access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-30728 | Oracle E-Business Suite 安全漏洞 — Oracle Configurator | 7.5 | High | 2025-04-15 |
| CVE-2025-30724 | Oracle Analytics 安全漏洞 — Oracle BI Publisher | 7.5 | High | 2025-04-15 |
| CVE-2025-30720 | Oracle Configurator 安全漏洞 — Oracle Configurator | 6.1 | Medium | 2025-04-15 |
| CVE-2025-30716 | Oracle E-Business Suite 安全漏洞 — Oracle Common Applications | 7.5 | High | 2025-04-15 |
| CVE-2025-30707 | Oracle E-Business Suite 安全漏洞 — Oracle iStore | 7.5 | High | 2025-04-15 |
| CVE-2025-30708 | Oracle E-Business Suite 安全漏洞 — Oracle User Management | 7.5 | High | 2025-04-15 |
| CVE-2025-30709 | Oracle JD Edwards Products 安全漏洞 — JD Edwards EnterpriseOne Tools | 6.1 | Medium | 2025-04-15 |
| CVE-2025-30698 | Oracle Java SE 安全漏洞 — Oracle Java SE | 5.6 | Medium | 2025-04-15 |
| CVE-2025-30691 | Oracle Java SE和Oracle GraalVM 安全漏洞 — Oracle Java SE | 4.8 | Medium | 2025-04-15 |
| CVE-2025-21587 | Oracle Java SE 安全漏洞 — Oracle Java SE | 7.4 | High | 2025-04-15 |
| CVE-2025-21582 | Oracle E-Business Suite 安全漏洞 — Oracle CRM Technical Foundation | 6.1 | Medium | 2025-04-15 |
| CVE-2025-31941 | Growatt Cloud Applications 安全漏洞 — Cloud portal CWE-639 | 5.3 | Medium | 2025-04-15 |
| CVE-2025-31357 | Growatt Cloud Applications 安全漏洞 — Cloud portal CWE-639 | 5.3 | Medium | 2025-04-15 |
| CVE-2025-31933 | Growatt Cloud Applications 安全漏洞 — Cloud portal CWE-639 | 5.3 | Medium | 2025-04-15 |
| CVE-2025-32012 | Jellyfin 安全漏洞 — jellyfin CWE-290 | 6.5AI | Medium AI | 2025-04-15 |
| CVE-2025-28137 | TOTOLINK A810R 安全漏洞 — n/a | 8.1AI | High AI | 2025-04-15 |
| CVE-2025-32993 | Vision Helpdesk 安全漏洞 — Vision Helpdesk CWE-89 | 6.5 | Medium | 2025-04-15 |
| CVE-2021-27289 | ZigBee 安全漏洞 — n/a | 8.1AI | High AI | 2025-04-15 |
| CVE-2025-2572 | Progress Software WhatsUp Gold 授权问题漏洞 — WhatsUp Gold CWE-287 | 5.6 | Medium | 2025-04-14 |
| CVE-2025-22371 | SicommNet BASEC 安全漏洞 — BASEC CWE-89 | 9.8AI | Critical AI | 2025-04-14 |
| CVE-2025-2563 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership | 9.8AI | Critical AI | 2025-04-14 |
| CVE-2025-3572 | Intumit SmartRobot 代码问题漏洞 — SmartRobot CWE-918 | 7.5 | High | 2025-04-14 |
| CVE-2024-13338 | WordPress plugin Clearfy Cache 跨站请求伪造漏洞 — Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer CWE-352 | 5.3 | Medium | 2025-04-12 |
| CVE-2024-13337 | WordPress plugin Clearfy Cache 跨站请求伪造漏洞 — Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer CWE-352 | 4.3 | Medium | 2025-04-12 |
| CVE-2025-3282 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-639 | 5.3 | Medium | 2025-04-12 |
| CVE-2025-3292 | WordPress plugin User Registration & Membership 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-639 | 4.3 | Medium | 2025-04-12 |
| CVE-2025-2871 | WordPress plugin QuadMenu 跨站请求伪造漏洞 — QuadMenu – Mega Menu CWE-352 | 4.3 | Medium | 2025-04-12 |
| CVE-2025-2841 | WordPress plugin Cart66 Cloud 信息泄露漏洞 — Cart66 Cloud :: WordPress Ecommerce The Easy Way CWE-200 | 5.3 | Medium | 2025-04-12 |
| CVE-2025-2881 | WordPress plugin Developer Toolbar 信息泄露漏洞 — Developer Toolbar CWE-200 | 5.3 | Medium | 2025-04-12 |
| CVE-2025-2269 | WordPress plugin Photo Gallery by 10Web 跨站脚本漏洞 — Photo Gallery by 10Web – Mobile-Friendly Image Gallery CWE-79 | 6.1 | Medium | 2025-04-11 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。