access:pre-auth 类型相关 24863 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-47889 | Jenkins plugin WSO2 Oauth 安全漏洞 — Jenkins WSO2 Oauth Plugin | 9.8AI | Critical AI | 2025-05-14 |
| CVE-2025-0132 | Palo Alto Networks Cortex XDR Broker VM 安全漏洞 — Cortex XDR Broker VM CWE-306 | 5.3AI | Medium AI | 2025-05-14 |
| CVE-2025-0130 | Palo Alto Networks PAN-OS 安全漏洞 — Cloud NGFW CWE-754 | 7.5AI | High AI | 2025-05-14 |
| CVE-2025-40595 | SonicWALL SMA1000 安全漏洞 — SMA1000 CWE-918 | 9.1AI | Critical AI | 2025-05-14 |
| CVE-2025-47781 | Rallly 安全漏洞 — rallly CWE-331 | 9.8 | Critical | 2025-05-14 |
| CVE-2025-3769 | WordPress plugin LatePoint 安全漏洞 — LatePoint – Calendar Booking Plugin for Appointments and Events CWE-639 | 5.3 | Medium | 2025-05-14 |
| CVE-2025-47292 | Cap Collectif 代码问题漏洞 — cap-collectif CWE-502 | 9.8AI | Critical AI | 2025-05-14 |
| CVE-2025-2875 | Schneider Electric多款产品 安全漏洞 — Modicon Controllers M241 / M251 CWE-610 | 7.5 | High | 2025-05-14 |
| CVE-2024-8988 | WordPress plugin PeepSo Core File Uploads 安全漏洞 — PeepSo Core: File Uploads CWE-639 | 5.3 | Medium | 2025-05-14 |
| CVE-2025-3623 | WordPress plugin Uncanny Automator 代码问题漏洞 — Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin CWE-502 | 9.1 | Critical | 2025-05-14 |
| CVE-2025-22892 | Intel OpenVINO model server 资源管理错误漏洞 — OpenVINO™ model server software maintained by Intel(R) | 6.5 | Medium | 2025-05-13 |
| CVE-2025-22844 | Intel Tiber Edge Platform Edge Orchestrator 访问控制错误漏洞 — Edge Orchestrator software for Intel(R) Tiber™ Edge Platform | 4.3 | Medium | 2025-05-13 |
| CVE-2025-20076 | Intel Tiber Edge Platform Edge Orchestrator 访问控制错误漏洞 — Edge Orchestrator software for Intel(R) Tiber™ Edge Platform | 5.0 | Medium | 2025-05-13 |
| CVE-2025-20062 | Intel PROSet/Wireless WiFi 资源管理错误漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 6.1 | Medium | 2025-05-13 |
| CVE-2025-20047 | Intel Core Ultra Processors 安全漏洞 — Intel(R) Core™ Ultra Processors | 5.7 | Medium | 2025-05-13 |
| CVE-2025-20046 | Intel PROSet/Wireless Software 资源管理错误漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 8.0 | High | 2025-05-13 |
| CVE-2025-20039 | Intel PROSet/Wireless WiFi 竞争条件问题漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 6.6 | Medium | 2025-05-13 |
| CVE-2025-20026 | Intel PROSet/Wireless Software 缓冲区错误漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 6.1 | Medium | 2025-05-13 |
| CVE-2025-20012 | Intel Core Ultra Processors 安全漏洞 — Intel(R) Core™ Ultra Processors | 4.9 | Medium | 2025-05-13 |
| CVE-2025-20006 | Intel PROSet/Wireless WiFi 资源管理错误漏洞 — Intel(R) PROSet/Wireless WiFi Software for Windows | 7.4 | High | 2025-05-13 |
| CVE-2025-4660 | ForeScout SecureConnector 安全漏洞 — SecureConnector CWE-276 | 9.8AI | Critical AI | 2025-05-13 |
| CVE-2025-22462 | Ivanti Neurons for ITSM 安全漏洞 — Neurons for ITSM (on-prem) CWE-288 | 9.8 | Critical | 2025-05-13 |
| CVE-2025-32756 | Fortinet多款产品 安全漏洞 — FortiNDR CWE-121 | 9.6 | Critical | 2025-05-13 |
| CVE-2025-22859 | Fortinet FortiClientEMS 安全漏洞 — FortiClientEMS CWE-23 | 5.0 | Medium | 2025-05-13 |
| CVE-2025-40578 | Siemens SCALANCE LPE9403 缓冲区错误漏洞 — SCALANCE LPE9403 CWE-125 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-40577 | Siemens SCALANCE LPE9403 缓冲区错误漏洞 — SCALANCE LPE9403 CWE-125 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-40576 | Siemens SCALANCE LPE9403 代码问题漏洞 — SCALANCE LPE9403 CWE-476 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-40575 | Siemens SCALANCE LPE9403 安全漏洞 — SCALANCE LPE9403 CWE-457 | 4.3 | Medium | 2025-05-13 |
| CVE-2025-40566 | Siemens SIMATIC PCS neo 代码问题漏洞 — SIMATIC PCS neo V4.1 CWE-613 | 8.8 | High | 2025-05-13 |
| CVE-2025-30176 | Siemens多款产品 缓冲区错误漏洞 — SIMATIC PCS neo V4.1 CWE-125 | 7.5 | High | 2025-05-13 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24863 条 CVE 漏洞。