目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24864

access:pre-auth 类型相关 24864 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-54139 NodeJS 安全漏洞 — issues CWE-1021 4.3 Medium 2025-07-22
CVE-2025-7766 Lantronix Provisioning Manager 代码问题漏洞 — Provisioning Manager CWE-611 8.0 High 2025-07-22
CVE-2025-54137 HAXcms with nodejs backend 安全漏洞 — issues CWE-1392 7.3 High 2025-07-22
CVE-2025-7724 VIGI NVR1104H-4P V1 1.1.5 Build 250518和VIGI NVR2016H-16MP V2 1.3.1 Build 250407 操作系统命令注入漏洞 — VIGI NVR1104H-4P V1 CWE-78 9.8 - 2025-07-22
CVE-2025-6523 Devolutions Server 安全漏洞 — Server CWE-1391 9.1 - 2025-07-22
CVE-2025-34140 ETQ Reliance 安全漏洞 — Reliance CG (legacy) CWE-639 8.7 High 2025-07-22
CVE-2025-6187 WordPress plugin bSecure 安全漏洞 — bSecure – Your Universal Checkout CWE-862 9.8 Critical 2025-07-22
CVE-2025-7685 WordPress plugin Like & Share My Site 跨站请求伪造漏洞 — Like & Share My Site CWE-352 6.1 Medium 2025-07-22
CVE-2025-6082 WordPress plugin Birth Chart Compatibility 信息泄露漏洞 — Birth Chart Compatibility CWE-200 5.3 Medium 2025-07-22
CVE-2025-7692 WordPress plugin Orion Login with SMS 安全漏洞 — Orion Login with SMS CWE-288 8.1 High 2025-07-22
CVE-2025-7687 WordPress plugin Latest Post Accordian Slider 跨站请求伪造漏洞 — Latest Post Accordian Slider CWE-352 6.1 Medium 2025-07-22
CVE-2025-7645 WordPress plugin Extensions For CF7 路径遍历漏洞 — Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) CWE-22 8.1 High 2025-07-22
CVE-2012-10020 WordPress plugin FoxyPress 代码问题漏洞 — FoxyPress CWE-434 9.8 Critical 2025-07-22
CVE-2015-10137 WordPress plugin Website Contact Form With File Upload 代码问题漏洞 — Website Contact Form With File Upload CWE-434 9.8 Critical 2025-07-22
CVE-2025-54122 Manager-io 代码问题漏洞 — Manager CWE-918 10.0 Critical 2025-07-21
CVE-2025-52575 EspoCRM 注入漏洞 — espocrm CWE-90 6.5 Medium 2025-07-21
CVE-2025-54082 Marshmallow Packages Laravel Nova Tiptap Editor Field 代码问题漏洞 — nova-tiptap CWE-434 8.6 - 2025-07-21
CVE-2025-7382 Sophos Firewall 安全漏洞 — Sophos Firewall CWE-78 8.8 High 2025-07-21
CVE-2025-6704 Sophos Firewall 安全漏洞 — Sophos Firewall CWE-78 9.8 Critical 2025-07-21
CVE-2025-41679 MB Connect Line mbNET.mini 缓冲区错误漏洞 — mbNET.mini CWE-787 5.3 Medium 2025-07-21
CVE-2025-7369 WordPress plugin Shortcodes Ultimate 跨站请求伪造漏洞 — WP Shortcodes Plugin — Shortcodes Ultimate CWE-352 6.1 Medium 2025-07-21
CVE-2025-7920 Simopro Technology WinMatrix3 安全漏洞 — WinMatrix3 Web package CWE-79 6.1 Medium 2025-07-21
CVE-2025-7343 Digiwin SFT SQL注入漏洞 — SFT CWE-89 9.8 Critical 2025-07-21
CVE-2025-7921 Askey RTF8207w和Askey RTF8217 安全漏洞 — RTF8207w CWE-121 9.8 Critical 2025-07-21
CVE-2025-7919 Simopro WinMatrix Web version 安全漏洞 — WinMatrix3 Web package CWE-200 6.5 Medium 2025-07-21
CVE-2025-7918 Simopro Technology WinMatrix3 安全漏洞 — WinMatrix3 Web package CWE-89 9.8 Critical 2025-07-21
CVE-2025-7916 Simopro Technology WinMatrix3 安全漏洞 — WinMatrix3 CWE-502 9.8 Critical 2025-07-21
CVE-2025-36846 Eveo URVE Web Manager 安全漏洞 — n/a 9.8 - 2025-07-21
CVE-2025-46120 CommScope Ruckus Unleashed和CommScope Ruckus ZoneDirector 安全漏洞 — n/a 9.8 - 2025-07-21
CVE-2025-46121 CommScope Ruckus Unleashed 安全漏洞 — n/a 7.4 - 2025-07-21

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24864 条 CVE 漏洞。