access:pre-auth 类型相关 24886 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-27576 | Intel Tiber Edge Platform Edge Orchestrator 资源管理错误漏洞 — Edge Orchestrator software | 2.9 | Low | 2025-08-12 |
| CVE-2025-24921 | Intel Tiber Edge Platform Edge Orchestrator 安全漏洞 — Edge Orchestrator software | 6.6 | Medium | 2025-08-12 |
| CVE-2025-24840 | Intel Tiber Edge Platform Edge Orchestrator 访问控制错误漏洞 — Edge Orchestrator software | 5.8 | Medium | 2025-08-12 |
| CVE-2025-20625 | Intel PROSet/Wireless WiFi Software 代码问题漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 7.4 | High | 2025-08-12 |
| CVE-2025-5462 | Ivanti多款产品 安全漏洞 — Connect Secure CWE-122 | 7.5 | High | 2025-08-12 |
| CVE-2025-5456 | Ivanti多款产品 缓冲区错误漏洞 — Connect Secure CWE-125 | 7.5 | High | 2025-08-12 |
| CVE-2025-30034 | Siemens SIMATIC RTLS Locating Manager 安全漏洞 — SIMATIC RTLS Locating Manager CWE-617 | 6.2 | Medium | 2025-08-12 |
| CVE-2024-52504 | Siemens多款产品 代码问题漏洞 — SIPROTEC 4 6MD61 CWE-754 | 7.5 | High | 2025-08-12 |
| CVE-2025-6253 | WordPress plugin UiCore Elements 安全漏洞 — UiCore Elements – Free widgets and templates for Elementor CWE-862 | 7.5 | High | 2025-08-12 |
| CVE-2025-8059 | WordPress plugin B Blocks 安全漏洞 — bBlocks – Essential Gutenberg Blocks & Patterns Collection CWE-862 | 9.8 | Critical | 2025-08-12 |
| CVE-2025-4390 | WordPress plugin WP Private Content Plus 信息泄露漏洞 — WP Private Content Plus CWE-200 | 5.3 | Medium | 2025-08-12 |
| CVE-2025-42975 | SAP NetWeaver Application Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP (BIC Document) CWE-79 | 6.1 | Medium | 2025-08-12 |
| CVE-2025-42948 | SAP NetWeaver ABAP Platform 跨站脚本漏洞 — SAP NetWeaver ABAP Platform CWE-79 | 6.1 | Medium | 2025-08-12 |
| CVE-2025-42942 | SAP NetWeaver Application Server ABAP 跨站脚本漏洞 — SAP NetWeaver Application Server for ABAP CWE-79 | 6.1 | Medium | 2025-08-12 |
| CVE-2025-54992 | open-kilda 代码问题漏洞 — open-kilda CWE-611 | 7.5AI | High AI | 2025-08-11 |
| CVE-2025-54478 | Mattermost Confluence Plugin 安全漏洞 — Mattermost Confluence Plugin CWE-306 | 7.2 | High | 2025-08-11 |
| CVE-2025-49221 | Mattermost Confluence Plugin 安全漏洞 — Mattermost Confluence Plugin CWE-862 | 3.7 | Low | 2025-08-11 |
| CVE-2025-8866 | YugabyteDB 安全漏洞 — YugabyteDB Anywhere CWE-200 | 5.3AI | Medium AI | 2025-08-11 |
| CVE-2012-10038 | Auxilium RateMyPet 安全漏洞 — RateMyPet CWE-434 | 9.8AI | Critical AI | 2025-08-11 |
| CVE-2025-8853 | 2100 TECHNOLOGY Electronic Official Document Management System 安全漏洞 — Official Document Management System CWE-290 | 9.8 | Critical | 2025-08-11 |
| CVE-2025-54888 | Fedify 安全漏洞 — fedify CWE-287 | 9.8 | - | 2025-08-09 |
| CVE-2025-4796 | WordPress plugin Eventin 安全漏洞 — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-639 | 8.8 | High | 2025-08-08 |
| CVE-2012-10045 | Sourceforge XODA 安全漏洞 — XODA CWE-434 | 9.8 | - | 2025-08-08 |
| CVE-2012-10041 | Sourceforge WANem 安全漏洞 — WAN Emulator CWE-78 | 9.8 | - | 2025-08-08 |
| CVE-2012-10036 | ProjectPier 安全漏洞 — ProjectPier CWE-434 | 9.8 | - | 2025-08-08 |
| CVE-2012-10044 | MobileCartly 安全漏洞 — MobileCartly CWE-434 | 9.8 | - | 2025-08-08 |
| CVE-2012-10046 | ESVA-Project E-Mail Security Virtual Appliance 安全漏洞 — E-Mail Security Virtual Appliance CWE-78 | 9.8 | - | 2025-08-08 |
| CVE-2012-10052 | EGallery 安全漏洞 — EGallery CWE-434 | 9.8 | - | 2025-08-08 |
| CVE-2012-10050 | CuteFlow 安全漏洞 — CuteFlow CWE-434 | 9.8 | - | 2025-08-08 |
| CVE-2010-10013 | Sourceforge AjaXplorer 安全漏洞 — AjaXplorer CWE-78 | 9.8 | - | 2025-08-08 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24886 条 CVE 漏洞。