access:pre-auth 类型相关 23262 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-20264 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-601 | 6.1 | Medium | 2023-11-01 |
| CVE-2023-20070 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-244 | 4.0 | Medium | 2023-11-01 |
| CVE-2023-20071 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-1039 | 5.8 | Medium | 2023-11-01 |
| CVE-2023-20031 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-244 | 4.0 | Medium | 2023-11-01 |
| CVE-2023-20255 | Cisco Meeting Server 安全漏洞 — Cisco Meeting ServerCWE-20 | 5.3 | Medium | 2023-11-01 |
| CVE-2023-20213 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine SoftwareCWE-787 | 4.3 | Medium | 2023-11-01 |
| CVE-2023-20245 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-290 | 5.8 | Medium | 2023-11-01 |
| CVE-2023-20256 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-290 | 5.0 | Medium | 2023-11-01 |
| CVE-2023-20005 | Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management CenterCWE-79 | 4.8 | Medium | 2023-11-01 |
| CVE-2023-20074 | Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management CenterCWE-79 | 4.8 | Medium | 2023-11-01 |
| CVE-2023-20206 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management CenterCWE-79 | 6.1 | Medium | 2023-11-01 |
| CVE-2023-20041 | Cisco Firepower Management Center 跨站脚本漏洞 — Cisco Firepower Management CenterCWE-79 | 4.8 | Medium | 2023-11-01 |
| CVE-2023-20270 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-20 | 5.8 | Medium | 2023-11-01 |
| CVE-2023-20244 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-771 | 8.6 | High | 2023-11-01 |
| CVE-2023-20155 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management CenterCWE-770 | 7.5 | High | 2023-11-01 |
| CVE-2023-20086 | Cisco Firepower Threat Defense和Cisco ASA 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-248 | 8.6 | High | 2023-11-01 |
| CVE-2023-20177 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-244 | 4.0 | Medium | 2023-11-01 |
| CVE-2023-1719 | Bitrix24 安全漏洞 — Bitrix24CWE-665 | 7.5 | High | 2023-11-01 |
| CVE-2023-1718 | Bitrix24 安全漏洞 — Bitrix24CWE-835 | 7.5 | High | 2023-11-01 |
| CVE-2023-46237 | FOGProject 路径遍历漏洞 — fogprojectCWE-22 | 5.8 | Medium | 2023-10-31 |
| CVE-2023-46236 | FOGProject 代码问题漏洞 — fogprojectCWE-918 | 8.6 | High | 2023-10-31 |
| CVE-2023-22518 | Atlassian Confluence Data Center 和 Confluence Server 安全漏洞 — Confluence Data Center | 9.8 | - | 2023-10-31 |
| CVE-2023-5307 | WordPress Plugin Photos and Files Contest Gallery 跨站脚本漏洞 — Photos and Files Contest Gallery | 6.1 | - | 2023-10-31 |
| CVE-2023-5360 | WordPress Plugin Royal Elementor Addons and Templates 代码问题漏洞 — Royal Elementor Addons and Templates | 9.8 | - | 2023-10-31 |
| CVE-2016-1203 | NetMove SaAT Netizen和SaAT Netizen installer 安全漏洞 — SaAT Netizen installer | 8.1 | - | 2023-10-31 |
| CVE-2022-3007 | Syska SW100 安全漏洞 — Syska SW100 SmartwatchCWE-862 | 8.1 | High | 2023-10-31 |
| CVE-2023-46978 | TOTOLINK X6000R 安全漏洞 — n/a | 9.1 | - | 2023-10-31 |
| CVE-2023-46992 | TOTOLINK A3300R 安全漏洞 — n/a | 9.1 | - | 2023-10-31 |
| CVE-2023-45672 | Frigate 代码问题漏洞 — frigateCWE-502 | 7.5 | High | 2023-10-30 |
| CVE-2023-42804 | BigBlueButton 路径遍历漏洞 — bigbluebuttonCWE-22 | 3.1 | Low | 2023-10-30 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 23262 条 CVE 漏洞。