access:pre-auth 类型相关 24886 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-52913 | Mitel MiCollab 安全漏洞 — n/a | 9.8 | - | 2025-08-08 |
| CVE-2025-54787 | SuiteCRM 授权问题漏洞 — SuiteCRM CWE-285 | 3.7 | Low | 2025-08-07 |
| CVE-2025-34148 | Itemir M300 Wi-Fi Repeater 安全漏洞 — M300 Wi-Fi Repeater CWE-78 | 8.8AI | High AI | 2025-08-07 |
| CVE-2025-34151 | Itemir M300 Wi-Fi Repeater 安全漏洞 — M300 Wi-Fi Repeater CWE-78 | 9.8AI | Critical AI | 2025-08-07 |
| CVE-2025-34152 | Itemir M300 Wi-Fi Repeater 安全漏洞 — M300 Wi-Fi Repeater CWE-78 | 9.8AI | Critical AI | 2025-08-07 |
| CVE-2025-7054 | quiche 安全漏洞 — quiche CWE-835 | 6.5AI | Medium AI | 2025-08-07 |
| CVE-2025-47188 | Mitel多款产品 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-08-07 |
| CVE-2025-54786 | SuiteCRM 访问控制错误漏洞 — SuiteCRM-Core CWE-200 | 5.3 | Medium | 2025-08-06 |
| CVE-2025-38746 | Dell SupportAssist OS Recovery 信息泄露漏洞 — SupportAssist OS Recovery CWE-200 | 3.5 | Low | 2025-08-06 |
| CVE-2025-20215 | Cisco Webex Meetings 信任管理问题漏洞 — Cisco Webex Meetings CWE-295 | 5.4 | Medium | 2025-08-06 |
| CVE-2025-8620 | WordPress plugin GiveWP 信息泄露漏洞 — GiveWP – Donation Plugin and Fundraising Platform CWE-200 | 5.3 | Medium | 2025-08-06 |
| CVE-2025-6994 | WordPress plugin Reveal Listing 安全漏洞 — Reveal Listing CWE-269 | 9.8 | Critical | 2025-08-06 |
| CVE-2025-8420 | WordPress plugin Request a Quote Form 安全漏洞 — Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress CWE-95 | 8.1 | High | 2025-08-06 |
| CVE-2025-7036 | WordPress plugin CleverReach 注入漏洞 — CleverReach® WP CWE-89 | 7.5 | High | 2025-08-06 |
| CVE-2025-8649 | Kenwood DMX958XR 操作系统命令注入漏洞 — DMX958XR CWE-78 | 6.8AI | Medium AI | 2025-08-06 |
| CVE-2025-8628 | Kenwood DMX958XR 操作系统命令注入漏洞 — DMX958XR CWE-78 | 6.8AI | Medium AI | 2025-08-06 |
| CVE-2012-10027 | WordPress plugin WP-Property 安全漏洞 — WordPress Plugin CWE-434 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2012-10026 | WordPress plugin Asset-Manager 安全漏洞 — asset-manager CWE-434 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2012-10025 | WordPress plugin Advanced Custom Fields 安全漏洞 — WordPress Plugin CWE-98 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2012-10035 | TurboFTP Server 安全漏洞 — TurboFTP Server CWE-120 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2013-10070 | PHP-Charts 安全漏洞 — PHP-Charts CWE-95 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2013-10066 | Kordil EDMS 安全漏洞 — EDMS CWE-434 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2012-10030 | FreeFloat FTP Server 安全漏洞 — FTP Server CWE-434 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2013-10069 | D-Link DIR-600 安全漏洞 — DIR-600 rev B CWE-78 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2025-2611 | ICT Innovations ICTBroadcast 安全漏洞 — ICTBroadcast CWE-78 | 9.8AI | Critical AI | 2025-08-05 |
| CVE-2025-7050 | WordPress plugin Use-your-Drive | Google Drive 跨站脚本漏洞 — Use-your-Drive | Google Drive plugin for WordPress CWE-79 | 7.2 | High | 2025-08-05 |
| CVE-2025-53544 | Trilium Notes 安全漏洞 — Trilium CWE-307 | 7.5 | High | 2025-08-05 |
| CVE-2025-54802 | pyLoad 安全漏洞 — pyload CWE-22 | 9.8 | Critical | 2025-08-05 |
| CVE-2025-51541 | Shopware 安全漏洞 — n/a | 6.1AI | Medium AI | 2025-08-05 |
| CVE-2025-51628 | Agenzia Impresa EccoBook 安全漏洞 — n/a | 7.5AI | High AI | 2025-08-05 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24886 条 CVE 漏洞。