access:pre-auth 类型相关 24371 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-9761 | 灵宝简好网络科技 PHPSHE 安全漏洞 — n/a | 7.5 | - | 2019-03-14 |
| CVE-2019-3816 | Openwsman 路径遍历漏洞 — openwsman CWE-22 | 7.5 | - | 2019-03-14 |
| CVE-2019-6600 | F5 BIG-IP 跨站脚本漏洞 — BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) | 6.1 | - | 2019-03-13 |
| CVE-2019-1723 | Cisco Common Services Platform Collector 权限许可和访问控制漏洞 — Cisco Common Services Platform Collector Software CWE-264 | 9.8 | - | 2019-03-13 |
| CVE-2018-0389 | Cisco Small Business SPA514G IP Phones 资源管理错误漏洞 — Cisco Small Business SPA500 Series IP Phones CWE-399 | 7.5 | - | 2019-03-13 |
| CVE-2019-1616 | Cisco NX-OS Software 缓冲区错误漏洞 — MDS 9000 Series Multilayer Switches CWE-20 | 7.5 | - | 2019-03-11 |
| CVE-2019-1617 | Cisco NX-OS Software 安全漏洞 — Nexus 9000 Series Switches in Standalone NX-OS Mode CWE-913 | 7.4 | - | 2019-03-11 |
| CVE-2019-1690 | Cisco Application Policy Infrastructure Controller 访问控制错误漏洞 — Cisco Application Policy Infrastructure Controller (APIC) CWE-284 | 8.3 | - | 2019-03-11 |
| CVE-2019-1702 | Cisco Enterprise Chat and Email 跨站脚本漏洞 — Cisco Enterprise Chat and Email CWE-79 | 6.1 | - | 2019-03-11 |
| CVE-2018-18815 | TIBCO Software Jaspersoft JasperReports Server 设计错误漏洞 — TIBCO JasperReports Server | 9.8 | - | 2019-03-07 |
| CVE-2019-1598 | Cisco NX-OS Software和Cisco FXOS Software 输入验证错误漏洞 — Firepower 4100 Series Next-Generation Firewalls CWE-20 | 7.5 | - | 2019-03-07 |
| CVE-2019-1599 | Cisco NX-OS Software 资源管理错误漏洞 — Nexus 1000V Switch for Microsoft Hyper-V CWE-399 | 8.6 | - | 2019-03-07 |
| CVE-2019-1597 | Cisco NX-OS Software和Cisco FXOS Software 输入验证错误漏洞 — Firepower 4100 Series Next-Generation Firewalls CWE-20 | 7.5 | - | 2019-03-07 |
| CVE-2019-3712 | Dell WES Wyse Device Agent和Dell Wyse ThinLinux HAgent 缓冲区错误漏洞 — Wyse Device Agent | 8.8 | - | 2019-03-07 |
| CVE-2019-3777 | Pivotal Software Pivotal Application Service 信任管理问题漏洞 — Apps Manager CWE-295 | 9.1 | - | 2019-03-07 |
| CVE-2019-3781 | Cloud Foundry CLI 信息泄露漏洞 — CF CLI CWE-215 | 8.8 | - | 2019-03-07 |
| CVE-2019-1594 | Cisco NX-OS Software 输入验证错误漏洞 — Nexus 1000V Switch for VMware vSphere CWE-264 | 7.4 | - | 2019-03-06 |
| CVE-2019-1595 | Cisco Nexus 6000 Series Switches和Cisco Nexus 5600 Platform Switches 安全漏洞 — Cisco NX-OS Software CWE-913 | 6.5 | - | 2019-03-06 |
| CVE-2019-0200 | Apache Qpid 输入验证错误漏洞 — Apache Qpid Broker-J | 7.5 | - | 2019-03-06 |
| CVE-2019-0187 | Apache Jmeter 代码问题漏洞 — Apache JMeter | 9.8 | - | 2019-03-06 |
| CVE-2019-3917 | Nokia Alcatel Lucent I-240W-Q GPON ONT 访问控制错误漏洞 — Alcatel Lucent I-240W-Q GPON ONT CWE-306 | 7.5 | - | 2019-03-05 |
| CVE-2019-3922 | Nokia Alcatel Lucent I-240W-Q GPON ONT 缓冲区错误漏洞 — Alcatel Lucent I-240W-Q GPON ONT CWE-121 | 9.8 | - | 2019-03-05 |
| CVE-2019-6565 | 多款Moxa产品跨站脚本漏洞 — Moxa IKS, EDS CWE-79 | 6.1 | - | 2019-03-05 |
| CVE-2019-1663 | 多款Cisco产品缓冲区错误漏洞 — RV110W Wireless-N VPN Firewall CWE-119 | 9.8 | - | 2019-02-28 |
| CVE-2019-3598 | McAfee Agent 缓冲区错误漏洞 — McAfee Agent (MA) | 7.5 | - | 2019-02-28 |
| CVE-2019-3599 | McAfee Agent 信息泄露漏洞 — McAfee Agent (MA) | 7.5 | - | 2019-02-28 |
| CVE-2019-5491 | NetApp Clustered Data ONTAP 信息泄露漏洞 — Clustered Data ONTAP | 7.5 | - | 2019-02-27 |
| CVE-2019-1683 | Cisco SPA112、SPA525和SPA5X5 Series 信任管理问题漏洞 — Cisco Small Business SPA500 Series IP Phones CWE-295 | 7.4 | - | 2019-02-25 |
| CVE-2019-1691 | Cisco Firepower Threat Defense 输入验证错误漏洞 — Cisco Firepower Threat Defense Software CWE-20 | 5.8 | - | 2019-02-21 |
| CVE-2019-1700 | Cisco Firepower 9000 Series 资源管理错误漏洞 — Cisco Firepower Extensible Operating System (FXOS) CWE-399 | 6.1 | - | 2019-02-21 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24371 条 CVE 漏洞。