目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24404

access:pre-auth 类型相关 24404 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2018-11013 D-Link DIR-816 A2 缓冲区错误漏洞 — n/a 9.8 - 2018-05-13
CVE-2018-1259 Pivotal Spring Data Commons 安全漏洞 — Spring Data Commons 7.5 - 2018-05-11
CVE-2018-1280 Pivotal Greenplum Command Center SQL注入漏洞 — Greenplum Command Center 7.5 - 2018-05-11
CVE-2018-7248 ZOHO ManageEngine ServiceDesk Plus 安全漏洞 — n/a 9.1 - 2018-05-11
CVE-2018-10770 Anni 5 in 1 XVR 安全漏洞 — n/a 9.8 - 2018-05-09
CVE-2018-1089 Red Hat 389-ds-base 安全漏洞 — 389-ds-base CWE-122 7.5 - 2018-05-09
CVE-2018-10682 Red Hat Wildfly 安全漏洞 — n/a 9.8 - 2018-05-09
CVE-2018-10683 Red Hat Wildfly 安全漏洞 — n/a 9.8 - 2018-05-09
CVE-2018-10251 多款Sierra Wireless产品安全漏洞 — n/a 9.8 - 2018-05-04
CVE-2018-8003 Apache Ambari 路径遍历漏洞 — Apache Ambari 3.7 - 2018-05-03
CVE-2018-0234 Cisco Aironet 1810、1830和1850 Series Access Points 输入验证漏洞 — Cisco Aironet 1810, 1830, and 1850 Series Access Points CWE-20 8.6 - 2018-05-02
CVE-2018-0235 Cisco Wireless LAN Controller 输入验证错误漏洞 — Cisco Wireless LAN Controller CWE-20 7.4 - 2018-05-02
CVE-2018-0245 Cisco 5500和8500 Series Wireless LAN Controller REST API 信息泄露漏洞 — Cisco 5500 and 8500 Series Wireless LAN Controller CWE-200 5.3 - 2018-05-02
CVE-2018-0247 Cisco Wireless LAN Controller和Aironet Access Points 授权问题漏洞 — Cisco Wireless LAN Controller and Aironet Access Points CWE-287 4.3 - 2018-05-02
CVE-2018-0249 多款Cisco产品输入验证错误漏洞 — Cisco Aironet 1800 Series Access Point CWE-20 6.5 - 2018-05-02
CVE-2018-0252 Cisco 3500、5500和8500 Series Wireless LAN Controller Software 资源管理错误漏洞 — Cisco Wireless LAN Controller CWE-399 8.6 - 2018-05-02
CVE-2018-0253 Cisco Secure Access Control System ACS Report组件输入验证漏洞 — Cisco Secure Access Control System CWE-20 9.8 - 2018-05-02
CVE-2018-0262 Cisco Meeting Server Acano X-series Cisco Meeting Server Software 配置错误漏洞 — Cisco Meeting Server CWE-16 8.1 - 2018-05-02
CVE-2018-0264 Cisco WebEx Business Suite meeting sites、WebEx Meetings sites和WebEx Meetings Server 安全漏洞 — Cisco WebEx Advanced Recording Format file players CWE-20 9.6 - 2018-05-02
CVE-2018-0278 Cisco Firepower System Software management console 信息泄露漏洞 — Cisco Firepower System Software CWE-200 6.5 - 2018-05-02
CVE-2018-0281 Cisco Firepower System Software 加密问题漏洞 — Cisco Firepower System Software CWE-310 5.8 - 2018-05-02
CVE-2018-0283 Cisco Firepower System Software detection引擎加密问题漏洞 — Cisco Firepower System Software CWE-310 5.8 - 2018-05-02
CVE-2018-0286 Cisco IOS XR Software netconf界面资源管理错误漏洞 — Cisco IOS XR CWE-399 7.5 - 2018-05-02
CVE-2018-0287 Cisco WebEx Business Suite meeting sites、WebEx Meetings sites和WebEx Meetings Server 输入验证漏洞 — Cisco WebEx Advanced Recording Format Player CWE-20 8.8 - 2018-05-02
CVE-2018-0288 Cisco WebEx Business Suite meeting sites和WebEx Meetings sites WebEx Recording Format Player 信息泄露漏洞 — Cisco WebEx Recording Format Player CWE-200 4.0 - 2018-05-02
CVE-2018-10544 Meross MSS110 安全漏洞 — n/a 9.8 - 2018-05-02
CVE-2017-17314 多款Huawei产品安全漏洞 — DP300, RP200, TE30, TE40, TE50, TE60 3.7 - 2018-04-30
CVE-2017-2591 Red Hat 389 Directory Server attribute uniqueness插件缓冲区错误漏洞 — 389-ds-base CWE-122 7.5 - 2018-04-30
CVE-2018-8072 EDIMAX IC-3140W、IC-5150W和IC-6220DC 缓冲区错误漏洞 — n/a 9.8 - 2018-04-26
CVE-2017-1721 IBM Security QRadar SIEM 安全漏洞 — Security QRadar SIEM 7.7 - 2018-04-26

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24404 条 CVE 漏洞。