access:pre-auth 类型相关 24806 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-44087 | Siemens Automation License Manager 输入验证错误漏洞 — Automation License Manager V5 CWE-190 | 8.6 | High | 2024-09-10 |
| CVE-2024-43647 | Siemens SIMATIC 安全漏洞 — SIMATIC S7-200 SMART CPU CR40 CWE-400 | 7.5 | High | 2024-09-10 |
| CVE-2024-37993 | Siemens SIMATIC 访问控制错误漏洞 — SIMATIC Reader RF610R CMIIT CWE-284 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-37991 | Siemens SIMATIC 信息泄露漏洞 — SIMATIC Reader RF610R CMIIT CWE-200 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-33698 | Siemens SIMATIC 安全漏洞 — Opcenter Quality CWE-122 | 9.8 | Critical | 2024-09-10 |
| CVE-2023-49069 | Siemens Mendix 安全漏洞 — Mendix Runtime V10 CWE-204 | 5.3 | Medium | 2024-09-10 |
| CVE-2023-2919 | WordPress plugin Tutor LMS 跨站请求伪造漏洞 — Tutor LMS – eLearning and online course solution CWE-352 | 4.3 | Medium | 2024-09-10 |
| CVE-2024-39581 | Dell InsightIQ 安全漏洞 — PowerScale InsightIQ CWE-552 | 7.3 | High | 2024-09-10 |
| CVE-2024-39583 | Dell InsightIQ 加密问题漏洞 — PowerScale InsightIQ CWE-327 | 8.1 | High | 2024-09-10 |
| CVE-2024-7734 | PHOENIX CONTACT FL MGUARD 安全漏洞 — FL MGUARD 2102 CWE-770 | 5.3 | Medium | 2024-09-10 |
| CVE-2024-6596 | Endress+Hauser Echo Curve Viewer 代码注入漏洞 — Echo Curve Viewer CWE-94 | 9.8 | Critical | 2024-09-10 |
| CVE-2024-42427 | Dell ThinOS 安全漏洞 — Wyse Proprietary OS (Modern ThinOS) CWE-77 | 7.6 | High | 2024-09-10 |
| CVE-2024-45504 | Trend Micro InterScan WebManager 安全漏洞 — InterSafe WebFilter | 8.8AI | High AI | 2024-09-10 |
| CVE-2024-45279 | SAP NetWeaver Application Server 跨站脚本漏洞 — SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel) CWE-79 | 6.1 | Medium | 2024-09-10 |
| CVE-2024-44120 | SAP NetWeaver Enterprise Portal 跨站脚本漏洞 — SAP NetWeaver Enterprise Portal CWE-79 | 4.7 | Medium | 2024-09-10 |
| CVE-2024-8478 | WordPress plugin The Affiliate Super Assistent 代码注入漏洞 — Affiliate Super Assistent CWE-94 | 7.3 | High | 2024-09-10 |
| CVE-2024-6342 | Zyxel NAS542和NAS326 操作系统命令注入漏洞 — NAS326 firmware CWE-78 | 9.8 | Critical | 2024-09-10 |
| CVE-2024-44667 | Haichangxing HCX H822 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-09-10 |
| CVE-2024-6796 | Baxter Connex Health Portal 安全漏洞 — Connex Health Portal CWE-284 | 8.2 | High | 2024-09-09 |
| CVE-2024-6795 | Baxter Connex Health Portal 安全漏洞 — Connex Health Portal CWE-89 | 10.0 | Critical | 2024-09-09 |
| CVE-2024-8584 | LearningDigital Orca HCM 访问控制错误漏洞 — Orca HCM CWE-306 | 9.8 | Critical | 2024-09-09 |
| CVE-2024-6928 | WordPress plugin Opti Marketing 安全漏洞 — Opti Marketing | 9.8AI | Critical AI | 2024-09-08 |
| CVE-2024-6924 | WordPress plugin TrueBooker 安全漏洞 — TrueBooker | 9.8AI | Critical AI | 2024-09-08 |
| CVE-2024-40711 | Veeam Backup & Replication 安全漏洞 — Backup and Recovery | 9.8AI | Critical AI | 2024-09-07 |
| CVE-2024-6010 | WordPress plugin Cost Calculator Builder PRO 安全漏洞 — Cost Calculator Builder PRO CWE-472 | 5.3 | Medium | 2024-09-07 |
| CVE-2024-1596 | WordPress plugin Ninja Forms - File Uploads 跨站脚本漏洞 — Ninja Forms - File Uploads CWE-79 | 7.2 | High | 2024-09-07 |
| CVE-2024-8517 | SPIP 安全漏洞 — SPIP CWE-73 | 9.8 | Critical | 2024-09-06 |
| CVE-2024-7493 | WordPress plugin WPCOM Member 安全漏洞 — WPCOM Member CWE-269 | 9.8 | Critical | 2024-09-06 |
| CVE-2024-8292 | WordPress plugin WP-Recall 安全漏洞 — WP-Recall – Registration, Profile, Commerce & More CWE-639 | 9.8 | Critical | 2024-09-06 |
| CVE-2024-7415 | WordPress plugin Remember Me Controls 信息泄露漏洞 — Remember Me Controls CWE-200 | 5.3 | Medium | 2024-09-06 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24806 条 CVE 漏洞。