目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24252

access:pre-auth 类型相关 24252 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2017-12219 Cisco Small Business SPA300、SPA500和SPA51x系列IP电话安全漏洞 — Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones CWE-399 7.5 - 2017-09-21
CVE-2017-12248 Cisco Unified Intelligence Center Software 跨站脚本漏洞 — Cisco Unified Intelligence Center CWE-79 6.1 - 2017-09-21
CVE-2017-12250 Cisco Wide Area Application Services 安全漏洞 — Cisco Wide Area Application Services CWE-399 5.3 - 2017-09-21
CVE-2017-12253 Cisco Unified Intelligence Center 跨站请求伪造漏洞 — Cisco Unified Intelligence Center CWE-352 8.8 - 2017-09-21
CVE-2017-12254 Cisco Unified Intelligence Center 跨站脚本漏洞 — Cisco Unified Intelligence Center CWE-79 6.1 - 2017-09-21
CVE-2017-14623 go-ldap ldap 信任管理问题漏洞 — n/a 8.1 - 2017-09-20
CVE-2017-7924 多款Rockwell Automation产品输入验证漏洞 — Rockwell Automation MicroLogix 1100 Controllers CWE-20 7.5 - 2017-09-20
CVE-2017-9798 Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server 7.5 - 2017-09-18
CVE-2017-14510 SugarCRM 跨站脚本漏洞 — n/a 6.1 - 2017-09-17
CVE-2017-1002100 Google Kubernetes 安全漏洞 — Kubernetes 6.5 - 2017-09-14
CVE-2017-12249 Cisco Meeting Server Traversal Using Relay NAT服务器安全漏洞 — Cisco Meeting Server CWE-16 9.9 - 2017-09-13
CVE-2017-14423 D-Link DIR-850L REV. A 安全漏洞 — n/a 7.5 - 2017-09-13
CVE-2017-14429 D-Link DIR-850L REV.A和REV.B DHCP客户端安全漏洞 — n/a 9.8 - 2017-09-13
CVE-2017-14337 MISP 安全漏洞 — n/a 8.1 - 2017-09-12
CVE-2017-12212 Cisco Unity Connection 跨站脚本漏洞 — Cisco Unity Connection CWE-79 6.1 - 2017-09-07
CVE-2017-12213 Cisco Catalyst 4000 Series Switches IOS XE Software 安全漏洞 — Cisco Catalyst 4000 Series Switches CWE-287 6.5 - 2017-09-07
CVE-2017-12216 Cisco SocialMiner 安全漏洞 — Cisco SocialMiner CWE-200 8.8 - 2017-09-07
CVE-2017-12217 Cisco ASR 5500 System Architecture Evolution Gateways 安全漏洞 — Cisco ASR 5500 System Architecture Evolution Gateway CWE-20 5.3 - 2017-09-07
CVE-2017-12218 Cisco Email Security Appliances Advanced Malware Protection 安全漏洞 — Cisco Email Security Appliance CWE-20 5.8 - 2017-09-07
CVE-2017-12220 Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management Center CWE-79 6.1 - 2017-09-07
CVE-2017-12223 Cisco IR800 Integrated Services Router Software 输入验证漏洞 — Cisco IR800 Integrated Services Router CWE-20 6.4 - 2017-09-07
CVE-2017-6627 Cisco IOS和IOS XE 安全漏洞 — Cisco IOS and Cisco IOS XE CWE-399 7.5 - 2017-09-07
CVE-2017-6631 Cisco YesMaxTotal、YesMax HD和YesQuattro STB 安全漏洞 — Cisco Yes Set-Top Box CWE-399 7.5 - 2017-09-07
CVE-2017-6780 Cisco IoT Field Network Director 资源管理错误漏洞 — Cisco IoT Field Network Director CWE-399 7.5 - 2017-09-07
CVE-2017-6789 Cisco Unified Intelligence Center 跨站脚本漏洞 — Cisco Unified Intelligence Center CWE-79 6.1 - 2017-09-07
CVE-2017-6791 Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager CWE-119 7.5 - 2017-09-07
CVE-2017-14117 Arris NVG589和NVG599 AT&T U-verse 安全漏洞 — n/a 5.9 - 2017-09-03
CVE-2017-12786 NoviFlow NoviWare和NoviSwitch设备缓冲区错误漏洞 — n/a 9.8 - 2017-08-22
CVE-2017-12787 NoviFlow NoviWare和NoviSwitch设备安全漏洞 — n/a 9.8 - 2017-08-22
CVE-2017-5187 Micro Focus Enterprise Developer和Enterprise Server Directory Server 跨站请求伪造漏洞 — Micro Focus Enterprise Developer, Micro Focus Enterprise Server CWE-352 8.8 - 2017-08-21

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24252 条 CVE 漏洞。