目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 23311

access:pre-auth 类型相关 23311 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2023-4040 WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞 — Stripe Payment Plugin for WooCommerce 5.3 Medium2023-08-18
CVE-2023-36846 Juniper Networks Junos OS SRX 访问控制错误漏洞 — Junos OSCWE-306 5.3 Medium2023-08-17
CVE-2023-36845 Juniper Networks Junos OS EX 安全漏洞 — Junos OSCWE-473 9.8 Critical2023-08-17
CVE-2023-36844 Juniper Networks Junos OS EX 安全漏洞 — Junos OSCWE-473 5.3 Medium2023-08-17
CVE-2023-36847 Juniper Networks Junos OS EX 访问控制错误漏洞 — Junos OSCWE-306 5.3 Medium2023-08-17
CVE-2023-2917 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServerCWE-20 9.8 Critical2023-08-17
CVE-2023-2915 Rockwell Automation ThinManager 路径遍历漏洞 — ThinManager ThinServerCWE-20 7.5 High2023-08-17
CVE-2023-35009 IBM Cognos Analytics 安全漏洞 — Cognos AnalyticsCWE-209 5.3 Medium2023-08-16
CVE-2023-20197 ClamAV 安全漏洞 — Cisco Secure EndpointCWE-835 7.5 High2023-08-16
CVE-2023-20232 Cisco Unified Contact Center Express 输入验证错误漏洞 — Cisco Unified Contact Center ExpressCWE-20 5.3 Medium2023-08-16
CVE-2023-20222 Cisco Evolved Programmable Network Manager 跨站脚本漏洞 — Cisco Prime InfrastructureCWE-80 4.8 Medium2023-08-16
CVE-2023-20221 Cisco IP Phone 跨站请求伪造漏洞 — Cisco IP Phones with Multiplatform FirmwareCWE-352 6.5 Medium2023-08-16
CVE-2023-20237 Cisco Intersight 命令注入漏洞 — Cisco Intersight Virtual ApplianceCWE-284 4.3 Medium2023-08-16
CVE-2023-20242 Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications ManagerCWE-79 4.8 Medium2023-08-16
CVE-2023-20228 Cisco Integrated Management Controller 跨站脚本漏洞 — Cisco Identity Services Engine SoftwareCWE-80 6.1 Medium2023-08-16
CVE-2023-40349 Jenkins Plugin Gogs 安全漏洞 — Jenkins Gogs Plugin 7.5 -2023-08-16
CVE-2023-40348 Jenkins Plugin Gogs 安全漏洞 — Jenkins Gogs Plugin 5.3 -2023-08-16
CVE-2023-4308 WordPress Plugin User Submitted Posts 跨站脚本漏洞 — User Submitted Posts – Enable Users to Submit Posts from the Front EndCWE-79 7.2 High2023-08-15
CVE-2022-32876 Apple macOS Ventura 安全漏洞 — macOS 6.2 -2023-08-14
CVE-2023-3435 WordPress plugin User Activity Log SQL注入漏洞 — User Activity Log 9.8 -2023-08-14
CVE-2023-28768 Zyxel XGS2220-30 安全漏洞 — XGS2220-30 firmwareCWE-755 6.5 Medium2023-08-14
CVE-2023-3266 CyberPower PowerPanel Business Edition 安全漏洞 — PowerPanel EnterpriseCWE-358 9.8 Critical2023-08-14
CVE-2023-3265 Cyber Power Systems CyberPower PowerPanel Enterprise 安全漏洞 — PowerPanel EnterpriseCWE-150 9.8 Critical2023-08-14
CVE-2023-32748 Mitel MiVoice Connect 安全漏洞 — n/a 8.8 -2023-08-14
CVE-2023-40293 Harman Infotainment 命令注入漏洞 — n/a 9.8 -2023-08-14
CVE-2023-3452 WordPress plugin Canto 安全漏洞 — CantoCWE-98 9.8 Critical2023-08-12
CVE-2022-29887 Intel Manageability Commander 跨站脚本漏洞 — Intel(R) Manageability Commander software 8.1 High2023-08-11
CVE-2023-27515 Intel Driver and Support Assistant 跨站脚本漏洞 — Intel(R) DSA software 8.1 High2023-08-11
CVE-2023-28380 Intel AI Hackathon 代码问题漏洞 — Intel(R) AI Hackathon software 8.8 High2023-08-11
CVE-2023-25775 Intel Ethernet Controllers 安全漏洞 — Intel(R) Ethernet Controller RDMA driver for linux 5.6 Medium2023-08-11

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 23311 条 CVE 漏洞。