access:pre-auth 类型相关 24316 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-16741 | PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series产品信息泄露漏洞 — PHOENIX CONTACT FL SWITCH CWE-200 | 7.5 | - | 2018-01-12 |
| CVE-2017-16743 | PHOENIX CONTACT FL SWITCH 3xxx、4xxx和48xxx Series产品安全漏洞 — PHOENIX CONTACT FL SWITCH CWE-285 | 9.8 | - | 2018-01-12 |
| CVE-2017-18014 | Sophos XG Firewall SFOS Logging子系统跨站脚本漏洞 — n/a | 6.1 | - | 2018-01-12 |
| CVE-2018-5262 | Flexense DiskBoss 缓冲区错误漏洞 — n/a | 9.8 | - | 2018-01-12 |
| CVE-2017-16732 | Advantech WebAccess 资源管理错误漏洞 — Advantech WebAccess CWE-416 | 8.6 | - | 2018-01-12 |
| CVE-2018-5347 | Seagate Personal Cloud Seagate Media Server 命令注入漏洞 — n/a | 9.8 | - | 2018-01-12 |
| CVE-2014-5070 | Microsemi Symmetricom s350i 安全漏洞 — n/a | 8.8 | - | 2018-01-11 |
| CVE-2018-0118 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | - | 2018-01-11 |
| CVE-2018-0001 | Juniper Junos OS 安全漏洞 — Junos OS | 9.8 | - | 2018-01-10 |
| CVE-2018-0007 | Juniper Junos OS 缓冲区错误漏洞 — n/a | 9.1 | - | 2018-01-10 |
| CVE-2018-0008 | Juniper Junos OS 安全漏洞 — Junos OS | 6.8 | - | 2018-01-10 |
| CVE-2017-17485 | FasterXML jackson-databind 代码问题漏洞 — n/a | 9.8 | - | 2018-01-10 |
| CVE-2018-2362 | SAP HANA 信息泄露漏洞 — SAP HANA | 5.3 | - | 2018-01-09 |
| CVE-2017-15548 | 多款EMC产品安全漏洞 — EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 | 9.8 | - | 2018-01-05 |
| CVE-2017-16666 | Xplico 安全漏洞 — n/a | 8.8 | - | 2018-01-05 |
| CVE-2017-14383 | Dell EMC VNX2 Operating Environment for File和VNX1 Operating Environment for File VNX Control Station 跨站脚本漏洞 — Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and Dell EMC VNX1 versions prior to Operating Environment for File 7.1.80.8 | 6.1 | - | 2018-01-04 |
| CVE-2018-0114 | Cisco node-jose open source library 数据伪造问题漏洞 — Node-jose Library CWE-347 | 7.5 | - | 2018-01-04 |
| CVE-2017-1000501 | AWStats 路径遍历漏洞 — n/a | 9.8 | - | 2018-01-03 |
| CVE-2017-1000423 | b2evolution 输入验证漏洞 — n/a | 9.8 | - | 2018-01-02 |
| CVE-2017-1000453 | CMS Made Simple 安全漏洞 — n/a | 9.8 | - | 2018-01-02 |
| CVE-2017-17097 | gps-server.net GPS Tracking Software（self hosted）安全漏洞 — n/a | 9.8 | - | 2018-01-02 |
| CVE-2018-3810 | WordPress Oturia Smart Google Code Inserter插件安全漏洞 — n/a | 9.8 | - | 2018-01-01 |
| CVE-2018-3811 | WordPress Oturia Smart Google Code Inserter插件SQL注入漏洞 — n/a | 9.8 | - | 2018-01-01 |
| CVE-2017-9944 | Siemens 7KT PAC1200 Data Manager 安全漏洞 — Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03 CWE-288 | 9.8 | - | 2017-12-26 |
| CVE-2017-14022 | 多款Rockwell Automation产品FactoryTalk Alarms and Events 输入验证漏洞 — Rockwell Automation FactoryTalk Alarms and Events CWE-20 | 7.5 | - | 2017-12-23 |
| CVE-2017-15317 | 多款Huawei产品输入验证漏洞 — AR120-S | 6.5 | - | 2017-12-22 |
| CVE-2017-14385 | EMC Data Domain DD OS和EMC Data Domain Virtual Edition 安全漏洞 — EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all versions, EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1, EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2 | 9.8 | - | 2017-12-20 |
| CVE-2017-17761 | Ichano AtHome IP Camera 安全漏洞 — n/a | 9.8 | - | 2017-12-19 |
| CVE-2017-17105 | Zivif PR115-204-P-RS 操作系统命令注入漏洞 — n/a | 9.8 | - | 2017-12-18 |
| CVE-2017-17106 | Zivif PR115-204-P-RS 安全漏洞 — n/a | 9.8 | - | 2017-12-18 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24316 条 CVE 漏洞。