Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

access:pre-auth — CVE vulnerabilities tagged 18872

18872 CVE security advisories tagged "access:pre-auth" with AI Chinese analysis, CVSS, references and POCs.

CVE IDTitleCVSSSeverityPublished
CVE-2024-9935 PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download — PDF Generator for WordPress ElementorCWE-22 7.5 High2024-11-16
CVE-2024-10884 SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting — SimpleForm Contact Form SubmissionsCWE-79 6.1 Medium2024-11-16
CVE-2024-10883 SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting — SimpleForm – Contact form made simpleCWE-79 6.1 Medium2024-11-16
CVE-2024-10861 Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update — Popup Box – Create Countdown, Coupon, Video, Contact Form PopupsCWE-862 5.3 Medium2024-11-16
CVE-2024-45610 GLPI has a reflected XSS in ajax/cable.php — glpiCWE-79 6.5 Medium2024-11-15
CVE-2024-45609 GLPI has a Reflected XSS in /front/stat.graph.php — glpiCWE-79 6.5 Medium2024-11-15
CVE-2024-43418 GLPI has multiple reflected XSS — glpiCWE-79 6.5 Medium2024-11-15
CVE-2024-43417 Reflected XSS in Software form — glpiCWE-79 6.5 Medium2024-11-15
CVE-2024-41678 GLPI has multiple reflected XSS — glpiCWE-79 6.5 Medium2024-11-15
CVE-2021-1494 Snort 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-693 5.8 Medium2024-11-15
CVE-2022-20633 Cisco Enterprise Chat and Email Username Enumeration Vulnerability — Cisco Enterprise Chat and EmailCWE-204 5.3 Medium2024-11-15
CVE-2022-20632 Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability — Cisco Enterprise Chat and EmailCWE-79 6.1 Medium2024-11-15
CVE-2021-34753 Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities — Cisco Firepower Threat Defense SoftwareCWE-284 5.8 Medium2024-11-15
CVE-2022-20631 Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability — Cisco Enterprise Chat and EmailCWE-79 6.1 Medium2024-11-15
CVE-2022-20654 Cisco Webex Meetings Cross-Site Scripting Vulnerability — Cisco Webex MeetingsCWE-80 6.1 Medium2024-11-15
CVE-2022-20634 Cisco Enterprise Chat and Email Open Redirect Vulnerability — Cisco Enterprise Chat and EmailCWE-601 4.7 Medium2024-11-15
CVE-2022-20648 Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability — Cisco Redundancy Configuration ManagerCWE-200 5.3 Medium2024-11-15
CVE-2022-20649 Cisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability — Cisco Redundancy Configuration ManagerCWE-489 8.1 High2024-11-15
CVE-2022-20657 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability — Cisco Evolved Programmable Network Manager (EPNM)CWE-79 6.1 Medium2024-11-15
CVE-2022-20663 Secure Network Analytics Cross-Site Scripting Vulnerability — Cisco Secure Network AnalyticsCWE-79 6.1 Medium2024-11-15
CVE-2022-20685 Multiple Cisco Products Snort Modbus Denial of Service Vulnerability — Cisco Cyber VisionCWE-190 7.5 High2024-11-15
CVE-2022-20766 Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery Protocol Denial of Service Vulnerability — Cisco Analog Telephone Adaptor (ATA) SoftwareCWE-125 5.3 Medium2024-11-15
CVE-2022-20793 Cisco Touch 10 Device Insufficient Identity Verification Vulnerability — Cisco RoomOS SoftwareCWE-325 6.8 Medium2024-11-15
CVE-2022-20814 Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability — Cisco TelePresence Video Communication Server (VCS) ExpresswayCWE-295 7.4 High2024-11-15
CVE-2022-20846 Cisco IOS XR Software Cisco Discovery Protocol Buffer Overflow Vulnerability — Cisco IOS XR SoftwareCWE-120 4.3 Medium2024-11-15
CVE-2022-20849 Cisco IOS XR Software Broadband Network Gateway PPPoE Denial of Service Vulnerability — Cisco IOS XR SoftwareCWE-391 6.1 Medium2024-11-15
CVE-2022-20931 Cisco Touch 10 Device Downgrade Attack Vulnerability — Cisco TelePresence Endpoint Software (TC/CE)CWE-527 6.5 Medium2024-11-15
CVE-2022-20853 Cisco Expressway Series and Cisco TelePresence VCS Cross-Site Request Forgery Vulnerability — Cisco TelePresence Video Communication Server (VCS) ExpresswayCWE-352 7.4 High2024-11-15
CVE-2023-20060 Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability — Cisco Prime Collaboration DeploymentCWE-79 6.1 Medium2024-11-15
CVE-2023-20094 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability — Cisco RoomOS SoftwareCWE-125 4.3 Medium2024-11-15

Vulnerabilities classified as access:pre-auth represent 18872 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.