目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24344

access:pre-auth 类型相关 24344 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2019-5589 Fortinet FortiClient Online Installer 代码问题漏洞 — Fortinet FortiClient for Windows 8.8 - 2019-05-28
CVE-2019-8346 ZOHO ManageEngine ADSelfService Plus 跨站脚本漏洞 — n/a 6.1 - 2019-05-24
CVE-2019-11604 Quest Software KACE Systems Management Appliance 跨站脚本漏洞 — n/a 6.1 - 2019-05-24
CVE-2019-10846 Computrols CBAS Web 跨站脚本漏洞 — n/a 6.1 - 2019-05-23
CVE-2019-12289 VStarcam 100T和VStarcam 200V 授权问题漏洞 — n/a 9.8 - 2019-05-23
CVE-2017-11557 ZOHO ManageEngine Applications Manager 信息泄露漏洞 — n/a 5.3 - 2019-05-23
CVE-2019-0201 Apache Zookeeper 授权问题漏洞 — Apache ZooKeeper 5.9 - 2019-05-23
CVE-2019-12102 Kentico 输入验证错误漏洞 — n/a 9.1 - 2019-05-22
CVE-2019-12269 Enigmail 数据伪造问题漏洞 — n/a 7.5 - 2019-05-21
CVE-2018-16156 Fujitsu PaperStream IP 代码问题漏洞 — n/a 8.8 - 2019-05-17
CVE-2019-0090 多款Intel产品访问控制错误漏洞 — Intel(R) Converged Security & Management Engine (CSME), Intel(R) Server Platform Services (SPS) 7.6 - 2019-05-17
CVE-2019-0092 Intel Active Management Technology 输入验证错误漏洞 — Intel(R) Active Management Technology (AMT) 6.8 - 2019-05-17
CVE-2019-0094 Intel Active Management Technology 输入验证错误漏洞 — Intel(R) Active Management Technology (AMT) 4.3 - 2019-05-17
CVE-2019-0098 Intel TXE和Intel Converged Security and Management Engine 权限许可和访问控制问题漏洞 — Intel(R) Converged Security & Management Engine (CSME), Intel (R) Trusted Execution Engine Interface (TXE) 6.8 - 2019-05-17
CVE-2019-0099 Intel Server Platform Services 权限许可和访问控制问题漏洞 — Intel(R) Server Platform Services (SPS), Intel (R) Trusted Execution Engine Interface (TXE) 6.8 - 2019-05-17
CVE-2019-0153 Intel Converged Security and Management Engine 缓冲区错误漏洞 — Intel(R) Converged Security & Management Engine (CSME) 9.8 - 2019-05-17
CVE-2019-0132 Intel Unite Client 输入验证错误漏洞 — Intel Unite(R) Client 7.5 - 2019-05-17
CVE-2019-0708 Microsoft Remote Desktop Services 资源管理错误漏洞 — Windows 9.8 - 2019-05-16
CVE-2019-1833 Cisco Firepower Threat Defense SSL/TLS协议解析器安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 5.8 - 2019-05-16
CVE-2019-1846 Cisco ASR 9000 Series IOS XR 输入验证错误漏洞 — Cisco IOS XR Software CWE-20 7.4 - 2019-05-16
CVE-2019-1849 Cisco IOS XR Software 代码问题漏洞 — Cisco IOS XR Software CWE-754 6.5 - 2019-05-16
CVE-2019-1853 Cisco AnyConnect Secure Mobility Client for Linux HostScan组件缓冲区错误漏洞 — Cisco AnyConnect Secure Mobility Client CWE-125 7.5 - 2019-05-16
CVE-2019-1858 Cisco FXOS Software和Cisco NX-OS Software 输入验证错误漏洞 — Cisco Firepower Extensible Operating System (FXOS) CWE-20 8.6 - 2019-05-16
CVE-2019-1860 Cisco Unified Intelligence Center 安全漏洞 — Cisco Unified Intelligence Center CWE-99 5.9 - 2019-05-16
CVE-2019-1832 Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-693 7.5 - 2019-05-16
CVE-2019-1814 Cisco Small Business 300 Series 资源管理错误漏洞 — Cisco Small Business 300 Series Managed Switches CWE-400 8.6 - 2019-05-15
CVE-2019-1717 Cisco Video Surveillance Manager 路径遍历漏洞 — Cisco Video Surveillance Manager CWE-22 7.5 - 2019-05-15
CVE-2019-3725 Dell EMC RSA NetWitness Platform和RSA Security Analytics 命令操作系统命令注入漏洞 — RSA Netwitness Platform 9.8 - 2019-05-15
CVE-2019-10919 Siemens LOGO!8 BM 访问控制错误漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-306 9.8 - 2019-05-14
CVE-2019-10920 Siemens LOGO!8 BM 信任管理问题漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-321 7.5 - 2019-05-14

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24344 条 CVE 漏洞。