Reset 安全漏洞 — n/a | 7.5 | - | 2020-01-16 |
| CVE-2019-19278 | Siemens SINAMICS PERFECT HARMONY GH180 竞争条件问题漏洞 — SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger)CWE-693 | 6.8 | - | 2020-01-16 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24131 条 CVE 漏洞。