目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24806

access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-9353 WordPress plugin Popularis Extra 跨站脚本漏洞 — Popularis Extra CWE-79 6.1 Medium 2024-10-04
CVE-2024-9345 WordPress plugin Product Delivery Date for WooCommerce 跨站脚本漏洞 — Product Delivery Date for WooCommerce – Lite CWE-79 6.1 Medium 2024-10-04
CVE-2024-8802 WordPress plugin Clio Grow 跨站脚本漏洞 — Clio Grow Form CWE-79 6.1 Medium 2024-10-04
CVE-2023-26770 Jordanknott Taskcafe 安全漏洞 — n/a 7.5 - 2024-10-04
CVE-2024-43699 Delta Electronics DIAEnergie SQL注入漏洞 — DIAEnergie CWE-89 9.8 Critical 2024-10-03
CVE-2024-41988 TEM Opera Plus FM Family Transmitter 访问控制错误漏洞 — Opera Plus FM Family Transmitter CWE-306 9.8 - 2024-10-03
CVE-2024-41163 Veertu Anka Build 路径遍历漏洞 — Anka Build CWE-22 7.5 High 2024-10-03
CVE-2024-39755 Veertu Anka Build 安全漏洞 — Anka Build CWE-282 7.8 High 2024-10-03
CVE-2024-41922 Veertu Anka Build 路径遍历漏洞 — Anka Build CWE-22 7.5 High 2024-10-03
CVE-2024-8352 WordPress plugin Social Web Suite 路径遍历漏洞 — Social Web Suite – Social Media Auto Post, Social Media Auto Publish CWE-22 7.5 High 2024-10-03
CVE-2024-41591 DrayTek Vigor 3910 安全漏洞 — n/a 6.1 - 2024-10-03
CVE-2024-9441 Nortek Control Linear eMerge E3-Series 安全漏洞 — eMerge e3-Series CWE-78 9.8 Critical 2024-10-02
CVE-2024-20509 Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-362 5.8 Medium 2024-10-02
CVE-2024-20513 Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-639 5.8 Medium 2024-10-02
CVE-2024-20502 Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-400 5.8 Medium 2024-10-02
CVE-2024-20501 Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-787 8.6 High 2024-10-02
CVE-2024-20499 Cisco Meraki Z Series Teleworker Gateway和Cisco Meraki MX 安全漏洞 — Cisco Meraki MX Firmware CWE-787 8.6 High 2024-10-02
CVE-2024-20500 Cisco AnyConnect VPN 安全漏洞 — Cisco Meraki MX Firmware CWE-400 5.8 Medium 2024-10-02
CVE-2024-20498 Cisco Meraki Z Series Teleworker Gateway和Cisco Meraki MX 安全漏洞 — Cisco Meraki MX Firmware CWE-415 8.6 High 2024-10-02
CVE-2024-20385 Cisco Nexus Dashboard 安全漏洞 — Cisco Nexus Dashboard Orchestrator CWE-295 5.9 Medium 2024-10-02
CVE-2024-8038 Juju 安全漏洞 — Juju CWE-420 7.9 High 2024-10-02
CVE-2024-35294 Schneider Electric Series 700 访问控制错误漏洞 — Series 700 CWE-306 6.5 Medium 2024-10-02
CVE-2024-35293 Schneider Electric Series 700 访问控制错误漏洞 — Series 700 CWE-306 9.1 Critical 2024-10-02
CVE-2024-9218 WordPress plugin Magazine Blocks 跨站脚本漏洞 — Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid CWE-79 6.1 Medium 2024-10-02
CVE-2024-9344 WordPress plugin BerqWP 跨站脚本漏洞 — BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript CWE-79 6.1 Medium 2024-10-02
CVE-2024-9378 WordPress plugin YML for Yandex Market 跨站脚本漏洞 — YML for Yandex Market CWE-79 6.1 Medium 2024-10-02
CVE-2024-8800 WordPress plugin RabbitLoader 跨站脚本漏洞 — RabbitLoader – AI Speed Optimization, Caching & CDN for WordPress & WooCommerce CWE-79 6.1 Medium 2024-10-02
CVE-2024-9210 WordPress plugin MC4WP: Mailchimp Top Bar 跨站脚本漏洞 — MC4WP: Mailchimp Top Bar CWE-79 6.1 Medium 2024-10-02
CVE-2024-9222 WordPress plugin Paid Membership Subscriptions 跨站脚本漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction CWE-79 6.1 Medium 2024-10-02
CVE-2024-9225 WordPress plugin SEOPress 跨站脚本漏洞 — SEOPress – On-site SEO & Analytics CWE-79 6.1 Medium 2024-10-02

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。