目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24864

access:pre-auth 类型相关 24864 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-51411 Institute-of-Current-Students 安全漏洞 — n/a 6.1 - 2025-07-25
CVE-2025-54379 LF Edge eKuiper SQL注入漏洞 — ekuiper CWE-89 9.8 - 2025-07-24
CVE-2025-6260 Network Thermostat X-Series WiFi thermostats 访问控制错误漏洞 — X-Series WiFi thermostats CWE-306 9.8 Critical 2025-07-24
CVE-2025-6998 Calibre-Web 安全漏洞 — Calibre Web CWE-1333 7.5 - 2025-07-24
CVE-2025-6588 WordPress plugin FunnelCockpit 跨站脚本漏洞 — FunnelCockpit CWE-79 6.1 Medium 2025-07-24
CVE-2025-7690 WordPress plugin Affiliate Plus 跨站请求伪造漏洞 — Affiliate Plus CWE-352 6.1 Medium 2025-07-24
CVE-2025-7835 WordPress plugin iThoughts Advanced Code Editor 跨站请求伪造漏洞 — iThoughts Advanced Code Editor CWE-352 4.3 Medium 2025-07-24
CVE-2025-6380 WordPress plugin ONLYOFFICE Docs 安全漏洞 — ONLYOFFICE Docs CWE-862 9.8 Critical 2025-07-24
CVE-2025-6441 WordPress plugin WebinarIgnition 安全漏洞 — WebinarIgnition – Live, Automated & Evergreen Webinars for WooCommerce CWE-862 9.8 Critical 2025-07-24
CVE-2025-7640 WordPress plugin hiWeb Export Posts 路径遍历漏洞 — hiWeb Export Posts CWE-22 8.1 High 2025-07-24
CVE-2025-5084 WordPress plugin Post Grid Master 跨站脚本漏洞 — Post Grid Master — Post Grids & AJAX Filters CWE-79 6.1 Medium 2025-07-24
CVE-2025-41240 Rucio Helm Charts 安全漏洞 — bitnamicharts/appsmith 10.0 Critical 2025-07-24
CVE-2025-7437 WordPress plugin Ebook Store 代码问题漏洞 — Ebook Store CWE-434 9.8 Critical 2025-07-24
CVE-2025-7852 WordPress plugin WPBookit 代码问题漏洞 — WPBookit CWE-434 9.8 Critical 2025-07-24
CVE-2016-15044 Kaltura Video Platform 安全漏洞 — Video Platform CWE-502 9.8 - 2025-07-23
CVE-2025-40598 SonicWall SMA 100 Series 跨站脚本漏洞 — SMA 100 Series CWE-79 6.1 - 2025-07-23
CVE-2025-40597 SonicWall SMA 100 Series 安全漏洞 — SMA 100 Series CWE-122 9.8 - 2025-07-23
CVE-2025-40596 SonicWall SMA 100 Series 安全漏洞 — SMA 100 Series CWE-121 9.8 - 2025-07-23
CVE-2025-36116 IBM Db2 Mirror for i 安全漏洞 — Db2 Mirror for i CWE-1385 6.3 Medium 2025-07-23
CVE-2010-10012 Japheth httpdASM 安全漏洞 — httpdasm CWE-22 7.5 - 2025-07-23
CVE-2015-10141 Xdebug 安全漏洞 — Xdebug CWE-78 9.8 - 2025-07-23
CVE-2017-20198 D2iQ DC/OS Marathon 安全漏洞 — DC/OS Marathon CWE-732 9.8 - 2025-07-23
CVE-2018-25113 Dicoogle PACS Web Server 安全漏洞 — PACS Web Server CWE-22 7.5 - 2025-07-23
CVE-2018-25114 osCommerce Online Merchant 安全漏洞 — Online Merchant CWE-434 9.8 - 2025-07-23
CVE-2022-4978 Remote Control Server 安全漏洞 — Remote Control Collection Server CWE-306 9.3 Critical 2025-07-23
CVE-2025-41687 Weidmueller多款产品 安全漏洞 — IE-SR-2TX-WL CWE-121 9.8 Critical 2025-07-23
CVE-2025-6214 WordPress plugin Omnishop 跨站请求伪造漏洞 — Omnishop – Mobile shop apps complementing your WooCommerce webshop CWE-352 6.5 Medium 2025-07-23
CVE-2025-6054 WordPress plugin YANewsflash 跨站请求伪造漏洞 — YANewsflash CWE-352 6.1 Medium 2025-07-23
CVE-2025-6215 WordPress plugin Omnishop 安全漏洞 — Omnishop – Mobile shop apps complementing your WooCommerce webshop CWE-862 5.3 Medium 2025-07-23
CVE-2025-47187 Mitel 6800 Series、Mitel 6900 Series和Mitel 6900w Series 安全漏洞 — n/a 7.5 - 2025-07-23

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24864 条 CVE 漏洞。