目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24850

access:pre-auth 类型相关 24850 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-12412 WordPress plugin WpRently 跨站脚本漏洞 — Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment CWE-79 6.1 Medium 2025-01-11
CVE-2025-0107 Palo Alto Networks Expedition 安全漏洞 — Cloud NGFW CWE-78 10.0 - 2025-01-11
CVE-2025-0106 Palo Alto Networks Expedition 安全漏洞 — Cloud NGFW CWE-155 5.8 - 2025-01-11
CVE-2025-0105 Palo Alto Networks Expedition 安全漏洞 — Cloud NGFW CWE-73 10.0 - 2025-01-11
CVE-2024-11327 WordPress plugin ClickWhale 跨站脚本漏洞 — ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages CWE-79 6.1 Medium 2025-01-11
CVE-2024-12404 WordPress plugin CF Internal Link Shortcode SQL注入漏洞 — CF Internal Link Shortcode CWE-89 7.5 High 2025-01-11
CVE-2024-12847 NETGEAR DGN1000 安全漏洞 — DGN1000 CWE-78 9.8 Critical 2025-01-10
CVE-2024-13318 WordPress plugin Essential WP Real Estate 安全漏洞 — Essential WP Real Estate CWE-463 5.3 Medium 2025-01-10
CVE-2024-10215 WordPress plugin WPBookit 安全漏洞 — WPBookit CWE-639 9.8 Critical 2025-01-09
CVE-2025-21598 Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 缓冲区错误漏洞 — Junos OS CWE-125 7.5 High 2025-01-09
CVE-2025-21600 Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 缓冲区错误漏洞 — Junos OS CWE-125 6.5 Medium 2025-01-09
CVE-2025-21602 Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS CWE-755 6.5 Medium 2025-01-09
CVE-2025-21599 Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS Evolved CWE-401 7.5 High 2025-01-09
CVE-2025-21593 Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS CWE-664 6.5 Medium 2025-01-09
CVE-2024-11642 WordPress plugin Post Grid Master 路径遍历漏洞 — Post Grid Master — Post Grids & AJAX Filters CWE-22 9.8 Critical 2025-01-09
CVE-2024-12394 WordPress plugin Action Network 跨站请求伪造漏洞 — Action Network CWE-79 6.1 Medium 2025-01-09
CVE-2024-12542 WordPress plugin linkID 安全漏洞 — linkID CWE-862 8.6 High 2025-01-09
CVE-2024-11686 WordPress plugin WhatsApp click to chat 跨站脚本漏洞 — WhatsApp 🚀 click to chat CWE-79 6.1 Medium 2025-01-09
CVE-2024-11815 WordPress plugin Pósturinn Shipping with WooCommerce 跨站脚本漏洞 — Pósturinn\'s Shipping with WooCommerce CWE-79 6.1 Medium 2025-01-09
CVE-2024-11328 WordPress plugin CLUEVO LMS, E-Learning Platform 跨站脚本漏洞 — CLUEVO LMS, E-Learning Platform CWE-79 6.1 Medium 2025-01-09
CVE-2024-12218 WordPress plugin Woocommerce check pincode/zipcode for shipping 跨站请求伪造漏洞 — Woocommerce check pincode/zipcode for shipping CWE-352 6.1 Medium 2025-01-09
CVE-2024-12605 WordPress plugin AI Scribe 安全漏洞 — Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic CWE-352 4.3 Medium 2025-01-09
CVE-2024-12206 WordPress plugin Pearl 跨站请求伪造漏洞 — Pearl – Header Builder CWE-352 4.3 Medium 2025-01-09
CVE-2024-12222 WordPress plugin Deliver via Shipos for WooCommerce 跨站脚本漏洞 — Deliver via Shipos for WooCommerce CWE-79 6.1 Medium 2025-01-09
CVE-2024-12285 WordPress plugin SEMA API 跨站脚本漏洞 — SEMA API CWE-79 6.1 Medium 2025-01-09
CVE-2024-12330 WordPress plugin WP Database Backup 安全漏洞 — WP Database Backup – Unlimited Database & Files Backup by Backup for WP CWE-530 7.5 High 2025-01-09
CVE-2024-12122 WordPress plugin ResAds 跨站脚本漏洞 — ResAds CWE-79 6.1 Medium 2025-01-09
CVE-2023-28354 Opsview Monitor Agent 安全漏洞 — n/a 9.8 - 2025-01-09
CVE-2025-0282 Ivanti多款产品 安全漏洞 — Connect Secure CWE-121 9.0 Critical 2025-01-08
CVE-2024-54010 Hewlett Packard Enterprise CX 10000 安全漏洞 — AOS-CX 3.4 Low 2025-01-08

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24850 条 CVE 漏洞。