access:pre-auth 类型相关 26535 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-6706 | Cisco Prime Collaboration Provisioning Tool logging子系统信息泄露漏洞 — Cisco Prime Collaboration Provisioning Tool | 3.3 | - | 2017-07-04 |
| CVE-2017-6721 | Cisco Wide Area Application Services 安全漏洞 — Cisco Wide Area Application Services | 5.3 | - | 2017-07-04 |
| CVE-2017-6722 | Cisco Unified Contact Center Express Extensible Messaging and Presence Protocol 授权问题漏洞 — Cisco Unified Contact Center Express | 8.2 | - | 2017-07-04 |
| CVE-2017-6724 | Cisco Prime Infrastructure 跨站脚本漏洞 — Cisco Prime Infrastructure | 6.1 | - | 2017-07-04 |
| CVE-2017-6725 | Cisco Prime Infrastructure 跨站脚本漏洞 — Cisco Prime Infrastructure | 6.1 | - | 2017-07-04 |
| CVE-2017-10796 | TP-Link NC250 安全漏洞 — n/a | 6.5 | - | 2017-07-02 |
| CVE-2017-6044 | Sierra Wireless AirLink Raven XE和XT 授权问题漏洞 — Sierra Wireless AirLink Raven XE and XT CWE-285 | 9.8 | - | 2017-06-30 |
| CVE-2017-4997 | EMC VASA Provider Virtual Appliance 安全漏洞 — VASA Provider Virtual Appliance versions 8.3.x and prior | 9.8 | - | 2017-06-29 |
| CVE-2016-10042 | Swisscom Arcadyan SLT-00 Star* 安全漏洞 — n/a | 9.1 | - | 2017-06-29 |
| CVE-2016-6083 | IBM Tivoli Monitoring SOAP 信息泄露漏洞 — Tivoli Monitoring V6 | 5.3 | - | 2017-06-27 |
| CVE-2017-6678 | Cisco Virtualized Packet Core-Distributed Instance Software 资源管理错误漏洞 — Cisco Virtualized Packet Core-Distributed Instance CWE-399 | 7.5 | - | 2017-06-26 |
| CVE-2015-9098 | Redgate SQL Monitor 安全漏洞 — n/a | 9.8 | - | 2017-06-22 |
| CVE-2017-9807 | E2open设备OpenWebif插件安全漏洞 — n/a | 9.8 | - | 2017-06-22 |
| CVE-2017-4989 | EMC Avamar Server Software 安全漏洞 — EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401 | 9.8 | - | 2017-06-21 |
| CVE-2017-6045 | Trihedral VTScada 信息泄露漏洞 — Trihedral VTScada CWE-548 | 7.5 | - | 2017-06-21 |
| CVE-2017-6050 | Ecava IntegraXor SQL注入漏洞 — Ecava IntegraXor CWE-89 | 9.8 | - | 2017-06-21 |
| CVE-2017-9781 | Mathias Kettner Check_MK 跨站脚本漏洞 — n/a | 6.1 | - | 2017-06-21 |
| CVE-2017-3216 | 多款WiMAX路由器安全漏洞 — BM2022 CWE-306 | 9.8 | - | 2017-06-20 |
| CVE-2017-4984 | EMC VNX2 OE for File和VNX1 OE for File 安全漏洞 — EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 | 9.8 | - | 2017-06-19 |
| CVE-2017-9602 | KBVault Mysql Free Knowledge Base 权限许可和访问控制问题漏洞 — n/a | 9.8 | - | 2017-06-16 |
| CVE-2017-9675 | D-Link DIR-605L 安全漏洞 — n/a | 7.5 | - | 2017-06-15 |
| CVE-2017-8515 | Microsoft Windows 安全漏洞 — Microsoft Windows | 6.2 | - | 2017-06-15 |
| CVE-2016-8218 | Pivotal Software Cloud Foundry 输入验证漏洞 — Cloud Foundry | 9.1 | - | 2017-06-13 |
| CVE-2017-2773 | Pivotal Cloud Foundry Elastic Runtime 安全漏洞 — PCF Elastic Runtime | 9.8 | - | 2017-06-13 |
| CVE-2017-6655 | Cisco NX-OS Software 安全漏洞 — Cisco NX-OS Software Fibre Channel over Ethernet | 5.3 | - | 2017-06-13 |
| CVE-2017-6656 | Cisco IP Phone 8800 Series 安全漏洞 — Cisco IP Phone 8800 Series | 5.9 | - | 2017-06-13 |
| CVE-2017-6659 | Cisco Prime Collaboration Assurance 跨站请求伪造漏洞 — Cisco Prime Collaboration Assurance | 8.8 | - | 2017-06-13 |
| CVE-2017-6661 | Cisco Email Security和Content Security Management Appliance 跨站脚本漏洞 — Cisco Email Security and Content Security Management Appliance | 6.1 | - | 2017-06-13 |
| CVE-2017-6667 | Cisco Context Service SDK 输入验证漏洞 — Cisco Context Service SDK | 9.8 | - | 2017-06-13 |
| CVE-2017-6670 | Cisco Unified Communications Domain Manager 安全漏洞 — Cisco Unified Communications Domain Manager | 6.1 | - | 2017-06-13 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 26535 条 CVE 漏洞。