access:pre-auth 类型相关 24371 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-1716 | Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series Session Initiation Protocol软件输入验证漏洞 — Cisco Unified IP Conference Phone 8831 CWE-20 | 9.8 | - | 2019-03-22 |
| CVE-2019-1763 | Cisco IP Phone 8800 Series Session Initiation Protocol软件访问控制错误漏洞 — Cisco Wireless IP Phone 8821 and 8821-EX CWE-284 | 7.5 | - | 2019-03-22 |
| CVE-2019-1764 | Cisco IP Phone 8800 Series 跨站请求伪造漏洞 — Cisco Wireless IP Phone 8821 and 8821-EX CWE-352 | 8.8 | - | 2019-03-22 |
| CVE-2019-1766 | Cisco IP Phone 8800 Series Session Initiation Protocol软件输入验证漏洞 — Cisco IP Phone 8800 Series Software CWE-20 | 7.5 | - | 2019-03-22 |
| CVE-2019-4052 | IBM API Connect 信息泄露漏洞 — API Connect | 5.3 | - | 2019-03-22 |
| CVE-2018-13798 | Siemens SICAM A8000 Series 安全漏洞 — SICAM A8000 CP-8000, SICAM A8000 CP-802X, SICAM A8000 CP-8050 | 7.5 | - | 2019-03-21 |
| CVE-2018-4011 | CUJO Smart Firewall 数字错误漏洞 — CUJO | 7.5 | - | 2019-03-21 |
| CVE-2018-3985 | CUJO Smart Firewall 资源管理错误漏洞 — CUJO | 9.8 | - | 2019-03-21 |
| CVE-2018-4003 | CUJO Smart Firewall 缓冲区错误漏洞 — CUJO | 9.8 | - | 2019-03-21 |
| CVE-2018-4059 | coTURN 信任管理问题漏洞 — coTURN | 9.8 | - | 2019-03-21 |
| CVE-2018-19514 | Webgalamb 安全漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2018-19488 | WordPress WP-jobhunt插件安全漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2018-19487 | WordPress WP-jobhunt插件信息泄露漏洞 — n/a | 5.3 | - | 2019-03-17 |
| CVE-2018-19276 | OpenMRS 代码问题漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2018-18845 | Advanced Comment System 跨站脚本漏洞 — n/a | 6.1 | - | 2019-03-17 |
| CVE-2018-19524 | Skyworth GPON HomeGateways和Optical Network terminals 输入验证错误漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2018-19515 | Webgalamb 安全漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2019-6716 | LongBox Access Manager 信息泄露漏洞 — n/a | 9.4 | - | 2019-03-17 |
| CVE-2019-6714 | BlogEngine.NET 路径遍历漏洞 — n/a | 9.8 | - | 2019-03-17 |
| CVE-2018-19391 | Cobham Satcom Sailor 250和Cobham Satcom Sailor 500 跨站脚本漏洞 — n/a | 6.1 | - | 2019-03-15 |
| CVE-2018-19392 | Cobham Satcom Sailor 250和Cobham Satcom Sailor 500 信任管理问题漏洞 — n/a | 9.8 | - | 2019-03-15 |
| CVE-2019-3833 | Openwsman 资源管理错误漏洞 — openwsman CWE-835 | 7.5 | - | 2019-03-14 |
| CVE-2018-12185 | Intel Converged Security and Management Engine 输入验证漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 6.8 | - | 2019-03-14 |
| CVE-2018-12187 | Intel Active Management Technology 输入验证错误漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 7.5 | - | 2019-03-14 |
| CVE-2018-12188 | Intel Converged Security and Management Engine和Intel TXE 输入验证漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 4.6 | - | 2019-03-14 |
| CVE-2018-12191 | 多款Intel产品缓冲区错误漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 7.6 | - | 2019-03-14 |
| CVE-2018-12192 | Intel Converged Security and Management Engine和Intel Server Platform Services Kernel subsystem 授权问题漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 7.6 | - | 2019-03-14 |
| CVE-2018-12205 | 7th Generation Intel Core Processor和8th Generation Intel Core Processor 信任管理问题漏洞 — Intel Platform Sample / Silicon Reference firmware | 6.8 | - | 2019-03-14 |
| CVE-2018-12208 | 多款Intel产品缓冲区错误漏洞 — Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology | 7.6 | - | 2019-03-14 |
| CVE-2019-9787 | WordPress 跨站请求伪造漏洞 — n/a | 8.8 | - | 2019-03-14 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24371 条 CVE 漏洞。