access:pre-auth 类型相关 24810 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-8756 | WordPress plugin Quform 信息泄露漏洞 — Quform - WordPress Form Builder CWE-200 | 5.3 | Medium | 2024-11-09 |
| CVE-2024-10470 | WordPress plugin WPLMS Learning Management System 路径遍历漏洞 — WPLMS Learning Management System for WordPress, WordPress LMS CWE-22 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10627 | WordPress plugin WooCommerce Support Ticket System 代码问题漏洞 — WooCommerce Support Ticket System CWE-434 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10625 | WordPress plugin WooCommerce Support Ticket System 路径遍历漏洞 — WooCommerce Support Ticket System CWE-22 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-9226 | WordPress plugin Landing Page Cat 跨站脚本漏洞 — Landing Page Cat – Coming Soon & Maintenance Pages CWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10294 | WordPress plugin CE21 Suite 安全漏洞 — CE21 Suite CWE-862 | 6.5 | Medium | 2024-11-09 |
| CVE-2024-10285 | WordPress plugin CE21 Suite 信息泄露漏洞 — CE21 Suite CWE-200 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10284 | WordPress plugin CE21 Suite 安全漏洞 — CE21 Suite CWE-288 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10586 | WordPress plugin Debug Tool 安全漏洞 — Debug Tool CWE-862 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10588 | WordPress plugin Debug Tool 安全漏洞 — Debug Tool CWE-862 | 4.3 | Medium | 2024-11-09 |
| CVE-2024-9262 | WordPress plugin User Meta 安全漏洞 — User Meta – User Profile Builder and User management plugin CWE-639 | 6.5 | Medium | 2024-11-09 |
| CVE-2024-45764 | Dell Enterprise SONiC OS 安全漏洞 — Enterprise SONiC OS CWE-304 | 9.0 | Critical | 2024-11-08 |
| CVE-2024-50589 | HASOMED Elefant 安全漏洞 — Elefant CWE-306 | 5.7 | - | 2024-11-08 |
| CVE-2024-50588 | HASOMED Elefant 安全漏洞 — Elefant CWE-1393 | 8.8 | - | 2024-11-08 |
| CVE-2024-7982 | WordPress plugin Registrations for the Events Calendar 安全漏洞 — Registrations for the Events Calendar | 6.1 | - | 2024-11-08 |
| CVE-2023-27195 | Trimble TM4Web 权限许可和访问控制问题漏洞 — n/a | 9.8AI | Critical AI | 2024-11-08 |
| CVE-2019-20457 | Brother MFC-J491DW 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-11-07 |
| CVE-2020-11926 | Luvion Grand Elite 3 Connect 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-11-07 |
| CVE-2024-48950 | Logpoint 安全漏洞 — n/a | 8.1AI | High AI | 2024-11-07 |
| CVE-2024-48952 | Logpoint 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-11-07 |
| CVE-2024-48953 | Logpoint 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-11-07 |
| CVE-2024-20418 | Cisco Unified Industrial Wireless Software 命令注入漏洞 — Cisco Aironet Access Point Software (IOS XE Controller) CWE-77 | 10.0 | Critical | 2024-11-06 |
| CVE-2024-20538 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 6.1 | Medium | 2024-11-06 |
| CVE-2024-20530 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 6.1 | Medium | 2024-11-06 |
| CVE-2024-20525 | Cisco Identity Services Engine 跨站脚本漏洞 — Cisco Identity Services Engine Software CWE-79 | 6.1 | Medium | 2024-11-06 |
| CVE-2024-20511 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | Medium | 2024-11-06 |
| CVE-2024-20484 | Cisco Enterprise Chat and Email 输入验证错误漏洞 — Cisco Enterprise Chat and Email CWE-20 | 7.5 | High | 2024-11-06 |
| CVE-2024-20445 | Cisco IP Phone 信息泄露漏洞 — Cisco Session Initiation Protocol (SIP) Software CWE-200 | 5.3 | Medium | 2024-11-06 |
| CVE-2024-20371 | Cisco Nexus 3500 Series Switches 权限许可和访问控制问题漏洞 — Cisco Nexus 3550 System Software CWE-264 | 5.3 | Medium | 2024-11-06 |
| CVE-2024-35146 | IBM Maximo Application Suite 跨站脚本漏洞 — Maximo Application Suite CWE-79 | 5.4 | Medium | 2024-11-06 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24810 条 CVE 漏洞。