目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24368

access:pre-auth 类型相关 24368 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2017-17286 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 7.5 - 2018-02-15
CVE-2017-17287 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 7.5 - 2018-02-15
CVE-2017-17288 多款Huawei产品数字错误漏洞 — DP300,RP200,TE30,TE40,TE50,TE60 5.3 - 2018-02-15
CVE-2017-17290 Huawei TE60和ViewPoint 9030 Light Directory Access Protocol客户端资源管理错误漏洞 — TE60,ViewPoint 9030 7.5 - 2018-02-15
CVE-2017-17295 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 7.5 - 2018-02-15
CVE-2017-17296 多款Huawei产品安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 7.5 - 2018-02-15
CVE-2017-17297 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 7.5 - 2018-02-15
CVE-2017-17298 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint9030 7.5 - 2018-02-15
CVE-2017-17299 多款Huawei产品输入验证漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,IPS Module,NIP6300,NetEngine16EX 7.5 - 2018-02-15
CVE-2017-17300 多款Huawei产品安全漏洞 — S12700,S5700,S6700,S7700,S9700 - - 2018-02-15
CVE-2017-17301 多款Huawei产品安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,DP300,SMC2.0,SRG1300,SRG2300,SRG3300,TE30,TE60,VP9660,ViewPoint 8660,eSpace IAD,eSpace U1981,eSpace USM 7.5 - 2018-02-15
CVE-2018-2369 SAP HANA 信息泄露漏洞 — SAP HANA 7.5 - 2018-02-14
CVE-2018-2373 SAP HANA Extended Application Services 信息泄露漏洞 — SAP HANA Extended Application Services 7.5 - 2018-02-14
CVE-2018-2379 SAP HANA Extended Application Services 访问控制错误漏洞 — SAP HANA Extended Application Services 7.5 - 2018-02-14
CVE-2018-2394 SAP Internet Graphics Server 权限许可和访问控制问题漏洞 — SAP Internet Graphics Server 6.5 - 2018-02-14
CVE-2018-5459 WAGO PFC200 Series 3S CoDeSys Runtime 授权问题漏洞 — WAGO PFC200 Series CWE-287 9.8 - 2018-02-13
CVE-2018-6892 CloudMe 缓冲区错误漏洞 — n/a 9.8 - 2018-02-11
CVE-2018-1298 Apache Qpid 安全漏洞 — Apache Qpid Broker-J 5.9 - 2018-02-09
CVE-2018-6180 Online Voting System 安全漏洞 — n/a 9.1 - 2018-02-08
CVE-2018-0116 Cisco Policy Suite RADIUS authentication模块安全漏洞 — Cisco Policy Suite CWE-287 6.5 - 2018-02-08
CVE-2018-0117 Cisco Virtualized Packet Core-Distributed Instance Software Cisco StarOS操作系统安全漏洞 — Cisco Virtualized Packet Core-Distributed Instance CWE-20 8.6 - 2018-02-08
CVE-2018-0125 Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers 输入验证错误漏洞 — Cisco RV132W and RV134W CWE-20 9.8 - 2018-02-08
CVE-2018-0127 Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers Web界面信息泄露漏洞 — Cisco RV132W and RV134W Wireless VPN Routers CWE-200 7.5 - 2018-02-08
CVE-2018-0128 Cisco Data Center Analytics Framework 跨站脚本漏洞 — Cisco Data Center Analytics Framework CWE-79 6.1 - 2018-02-08
CVE-2018-0129 Cisco Data Center Analytics Framework 跨站脚本漏洞 — Cisco Data Center Analytics Framework CWE-79 6.1 - 2018-02-08
CVE-2018-0132 Cisco IOS XR Software 安全漏洞 — Cisco IOS XR CWE-119 6.8 - 2018-02-08
CVE-2018-0134 Cisco Policy Suite RADIUS身份验证模块信息泄露漏洞 — Cisco Policy Suite CWE-200 5.3 - 2018-02-08
CVE-2018-0137 Cisco Prime Network 安全漏洞 — Cisco Prime Network CWE-399 7.5 - 2018-02-08
CVE-2018-0138 Cisco Firepower System Software detection引擎安全漏洞 — Cisco Firepower System Software CWE-693 5.3 - 2018-02-08
CVE-2018-1299 Apache Allura 安全漏洞 — Apache Allura 7.5 - 2018-02-06

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24368 条 CVE 漏洞。