access:pre-auth 类型相关 24850 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0215 | WordPress plugin UpdraftPlus - Backup/Restore 跨站脚本漏洞 — UpdraftPlus: WP Backup & Migration Plugin CWE-79 | 6.1 | Medium | 2025-01-15 |
| CVE-2024-8603 | B&R Automation Runtime 加密问题漏洞 — Automation Runtime CWE-327 | 7.5 | High | 2025-01-15 |
| CVE-2024-11322 | CyberPower PowerPanel Business 授权问题漏洞 — PowerPanel Business CWE-287 | 7.5 | High | 2025-01-15 |
| CVE-2024-12403 | WordPress plugin Image Gallery – Responsive Photo Gallery 跨站脚本漏洞 — Awesome Responsive Photo Gallery – Image & Video Lightbox Gallery CWE-79 | 6.1 | Medium | 2025-01-15 |
| CVE-2024-12423 | WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞 — Business Essentials for Contact Form 7 CWE-79 | 6.1 | Medium | 2025-01-15 |
| CVE-2024-9636 | WordPress plugin Post Grid and Gutenberg Blocks 安全漏洞 — Post Grid and Gutenberg Blocks – ComboBlocks CWE-269 | 9.8 | Critical | 2025-01-15 |
| CVE-2024-4227 | Genivia gSOAP 安全漏洞 — gSOAP CWE-834 | 7.5 | High | 2025-01-15 |
| CVE-2024-13334 | WordPress plugin Car Demon 跨站脚本漏洞 — Car Demon CWE-79 | 6.1 | Medium | 2025-01-15 |
| CVE-2025-22964 | DDSN Interactive cm3 Acora CMS 安全漏洞 — n/a | 9.1 | - | 2025-01-15 |
| CVE-2024-57727 | SimpleHelp 安全漏洞 — n/a | 7.5 | - | 2025-01-15 |
| CVE-2024-48858 | QNX Software Development Platform 安全漏洞 — QNX Software Development Platform (SDP) CWE-1287 | 7.5 | High | 2025-01-14 |
| CVE-2024-48857 | QNX Software Development Platform 代码问题漏洞 — QNX Software Development Platform (SDP) CWE-476 | 7.5 | High | 2025-01-14 |
| CVE-2024-48856 | QNX Software Development Platform 缓冲区错误漏洞 — QNX Software Development Platform (SDP) CWE-787 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-49375 | Rasa 安全漏洞 — rasa-pro-security-advisories CWE-94 | 9.1 | Critical | 2025-01-14 |
| CVE-2024-48855 | QNX Software Development Platform 缓冲区错误漏洞 — QNX Software Development Platform (SDP) CWE-125 | 5.3 | Medium | 2025-01-14 |
| CVE-2024-48854 | QNX Software Development Platform 安全漏洞 — QNX Software Development Platform (SDP) CWE-193 | 5.3 | Medium | 2025-01-14 |
| CVE-2024-13163 | Ivanti EPM 代码问题漏洞 — Endpoint Manager CWE-502 | 7.8 | High | 2025-01-14 |
| CVE-2024-13165 | Ivanti EPM 缓冲区错误漏洞 — Endpoint Manager CWE-787 | 7.5 | High | 2025-01-14 |
| CVE-2024-13166 | Ivanti EPM 缓冲区错误漏洞 — Endpoint Manager CWE-787 | 7.5 | High | 2025-01-14 |
| CVE-2024-13167 | Ivanti EPM 缓冲区错误漏洞 — Endpoint Manager CWE-787 | 7.5 | High | 2025-01-14 |
| CVE-2024-13168 | Ivanti EPM 缓冲区错误漏洞 — Endpoint Manager CWE-787 | 7.5 | High | 2025-01-14 |
| CVE-2024-13170 | Ivanti EPM 缓冲区错误漏洞 — Endpoint Manager CWE-787 | 7.5 | High | 2025-01-14 |
| CVE-2024-13171 | Ivanti EPM 代码问题漏洞 — Endpoint Manager CWE-434 | 7.8 | High | 2025-01-14 |
| CVE-2024-13172 | Ivanti EPM 数据伪造问题漏洞 — Endpoint Manager CWE-347 | 7.8 | High | 2025-01-14 |
| CVE-2024-13159 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-36 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-13160 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-36 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-13161 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-36 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-10811 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-36 | 9.8 | Critical | 2025-01-14 |
| CVE-2024-13181 | Ivanti Avalanche 安全漏洞 — Avalanche CWE-22 | 7.3 | High | 2025-01-14 |
| CVE-2024-13180 | Ivanti Avalanche 路径遍历漏洞 — Avalanche CWE-22 | 7.5 | High | 2025-01-14 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24850 条 CVE 漏洞。