access:pre-auth 类型相关 24905 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-25241 | iWT FaceSentry Access Control System 安全漏洞 — FaceSentry Access Control System CWE-798 | 7.5 | High | 2025-12-24 |
| CVE-2019-25239 | V-SOL GPON/EPON OLT Platform 安全漏洞 — GPON/EPON OLT Platform CWE-552 | 7.5 | High | 2025-12-24 |
| CVE-2019-25235 | Smartwares HOME easy 安全漏洞 — Smartwares HOME easy CWE-639 | 9.8 | Critical | 2025-12-24 |
| CVE-2019-25236 | iSeeQ Hybrid DVR WH-H4 安全漏洞 — Hybrid DVR WH-H4 CWE-306 | 9.8 | Critical | 2025-12-24 |
| CVE-2018-25152 | Ecessa Edge EV150 跨站请求伪造漏洞 — Ecessa Edge EV150 CWE-352 | 5.3 | Medium | 2025-12-24 |
| CVE-2018-25150 | Ecessa ShieldLink SL175EHQ 跨站请求伪造漏洞 — Ecessa ShieldLink SL175EHQ CWE-352 | 5.3 | Medium | 2025-12-24 |
| CVE-2018-25140 | FLIR Thermal Traffic Cameras 安全漏洞 — Thermal Traffic Cameras CWE-306 | 7.5 | High | 2025-12-24 |
| CVE-2018-25141 | FLIR Thermal Traffic Cameras 安全漏洞 — FLIR Thermal Traffic Cameras CWE-306 | 7.5 | High | 2025-12-24 |
| CVE-2018-25142 | NovaRad NovaPACS Diagnostics Viewer 安全漏洞 — NovaPACS Diagnostics Viewer CWE-611 | 9.8 | Critical | 2025-12-24 |
| CVE-2018-25139 | FLIR AX8 Thermal Camera 安全漏洞 — FLIR AX8 Thermal Camera CWE-306 | 7.5 | High | 2025-12-24 |
| CVE-2018-25136 | FLIR Brickstream 3D+ 安全漏洞 — Brickstream 3D+ CWE-306 | 7.5 | High | 2025-12-24 |
| CVE-2018-25137 | FLIR Brickstream 3D+ 安全漏洞 — FLIR Brickstream 3D+ CWE-306 | 7.5 | High | 2025-12-24 |
| CVE-2018-25134 | Synaccess netBooter NP-02x和Synaccess netBooter NP-08x 安全漏洞 — netBooter NP-02x/NP-08x CWE-306 | 9.8 | Critical | 2025-12-24 |
| CVE-2018-25129 | SOCA Access Control System 安全漏洞 — SOCA Access Control System CWE-639 | 7.5 | High | 2025-12-24 |
| CVE-2025-13773 | WordPress plugin Print Invoice & Delivery Notes for WooCommerce 代码注入漏洞 — Print Invoice & Delivery Notes for WooCommerce CWE-94 | 9.8 | Critical | 2025-12-24 |
| CVE-2024-39037 | AIRC MyNET 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-12-24 |
| CVE-2025-68667 | continuwuity 安全漏洞 — continuwuity CWE-20 | 5.3AI | Medium AI | 2025-12-23 |
| CVE-2025-11419 | Keycloak 安全漏洞 CWE-770 | 7.5 | High | 2025-12-23 |
| CVE-2025-14388 | WordPress plugin PhastPress 安全漏洞 — PhastPress CWE-158 | 9.8 | Critical | 2025-12-23 |
| CVE-2025-14163 | WordPress plugin Premium Addons for Elementor 跨站请求伪造漏洞 — Premium Addons for Elementor – Powerful Elementor Templates & Widgets CWE-352 | 4.3 | Medium | 2025-12-23 |
| CVE-2025-14155 | WordPress plugin Premium Addons for Elementor 安全漏洞 — Premium Addons for Elementor – Powerful Elementor Templates & Widgets CWE-862 | 5.3 | Medium | 2025-12-23 |
| CVE-2023-53962 | Sound4 IMPACT 路径遍历漏洞 — Impact/Pulse/First CWE-22 | 7.5 | High | 2025-12-22 |
| CVE-2023-53963 | Sound4 IMPACT 操作系统命令注入漏洞 — Impact/Pulse/First CWE-78 | 9.8 | Critical | 2025-12-22 |
| CVE-2023-53964 | SOUND4多款产品 访问控制错误漏洞 — Impact/Pulse/First CWE-306 | 9.8 | Critical | 2025-12-22 |
| CVE-2023-53974 | D-Link DSL-124 访问控制错误漏洞 — DSL-124 Wireless N300 ADSL2+ CWE-306 | 7.5 | High | 2025-12-22 |
| CVE-2023-53975 | Atom CMS SQL注入漏洞 — Atom CMS CWE-89 | 7.5 | High | 2025-12-22 |
| CVE-2023-53972 | webTareas SQL注入漏洞 — WebTareas CWE-89 | 7.5 | High | 2025-12-22 |
| CVE-2025-34457 | Dire Wolf 安全漏洞 — Dire Wolf CWE-121 | 9.8AI | Critical AI | 2025-12-22 |
| CVE-2025-34458 | Dire Wolf 安全漏洞 — Dire Wolf CWE-617 | 7.5AI | High AI | 2025-12-22 |
| CVE-2025-14273 | Mattermost 安全漏洞 — Mattermost CWE-303 | 7.2 | High | 2025-12-22 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24905 条 CVE 漏洞。