目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24857

access:pre-auth 类型相关 24857 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-53648 Siemens SIPROTEC 5 安全漏洞 — SIPROTEC 5 6MD84 (CP300) CWE-489 6.8 Medium 2025-02-11
CVE-2024-45386 Siemens SIMATIC PCS和Siemens TIA Administrator 代码问题漏洞 — SIMATIC PCS neo V4.0 CWE-613 8.8 High 2025-02-11
CVE-2024-23814 Siemens SCALANCE Series 资源管理错误漏洞 — SIDOOR ATD430W CWE-400 5.3 Medium 2025-02-11
CVE-2023-37482 Siemens SIMATIC S7-1200和SIMATIC S7-1500 安全漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-203 5.3 Medium 2025-02-11
CVE-2025-0589 Octopus Server 安全漏洞 — Octopus Server 5.3 - 2025-02-11
CVE-2025-0181 WordPress plugin WP Foodbakery 安全漏洞 — WP Foodbakery CWE-288 9.8 Critical 2025-02-11
CVE-2025-0180 WordPress plugin WP Foodbakery 安全漏洞 — WP Foodbakery CWE-269 9.8 Critical 2025-02-11
CVE-2025-1145 NetVision Information ISOinsight 跨站脚本漏洞 — ISOinsight CWE-79 6.1 Medium 2025-02-11
CVE-2025-1144 Quanxun School Affairs System 安全漏洞 — School Affairs System CWE-497 9.8 Critical 2025-02-11
CVE-2025-25243 SAP Supplier Relationship Management 路径遍历漏洞 — SAP Supplier Relationship Management (Master Data Management Catalog) CWE-22 8.6 High 2025-02-11
CVE-2025-24870 SAP GUI 安全漏洞 — SAP GUI for Windows CWE-921 6.0 Medium 2025-02-11
CVE-2025-24868 SAP HANA 输入验证错误漏洞 — SAP HANA extended application services, advanced model (User Account and Authentication Services) CWE-601 7.1 High 2025-02-11
CVE-2025-24867 SAP BusinessObjects BI LaunchPad 跨站脚本漏洞 — SAP BusinessObjects Platform (BI Launchpad) CWE-79 6.1 Medium 2025-02-11
CVE-2025-23193 SAP NetWeaver Server ABAP 安全漏洞 — SAP NetWeaver Server ABAP CWE-204 5.3 Medium 2025-02-11
CVE-2025-23187 SAP NetWeaver和SAP ABAP Platform 安全漏洞 — SAP NetWeaver and ABAP Platform (SDCCN) CWE-862 5.3 Medium 2025-02-11
CVE-2024-10649 OpenUI 访问控制错误漏洞 — wandb/openui CWE-306 10.0 - 2025-02-10
CVE-2024-13010 WordPress plugin WP Foodbakery 跨站脚本漏洞 — WP Foodbakery CWE-79 6.1 Medium 2025-02-10
CVE-2024-13011 WordPress plugin WP Foodbakery 代码问题漏洞 — WP Foodbakery CWE-434 9.8 Critical 2025-02-10
CVE-2024-46429 Tenda W18E 信任管理问题漏洞 — n/a 9.8 - 2025-02-10
CVE-2024-46430 Tenda W18E 访问控制错误漏洞 — n/a 9.8 - 2025-02-10
CVE-2024-46433 Tenda W18E 信任管理问题漏洞 — n/a 9.8 - 2025-02-10
CVE-2024-46436 Tenda W18E 信任管理问题漏洞 — n/a 9.8 - 2025-02-10
CVE-2024-46437 Tenda W18E 信息泄露漏洞 — n/a 9.8 - 2025-02-10
CVE-2024-13440 WordPress plugin Super Store Finder SQL注入漏洞 — Super Store Finder CWE-89 8.2 High 2025-02-09
CVE-2025-0316 WordPress plugin WP Directorybox Manager 安全漏洞 — WP Directorybox Manager CWE-288 9.8 Critical 2025-02-08
CVE-2024-7419 WordPress plugin WP ALL Export Pro 代码注入漏洞 — WP All Export Pro CWE-94 8.3 High 2025-02-07
CVE-2024-9661 WordPress plugin WP All Import Pro 跨站请求伪造漏洞 — WP All Import Pro CWE-352 4.3 Medium 2025-02-07
CVE-2025-1108 Janto Ticketing 数据伪造问题漏洞 — Janto CWE-345 8.6 High 2025-02-07
CVE-2025-1107 Janto Ticketing 安全漏洞 — Janto CWE-620 9.9 Critical 2025-02-07
CVE-2025-1077 IBL Software Engineering Visual Weather 安全漏洞 — Visual Weather CWE-502 9.8 - 2025-02-07

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24857 条 CVE 漏洞。