access:pre-auth 类型相关 24808 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-9607 | WordPress plugin 10Web Social Post Feed 跨站脚本漏洞 — 10Web Social Post Feed CWE-79 | 6.1 | Medium | 2024-10-25 |
| CVE-2024-9302 | WordPress plugin App Builder 授权问题漏洞 — App Builder – Create Native Android & iOS Apps On The Flight CWE-640 | 8.1 | High | 2024-10-25 |
| CVE-2024-9488 | WordPress plugin Comments – wpDiscuz 安全漏洞 — Comments – wpDiscuz CWE-288 | 9.8 | Critical | 2024-10-25 |
| CVE-2024-9686 | WordPress plugin Order Notification for Telegram 安全漏洞 — Order Notification for Telegram CWE-862 | 5.3 | Medium | 2024-10-25 |
| CVE-2024-48932 | ZimaOS 访问控制错误漏洞 — ZimaOS CWE-284 | 5.3 | Medium | 2024-10-24 |
| CVE-2024-9692 | VIMESA VHF/FM Transmitter Blue Plus 访问控制错误漏洞 — VHF/FM Transmitter Blue Plus CWE-284 | 7.5AI | High AI | 2024-10-24 |
| CVE-2024-9214 | WordPress plugin Extra Product Options Builder for WooCommerce 跨站脚本漏洞 — Extra Product Options Builder for WooCommerce CWE-79 | 6.1 | Medium | 2024-10-24 |
| CVE-2024-8717 | WordPress plugin DearFlip 跨站脚本漏洞 — Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer CWE-79 | 6.1 | Medium | 2024-10-24 |
| CVE-2024-6049 | Lawo AG vsm LTC Time Sync 安全漏洞 — vsm LTC Time Sync (vTimeSync) CWE-32 | 7.5AI | High AI | 2024-10-24 |
| CVE-2024-9943 | WordPress plugin MultiVendorX 跨站请求伪造漏洞 — MultiVendorX – WooCommerce Multivendor Marketplace Solutions CWE-352 | 6.3 | Medium | 2024-10-24 |
| CVE-2024-9864 | WordPress plugin EventPrime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-79 | 6.1 | Medium | 2024-10-24 |
| CVE-2024-9865 | WordPress plugin EventPrime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-79 | 6.1 | Medium | 2024-10-24 |
| CVE-2024-9374 | WordPress plugin Terms descriptions 安全漏洞 — Terms descriptions CWE-79 | 6.1 | Medium | 2024-10-24 |
| CVE-2024-41617 | Money Manager EX WebApp 安全漏洞 — n/a | 8.8AI | High AI | 2024-10-24 |
| CVE-2024-48442 | Tuoshi NR500-EA 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-10-24 |
| CVE-2024-20526 | Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-400 | 5.3 | Medium | 2024-10-23 |
| CVE-2024-20495 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-20 | 8.6 | High | 2024-10-23 |
| CVE-2024-20494 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-1287 | 8.6 | High | 2024-10-23 |
| CVE-2024-20493 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-772 | 5.3 | Medium | 2024-10-23 |
| CVE-2024-20481 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-772 | 5.8 | Medium | 2024-10-23 |
| CVE-2024-20474 | Cisco Secure Client 安全漏洞 — Cisco Secure Client CWE-191 | 4.3 | Medium | 2024-10-23 |
| CVE-2024-20431 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-229 | 5.8 | Medium | 2024-10-23 |
| CVE-2024-20426 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-476 | 8.6 | High | 2024-10-23 |
| CVE-2024-20415 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-79 | 4.8 | Medium | 2024-10-23 |
| CVE-2024-20412 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-259 | 9.3 | Critical | 2024-10-23 |
| CVE-2024-20410 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-79 | 5.4 | Medium | 2024-10-23 |
| CVE-2024-20409 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-79 | 4.8 | Medium | 2024-10-23 |
| CVE-2024-20407 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-399 | 5.8 | Medium | 2024-10-23 |
| CVE-2024-20402 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-788 | 8.6 | High | 2024-10-23 |
| CVE-2024-20388 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-202 | 5.3 | Medium | 2024-10-23 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24808 条 CVE 漏洞。