目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24371

access:pre-auth 类型相关 24371 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2019-2605 Oracle Fusion Middleware Business Intelligence Enterprise Edition 信息泄露漏洞 — Business Intelligence Enterprise Edition 6.9 - 2019-04-23
CVE-2019-2608 Oracle Fusion Middleware Outside In Technology 访问控制错误漏洞 — Outside In Technology 7.3 - 2019-04-23
CVE-2019-2609 Oracle Fusion Middleware Outside In Technology 访问控制错误漏洞 — Outside In Technology 6.5 - 2019-04-23
CVE-2019-2551 Oracle E-Business Suite One-to-One Fulfillment 访问控制错误漏洞 — One-to-One Fulfillment 8.2 - 2019-04-23
CVE-2019-2558 Oracle Retail Applications Retail Point-of-Service 访问控制错误漏洞 — Retail Point-of-Service 6.5 - 2019-04-23
CVE-2019-2565 Oracle JD Edwards Products JD Edwards World Technical Foundation 访问控制错误漏洞 — JD Edwards World Technical Foundation 7.5 - 2019-04-23
CVE-2019-2567 Oracle Supply Chain Products Suite Configurator 访问控制错误漏洞 — Configurator 7.5 - 2019-04-23
CVE-2019-2572 Oracle Fusion Middleware SOA Suite 访问控制错误漏洞 — Business Process Management Suite 5.3 - 2019-04-23
CVE-2019-2573 Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools 访问控制错误漏洞 — PeopleSoft Enterprise PT PeopleTools 5.4 - 2019-04-23
CVE-2019-2575 Oracle Supply Chain Products Suite AutoVue 3D Professional Advanced 信息泄露漏洞 — AutoVue 3D Professional Advanced 5.3 - 2019-04-23
CVE-2019-2576 Oracle Fusion Middleware Service Bus 访问控制错误漏洞 — Service Bus 5.3 - 2019-04-23
CVE-2019-2578 Oracle Fusion Middleware WebCenter Sites 访问控制错误漏洞 — WebCenter Sites 8.6 - 2019-04-23
CVE-2019-2582 Oracle Database Server Core RDBMS 信息泄露漏洞 — Oracle Database 5.3 - 2019-04-23
CVE-2019-2583 Oracle E-Business Suite iSupplier Portal 访问控制错误漏洞 — iSupplier Portal 8.2 - 2019-04-23
CVE-2019-2424 Oracle Retail Applications Retail Convenience Store Back Office 访问控制错误漏洞 — Retail Convenience Store Back Office 6.5 - 2019-04-23
CVE-2018-2880 Oracle Retail Applications MICROS Retail-J 访问控制错误漏洞 — MICROS Retail-J 7.5 - 2019-04-23
CVE-2018-3123 Oracle MySQL Server 访问控制错误漏洞 — MySQL Server 5.9 - 2019-04-23
CVE-2019-11076 Cribl UI 命令注入漏洞 — n/a 9.8 - 2019-04-23
CVE-2018-1317 Apache Zeppelin 授权问题漏洞 — Apache Zeppelin 8.8 - 2019-04-23
CVE-2019-11469 ZOHO ManageEngine Applications Manager SQL注入漏洞 — n/a 9.8 - 2019-04-23
CVE-2014-1426 Canonical Ubuntu Metal as a Service 输入验证错误漏洞 — maas 7.5 - 2019-04-22
CVE-2019-11454 Tildeslash Monit 跨站脚本漏洞 — n/a 6.1 - 2019-04-22
CVE-2019-11448 ZOHO ManageEngine Applications Manager SQL注入漏洞 — n/a 8.1 - 2019-04-22
CVE-2019-10886 Sony Photo Sharing Plus application 访问控制错误漏洞 — n/a 5.9 - 2019-04-19
CVE-2019-3718 Dell SupportAssist Client 跨站请求伪造漏洞 — SupportAssist Client 8.8 - 2019-04-18
CVE-2019-3719 Dell SupportAssist Client 输入验证错误漏洞 — SupportAssist Client 8.0 - 2019-04-18
CVE-2019-11321 Motorola CX2和Motorola M2 信息泄露漏洞 — n/a 5.3 - 2019-04-18
CVE-2019-1837 Cisco Unified Communications Manager 输入验证错误漏洞 — Cisco Unified Communications Manager CWE-129 7.5 - 2019-04-18
CVE-2019-1840 Cisco Prime Network Registrar 安全漏洞 — Cisco Prime Network Registrar CWE-665 7.5 - 2019-04-18
CVE-2019-1831 Cisco Email Security Appliance 输入验证错误漏洞 — Cisco Email Security Appliance (ESA) CWE-20 5.3 - 2019-04-18

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24371 条 CVE 漏洞。