access:pre-auth 类型相关 24810 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-46891 | Siemens SINEC INS 资源管理错误漏洞 — SINEC INS CWE-400 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-44102 | Siemens PP TeleControl Server 代码问题漏洞 — PP TeleControl Server Basic 1000 to 5000 V3.1 CWE-502 | 10.0 | Critical | 2024-11-12 |
| CVE-2024-10245 | WordPress plugin Relais 2FA 安全漏洞 — Relais 2FA CWE-288 | 9.8 | Critical | 2024-11-12 |
| CVE-2024-9357 | WordPress plugin xili-tidy-tags 跨站脚本漏洞 — xili-tidy-tags CWE-79 | 6.1 | Medium | 2024-11-12 |
| CVE-2024-10685 | WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞 — Business Essentials for Contact Form 7 CWE-79 | 6.1 | Medium | 2024-11-12 |
| CVE-2024-47593 | SAP NetWeaver Application Server和SAP ABAP Platform 安全漏洞 — SAP NetWeaver Application Server ABAP | 4.3 | Medium | 2024-11-12 |
| CVE-2024-47592 | SAP NetWeaver AS 安全漏洞 — SAP NetWeaver Application Server Java (Logon Application) CWE-307 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-47590 | SAP Web Dispatcher 安全漏洞 — SAP Web Dispatcher CWE-791 | 8.8 | High | 2024-11-12 |
| CVE-2024-47586 | SAP NetWeaver Application Server和SAP ABAP Platform 代码问题漏洞 — SAP NetWeaver Application Server for ABAP and ABAP Platform CWE-476 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-52286 | Stirling-PDF 安全漏洞 — Stirling-PDF CWE-20 | 6.1AI | Medium AI | 2024-11-11 |
| CVE-2024-10314 | Perforce Helix Core 资源管理错误漏洞 — Helix Core CWE-400 | 7.5AI | High AI | 2024-11-11 |
| CVE-2024-10344 | Perforce Helix Core 资源管理错误漏洞 — Helix Core CWE-400 | 7.5AI | High AI | 2024-11-11 |
| CVE-2024-10345 | Perforce Helix Core 资源管理错误漏洞 — Helix Core CWE-400 | 7.5AI | High AI | 2024-11-11 |
| CVE-2024-11068 | D-Link DSL6740C 安全漏洞 — DSL6740C CWE-648 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11067 | D-Link DSL6740C 安全漏洞 — DSL6740C CWE-23 | 7.5 | High | 2024-11-11 |
| CVE-2024-11020 | Grand Vice info Webopac SQL注入漏洞 — Webopac7 CWE-89 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11019 | Grand Vice info Webopac 跨站脚本漏洞 — Webopac7 CWE-79 | 6.1 | Medium | 2024-11-11 |
| CVE-2024-11018 | Grand Vice info Webopac 代码问题漏洞 — Webopac CWE-434 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11016 | Grand Vice info Webopac SQL注入漏洞 — Webopac CWE-89 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-10958 | WordPress plugin The WP Photo Album Plus 代码注入漏洞 — WP Photo Album Plus CWE-94 | 7.3 | High | 2024-11-10 |
| CVE-2024-10265 | WordPress plugin Form Maker by 10Web 跨站脚本漏洞 — Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder CWE-79 | 6.1 | Medium | 2024-11-10 |
| CVE-2024-10837 | WordPress plugin SysBasics Customize My Account for WooCommerce 跨站脚本漏洞 — SysBasics Customize My Account for WooCommerce CWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10261 | WordPress plugin The Paid Membership Subscriptions 代码注入漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-94 | 7.3 | High | 2024-11-09 |
| CVE-2024-10640 | WordPress plugin The FOX 代码注入漏洞 — FOX – Currency Switcher Professional for WooCommerce CWE-94 | 7.3 | High | 2024-11-09 |
| CVE-2024-10508 | WordPress plugin RegistrationMagic 安全漏洞 — RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login CWE-230 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10801 | WordPress plugin WordPress User Extra Fields 代码问题漏洞 — WordPress User Extra Fields CWE-434 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10547 | WordPress plugin WP Membership 代码问题漏洞 — WP Membership CWE-434 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10871 | WordPress plugin Category Ajax Filter 安全漏洞 — Category AJAX Filter – Advanced Filter for Posts & Custom Post Types CWE-98 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10876 | WordPress plugin Charitable 跨站脚本漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More CWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10683 | WordPress plugin Contact Form 7 跨站脚本漏洞 — Contact Form 7 – PayPal & Stripe Add-on CWE-79 | 6.1 | Medium | 2024-11-09 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24810 条 CVE 漏洞。