access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-9353 | WordPress plugin Popularis Extra 跨站脚本漏洞 — Popularis Extra CWE-79 | 6.1 | Medium | 2024-10-04 |
| CVE-2024-9345 | WordPress plugin Product Delivery Date for WooCommerce 跨站脚本漏洞 — Product Delivery Date for WooCommerce – Lite CWE-79 | 6.1 | Medium | 2024-10-04 |
| CVE-2024-8802 | WordPress plugin Clio Grow 跨站脚本漏洞 — Clio Grow Form CWE-79 | 6.1 | Medium | 2024-10-04 |
| CVE-2023-26770 | Jordanknott Taskcafe 安全漏洞 — n/a | 7.5 | - | 2024-10-04 |
| CVE-2024-43699 | Delta Electronics DIAEnergie SQL注入漏洞 — DIAEnergie CWE-89 | 9.8 | Critical | 2024-10-03 |
| CVE-2024-41988 | TEM Opera Plus FM Family Transmitter 访问控制错误漏洞 — Opera Plus FM Family Transmitter CWE-306 | 9.8 | - | 2024-10-03 |
| CVE-2024-41163 | Veertu Anka Build 路径遍历漏洞 — Anka Build CWE-22 | 7.5 | High | 2024-10-03 |
| CVE-2024-39755 | Veertu Anka Build 安全漏洞 — Anka Build CWE-282 | 7.8 | High | 2024-10-03 |
| CVE-2024-41922 | Veertu Anka Build 路径遍历漏洞 — Anka Build CWE-22 | 7.5 | High | 2024-10-03 |
| CVE-2024-8352 | WordPress plugin Social Web Suite 路径遍历漏洞 — Social Web Suite – Social Media Auto Post, Social Media Auto Publish CWE-22 | 7.5 | High | 2024-10-03 |
| CVE-2024-41591 | DrayTek Vigor 3910 安全漏洞 — n/a | 6.1 | - | 2024-10-03 |
| CVE-2024-9441 | Nortek Control Linear eMerge E3-Series 安全漏洞 — eMerge e3-Series CWE-78 | 9.8 | Critical | 2024-10-02 |
| CVE-2024-20509 | Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-362 | 5.8 | Medium | 2024-10-02 |
| CVE-2024-20513 | Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-639 | 5.8 | Medium | 2024-10-02 |
| CVE-2024-20502 | Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-400 | 5.8 | Medium | 2024-10-02 |
| CVE-2024-20501 | Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-787 | 8.6 | High | 2024-10-02 |
| CVE-2024-20499 | Cisco Meraki Z Series Teleworker Gateway和Cisco Meraki MX 安全漏洞 — Cisco Meraki MX Firmware CWE-787 | 8.6 | High | 2024-10-02 |
| CVE-2024-20500 | Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-400 | 5.8 | Medium | 2024-10-02 |
| CVE-2024-20498 | Cisco Meraki Z Series Teleworker Gateway和Cisco Meraki MX 安全漏洞 — Cisco Meraki MX Firmware CWE-415 | 8.6 | High | 2024-10-02 |
| CVE-2024-20385 | Cisco Nexus Dashboard 安全漏洞 — Cisco Nexus Dashboard Orchestrator CWE-295 | 5.9 | Medium | 2024-10-02 |
| CVE-2024-8038 | Juju 安全漏洞 — Juju CWE-420 | 7.9 | High | 2024-10-02 |
| CVE-2024-35294 | Schneider Electric Series 700 访问控制错误漏洞 — Series 700 CWE-306 | 6.5 | Medium | 2024-10-02 |
| CVE-2024-35293 | Schneider Electric Series 700 访问控制错误漏洞 — Series 700 CWE-306 | 9.1 | Critical | 2024-10-02 |
| CVE-2024-9218 | WordPress plugin Magazine Blocks 跨站脚本漏洞 — Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-9344 | WordPress plugin BerqWP 跨站脚本漏洞 — BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-9378 | WordPress plugin YML for Yandex Market 跨站脚本漏洞 — YML for Yandex Market CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-8800 | WordPress plugin RabbitLoader 跨站脚本漏洞 — RabbitLoader – AI Speed Optimization, Caching & CDN for WordPress & WooCommerce CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-9210 | WordPress plugin MC4WP: Mailchimp Top Bar 跨站脚本漏洞 — MC4WP: Mailchimp Top Bar CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-9222 | WordPress plugin Paid Membership Subscriptions 跨站脚本漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-79 | 6.1 | Medium | 2024-10-02 |
| CVE-2024-9225 | WordPress plugin SEOPress 跨站脚本漏洞 — SEOPress – On-site SEO & Analytics CWE-79 | 6.1 | Medium | 2024-10-02 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。