目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24863

access:pre-auth 类型相关 24863 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-32119 Fortinet FortiClientEMS 安全漏洞 — FortiClientEMS CWE-1390 4.6 Medium 2025-06-10
CVE-2025-22251 Fortinet FortiOS 安全漏洞 — FortiOS CWE-923 3.0 Low 2025-06-10
CVE-2025-48879 OctoPrint 安全漏洞 — OctoPrint CWE-140 6.5 Medium 2025-06-10
CVE-2025-41657 AUMA PROFOX和AUMA AC1.2 安全漏洞 — AC1.2 CWE-207 4.3 Medium 2025-06-10
CVE-2025-4840 WordPress plugin inprosysmedia-likes-dislikes-post 安全漏洞 — inprosysmedia-likes-dislikes-post 9.8AI Critical AI 2025-06-10
CVE-2025-5925 WordPress plugin Bunnys Print CSS 跨站请求伪造漏洞 — Bunny’s Print CSS CWE-352 4.3 Medium 2025-06-10
CVE-2025-42988 SAP Business Objects Business Intelligence Platform 代码问题漏洞 — SAP Business Objects Business Intelligence Platform CWE-918 3.7 Low 2025-06-10
CVE-2025-31325 SAP NetWeaver 跨站脚本漏洞 — SAP NetWeaver (ABAP Keyword Documentation) CWE-79 5.8 Medium 2025-06-10
CVE-2025-23192 SAP BusinessObjects Business Intelligence 跨站脚本漏洞 — SAP BusinessObjects Business Intelligence (BI Workspace) CWE-79 8.2 High 2025-06-10
CVE-2024-57186 erxes 安全漏洞 — n/a 7.5AI High AI 2025-06-10
CVE-2025-30507 CyberData 011209 Intercom SQL注入漏洞 — 011209 SIP Emergency Intercom CWE-89 5.3 Medium 2025-06-09
CVE-2025-26468 CyberData 011209 Intercom 访问控制错误漏洞 — 011209 SIP Emergency Intercom CWE-306 7.5 High 2025-06-09
CVE-2025-30184 CyberData 011209 Intercom 安全漏洞 — 011209 SIP Emergency Intercom CWE-288 9.8 Critical 2025-06-09
CVE-2025-5893 Honding Technology Smart Parking Management System 安全漏洞 — Smart Parking Management System CWE-497 9.8 Critical 2025-06-09
CVE-2025-3461 Quantenna Communications Quantenna Wi-Fi chipset 安全漏洞 — Quantenna Wi-Fi chipset CWE-306 9.1 Critical 2025-06-08
CVE-2025-5528 WordPress plugin Social Sharing Plugin 跨站脚本漏洞 — Social Sharing Plugin – Sassy Social Share CWE-79 6.1 Medium 2025-06-07
CVE-2025-5303 WordPress plugin LTL Freight Quotes – Day & Ross Edition和WordPress plugin LTL Freight Quotes – Daylight Edition 跨站脚本漏洞 — LTL Freight Quotes – Freightview Edition CWE-79 7.2 High 2025-06-07
CVE-2025-5814 WordPress plugin Profiler 安全漏洞 — Profiler – What Slowing Down Your WP CWE-862 5.3 Medium 2025-06-07
CVE-2025-49127 kafbat-ui 代码问题漏洞 — kafka-ui CWE-502 9.8AI Critical AI 2025-06-06
CVE-2025-47950 CoreDNS 安全漏洞 — coredns CWE-770 7.5 High 2025-06-06
CVE-2025-5486 WordPress plugin WP Email Debug 安全漏洞 — WP Email Debug CWE-862 9.8 Critical 2025-06-06
CVE-2025-2935 WordPress plugin Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms 跨站请求伪造漏洞 — Stop Spammers Classic CWE-352 5.4 Medium 2025-06-06
CVE-2025-4966 WordPress plugin WP Online Users Stats 跨站请求伪造漏洞 — WP Online Users Stats CWE-352 6.1 Medium 2025-06-06
CVE-2025-5019 WordPress plugin Hive Support 跨站请求伪造漏洞 — Hive Support | AI-Powered Help Desk, Live Chat and Chatbot CWE-352 5.4 Medium 2025-06-06
CVE-2025-5733 WordPress plugin Modern Events Calendar Lite 安全漏洞 — Modern Events Calendar Lite CWE-201 5.3 Medium 2025-06-06
CVE-2025-5701 WordPress plugin HyperComments 安全漏洞 — HyperComments CWE-862 8.8 High 2025-06-05
CVE-2025-20286 Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-259 9.9 Critical 2025-06-04
CVE-2025-20275 Cisco Unified Contact Center Express Editor 代码问题漏洞 — Cisco Unified Contact Center Express CWE-502 5.3 Medium 2025-06-04
CVE-2025-20273 Cisco Unified Intelligent Contact Management Enterprise 跨站脚本漏洞 — Cisco Unified Intelligent Contact Management Enterprise CWE-79 6.1 Medium 2025-06-04
CVE-2025-20163 Cisco Nexus Dashboard Fabric Controller 安全漏洞 — Cisco Data Center Network Manager CWE-322 8.7 High 2025-06-04

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24863 条 CVE 漏洞。