access:pre-auth 类型相关 24344 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-5589 | Fortinet FortiClient Online Installer 代码问题漏洞 — Fortinet FortiClient for Windows | 8.8 | - | 2019-05-28 |
| CVE-2019-8346 | ZOHO ManageEngine ADSelfService Plus 跨站脚本漏洞 — n/a | 6.1 | - | 2019-05-24 |
| CVE-2019-11604 | Quest Software KACE Systems Management Appliance 跨站脚本漏洞 — n/a | 6.1 | - | 2019-05-24 |
| CVE-2019-10846 | Computrols CBAS Web 跨站脚本漏洞 — n/a | 6.1 | - | 2019-05-23 |
| CVE-2019-12289 | VStarcam 100T和VStarcam 200V 授权问题漏洞 — n/a | 9.8 | - | 2019-05-23 |
| CVE-2017-11557 | ZOHO ManageEngine Applications Manager 信息泄露漏洞 — n/a | 5.3 | - | 2019-05-23 |
| CVE-2019-0201 | Apache Zookeeper 授权问题漏洞 — Apache ZooKeeper | 5.9 | - | 2019-05-23 |
| CVE-2019-12102 | Kentico 输入验证错误漏洞 — n/a | 9.1 | - | 2019-05-22 |
| CVE-2019-12269 | Enigmail 数据伪造问题漏洞 — n/a | 7.5 | - | 2019-05-21 |
| CVE-2018-16156 | Fujitsu PaperStream IP 代码问题漏洞 — n/a | 8.8 | - | 2019-05-17 |
| CVE-2019-0090 | 多款Intel产品访问控制错误漏洞 — Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) | 7.6 | - | 2019-05-17 |
| CVE-2019-0092 | Intel Active Management Technology 输入验证错误漏洞 — Intel(R) Active Management Technology (AMT) | 6.8 | - | 2019-05-17 |
| CVE-2019-0094 | Intel Active Management Technology 输入验证错误漏洞 — Intel(R) Active Management Technology (AMT) | 4.3 | - | 2019-05-17 |
| CVE-2019-0098 | Intel TXE和Intel Converged Security and Management Engine 权限许可和访问控制问题漏洞 — Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) | 6.8 | - | 2019-05-17 |
| CVE-2019-0099 | Intel Server Platform Services 权限许可和访问控制问题漏洞 — Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE) | 6.8 | - | 2019-05-17 |
| CVE-2019-0153 | Intel Converged Security and Management Engine 缓冲区错误漏洞 — Intel(R) Converged Security & Management Engine (CSME) | 9.8 | - | 2019-05-17 |
| CVE-2019-0132 | Intel Unite Client 输入验证错误漏洞 — Intel Unite(R) Client | 7.5 | - | 2019-05-17 |
| CVE-2019-0708 | Microsoft Remote Desktop Services 资源管理错误漏洞 — Windows | 9.8 | - | 2019-05-16 |
| CVE-2019-1833 | Cisco Firepower Threat Defense SSL/TLS协议解析器安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 | 5.8 | - | 2019-05-16 |
| CVE-2019-1846 | Cisco ASR 9000 Series IOS XR 输入验证错误漏洞 — Cisco IOS XR Software CWE-20 | 7.4 | - | 2019-05-16 |
| CVE-2019-1849 | Cisco IOS XR Software 代码问题漏洞 — Cisco IOS XR Software CWE-754 | 6.5 | - | 2019-05-16 |
| CVE-2019-1853 | Cisco AnyConnect Secure Mobility Client for Linux HostScan组件缓冲区错误漏洞 — Cisco AnyConnect Secure Mobility Client CWE-125 | 7.5 | - | 2019-05-16 |
| CVE-2019-1858 | Cisco FXOS Software和Cisco NX-OS Software 输入验证错误漏洞 — Cisco Firepower Extensible Operating System (FXOS) CWE-20 | 8.6 | - | 2019-05-16 |
| CVE-2019-1860 | Cisco Unified Intelligence Center 安全漏洞 — Cisco Unified Intelligence Center CWE-99 | 5.9 | - | 2019-05-16 |
| CVE-2019-1832 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 | 7.5 | - | 2019-05-16 |
| CVE-2019-1814 | Cisco Small Business 300 Series 资源管理错误漏洞 — Cisco Small Business 300 Series Managed Switches CWE-400 | 8.6 | - | 2019-05-15 |
| CVE-2019-1717 | Cisco Video Surveillance Manager 路径遍历漏洞 — Cisco Video Surveillance Manager CWE-22 | 7.5 | - | 2019-05-15 |
| CVE-2019-3725 | Dell EMC RSA NetWitness Platform和RSA Security Analytics 命令操作系统命令注入漏洞 — RSA Netwitness Platform | 9.8 | - | 2019-05-15 |
| CVE-2019-10919 | Siemens LOGO!8 BM 访问控制错误漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-306 | 9.8 | - | 2019-05-14 |
| CVE-2019-10920 | Siemens LOGO!8 BM 信任管理问题漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-321 | 7.5 | - | 2019-05-14 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24344 条 CVE 漏洞。