目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-9587 WordPress plugin CTL Behance Importer Lite 安全漏洞 — CTL Behance Importer Lite 9.8AI Critical AI 2025-10-02
CVE-2025-56019 Agasta Easytouch Plus 安全漏洞 — n/a 6.5AI Medium AI 2025-10-02
CVE-2025-56161 Yoshop 安全漏洞 — n/a 7.5AI High AI 2025-10-02
CVE-2025-56162 Yoshop 安全漏洞 — n/a 9.8AI Critical AI 2025-10-02
CVE-2025-59403 Flock Safety Android Collins 安全漏洞 — n/a 9.8AI Critical AI 2025-10-02
CVE-2023-28760 TP-Link AX1800 安全漏洞 — n/a 8.8AI High AI 2025-10-02
CVE-2025-61582 ts3-manager 输入验证错误漏洞 — ts3-manager CWE-20 7.5 High 2025-10-01
CVE-2025-54811 OpenPLC 安全漏洞 — OpenPLC_V3 CWE-758 7.1 High 2025-10-01
CVE-2025-59538 Argo CD 安全漏洞 — argo-cd CWE-248 7.5 High 2025-10-01
CVE-2025-59531 Argo CD 安全漏洞 — argo-cd CWE-703 7.5 High 2025-10-01
CVE-2025-8679 ExtremeGuest Essentials 安全漏洞 — ExtremeGuest Essentials CWE-307 8.2AI High AI 2025-10-01
CVE-2025-20371 Splunk Cloud Platform和Splunk Enterprise 代码问题漏洞 — Splunk Enterprise CWE-918 7.5 High 2025-10-01
CVE-2020-36852 WordPress plugin Custom Searchable Data Entry System 安全漏洞 — Custom Searchable Data Entry System CWE-862 9.1 Critical 2025-10-01
CVE-2025-9512 WordPress plugin Schema & Structured Data for WP & AMP 安全漏洞 — Schema & Structured Data for WP & AMP 6.1AI Medium AI 2025-10-01
CVE-2025-10735 WordPress plugin Block For Mailchimp 代码问题漏洞 — Block for Mailchimp – Add Email Subscription Forms and Collect Leads CWE-918 4.0 Medium 2025-10-01
CVE-2025-10744 WordPress plugin File Manager, Code Editor, and Backup by Managefy 信息泄露漏洞 — File Manager, Code Editor, and Backup by Managefy CWE-200 5.9 Medium 2025-10-01
CVE-2025-10659 MegaSys Telenium Online Web Application 操作系统命令注入漏洞 — Telenium Online Web Application: CWE-78 9.8 Critical 2025-09-30
CVE-2025-8120 Polska Akademia Dostępności CMS 代码问题漏洞 — PAD CMS CWE-434 9.8AI Critical AI 2025-09-30
CVE-2025-7065 Polska Akademia Dostępności CMS 代码问题漏洞 — PAD CMS CWE-434 9.8AI Critical AI 2025-09-30
CVE-2025-7063 Polska Akademia Dostępności CMS 代码问题漏洞 — PAD CMS CWE-434 9.8AI Critical AI 2025-09-30
CVE-2025-8877 WordPress plugin AffiliateWP SQL注入漏洞 — AffiliateWP CWE-89 7.5 High 2025-09-30
CVE-2025-7038 WordPress plugin LatePoint 安全漏洞 — LatePoint – Calendar Booking Plugin for Appointments and Events CWE-288 8.2 High 2025-09-30
CVE-2025-7052 WordPress plugin LatePoint 跨站请求伪造漏洞 — LatePoint – Calendar Booking Plugin for Appointments and Events CWE-352 8.8 High 2025-09-30
CVE-2025-9946 WordPress plugin LockerPress 跨站请求伪造漏洞 — LockerPress – WordPress Security Plugin CWE-352 6.1 Medium 2025-09-30
CVE-2025-9948 WordPress plugin Chatwee 跨站请求伪造漏洞 — Chat by Chatwee CWE-352 4.3 Medium 2025-09-30
CVE-2025-9991 WordPress plugin Tiny Bootstrap Elements Light 安全漏洞 — Tiny Bootstrap Elements Light CWE-98 8.1 High 2025-09-30
CVE-2025-9762 WordPress plugin Post By Email 操作系统命令注入漏洞 — Post By Email CWE-78 9.8 Critical 2025-09-30
CVE-2025-8625 WordPress plugin Copypress Rest API 安全漏洞 — Copypress Rest API CWE-321 9.8 Critical 2025-09-30
CVE-2025-55797 FormCMS 安全漏洞 — n/a 5.3AI Medium AI 2025-09-30
CVE-2025-56132 Liquidfiles 安全漏洞 — n/a 5.3AI Medium AI 2025-09-30

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24887 条 CVE 漏洞。