access:pre-auth 类型相关 24806 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-8529 | WordPress plugin LearnPress SQL注入漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-89 | 10.0 | Critical | 2024-09-12 |
| CVE-2024-8622 | WordPress plugin amCharts: Charts and Maps 跨站脚本漏洞 — amCharts: Charts and Maps CWE-79 | 6.1 | Medium | 2024-09-12 |
| CVE-2024-6019 | WordPress plugin Music Request Manager 安全漏洞 — Music Request Manager | 6.1AI | Medium AI | 2024-09-12 |
| CVE-2024-29847 | Ivanti Endpoint Manager 代码问题漏洞 — EPM | 9.8 | - | 2024-09-12 |
| CVE-2024-37397 | Ivanti Endpoint Manager 安全漏洞 — EPM | 7.5AI | High AI | 2024-09-12 |
| CVE-2024-20304 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-401 | 8.6 | High | 2024-09-11 |
| CVE-2024-20406 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-20 | 7.4 | High | 2024-09-11 |
| CVE-2024-20317 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-684 | 7.4 | High | 2024-09-11 |
| CVE-2024-20390 | Cisco IOS XR 安全漏洞 — Cisco IOS XR Software CWE-940 | 5.3 | Medium | 2024-09-11 |
| CVE-2024-27112 | SOPlanning 安全漏洞 — SO Planning CWE-89 | 9.8AI | Critical AI | 2024-09-11 |
| CVE-2024-27114 | SOPlanning 安全漏洞 — SO Planning CWE-367 | 8.1AI | High AI | 2024-09-11 |
| CVE-2024-27115 | SOPlanning 安全漏洞 — SO Planning CWE-434 | 9.8AI | Critical AI | 2024-09-11 |
| CVE-2024-27113 | SOPlanning 安全漏洞 — SO Planning CWE-200 | 6.2AI | Medium AI | 2024-09-11 |
| CVE-2024-8277 | WordPress plugin WooCommerce Photo Reviews Premium 安全漏洞 — WooCommerce Photo Reviews Premium CWE-288 | 9.8 | Critical | 2024-09-11 |
| CVE-2024-7727 | WordPress plugin HTML5 Video Player 安全漏洞 — HTML5 Video Player – Embed and Play Videos in Custom Player CWE-862 | 5.3 | Medium | 2024-09-11 |
| CVE-2024-8321 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-306 | 5.8 | Medium | 2024-09-10 |
| CVE-2024-8320 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-306 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-8191 | Ivanti EPM 安全漏洞 — Endpoint Manager CWE-89 | 7.8 | High | 2024-09-10 |
| CVE-2024-8232 | iniNet Solutions SpiderControl SCADA Web Server 代码问题漏洞 — SpiderControl SCADA Web Server CWE-434 | 7.5 | High | 2024-09-10 |
| CVE-2024-8504 | VICIdial 安全漏洞 — VICIdial CWE-78 | 8.8AI | High AI | 2024-09-10 |
| CVE-2024-8503 | VICIdial 安全漏洞 — VICIdial CWE-89 | 7.5AI | High AI | 2024-09-10 |
| CVE-2024-45409 | Ruby SAML 数据伪造问题漏洞 — ruby-saml CWE-347 | 10.0 | Critical | 2024-09-10 |
| CVE-2024-45596 | Directus 安全漏洞 — directus CWE-524 | 7.4 | High | 2024-09-10 |
| CVE-2024-42423 | Dell ThinOS 安全漏洞 — Wyse Proprietary OS (Modern ThinOS) CWE-863 | 6.1 | Medium | 2024-09-10 |
| CVE-2022-45856 | Fortinet FortiClient 信任管理问题漏洞 — FortiClientiOS CWE-295 | 4.6 | Medium | 2024-09-10 |
| CVE-2024-31489 | Fortinet FortiClient 信任管理问题漏洞 — FortiClientMac CWE-295 | 6.4 | Medium | 2024-09-10 |
| CVE-2024-35282 | Fortinet FortiClient 安全漏洞 — FortiClientiOS CWE-316 | 3.9 | Medium | 2024-09-10 |
| CVE-2024-33508 | Fortinet FortiClientEMS 命令注入漏洞 — FortiClientEMS CWE-77 | 6.9 | High | 2024-09-10 |
| CVE-2024-8369 | WordPress plugin EventPrime 安全漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-862 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-45032 | Siemens Industrial Edge Management 安全漏洞 — Industrial Edge Management Pro CWE-639 | 10.0 | Critical | 2024-09-10 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24806 条 CVE 漏洞。