access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-42531 | EZVIZ CS-CV246 安全漏洞 — n/a | 5.8AI | Medium AI | 2024-08-23 |
| CVE-2024-8072 | JFrog 安全漏洞 CWE-200 | 5.3 | Medium | 2024-08-22 |
| CVE-2024-36441 | Swissphone DiCal RED 4009 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-22 |
| CVE-2024-36444 | Swissphone DiCal RED 4009 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-22 |
| CVE-2024-36445 | Swissphone DiCal RED 4009 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-08-22 |
| CVE-2024-42772 | Kashipara Hotel Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-22 |
| CVE-2024-42773 | Kashipara Hotel Management System 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-22 |
| CVE-2024-42774 | Kashipara Hotel Management System 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-22 |
| CVE-2024-42775 | Kashipara Hotel Management System 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-22 |
| CVE-2024-45163 | Mirai Botnet 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-22 |
| CVE-2024-28987 | SolarWinds Web Help Desk 信任管理问题漏洞 — Web Help Desk CWE-798 | 9.1 | Critical | 2024-08-21 |
| CVE-2024-20486 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-352 | 6.5 | Medium | 2024-08-21 |
| CVE-2024-20488 | Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | Medium | 2024-08-21 |
| CVE-2024-20375 | Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager CWE-787 | 8.6 | High | 2024-08-21 |
| CVE-2024-21690 | Atlassian Confluence Data Center and Server 安全漏洞 — Confluence Data Center | 9.6AI | Critical AI | 2024-08-21 |
| CVE-2024-43410 | Russh 安全漏洞 — russh CWE-770 | 7.5 | High | 2024-08-21 |
| CVE-2024-5335 | WordPress plugin Woo Inquiry 安全漏洞 — Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor CWE-502 | 9.8 | Critical | 2024-08-21 |
| CVE-2024-6339 | WordPress theme Phlox PRO 安全漏洞 — Phlox PRO CWE-79 | 6.1 | Medium | 2024-08-21 |
| CVE-2024-6568 | WordPress plugin Flamix 安全漏洞 — Flamix: Bitrix24 and Contact Form 7 integrations CWE-200 | 5.3 | Medium | 2024-08-21 |
| CVE-2024-7651 | WordPress plugin App Builder 安全漏洞 — App Builder – Create Native Android & iOS Apps On The Flight CWE-89 | 5.6 | Medium | 2024-08-21 |
| CVE-2024-7090 | WordPress plugin LH Add Media From Url 安全漏洞 — LH Add Media From Url CWE-79 | 6.1 | Medium | 2024-08-21 |
| CVE-2024-7647 | WordPress plugin OTA Sync Booking Engine Widget 安全漏洞 — OTA Sync Booking Engine Widget CWE-352 | 6.1 | Medium | 2024-08-21 |
| CVE-2024-7032 | WordPress plugin Smart Online Order for Clover 安全漏洞 — Smart Online Order for Clover CWE-862 | 6.5 | Medium | 2024-08-21 |
| CVE-2024-7390 | WordPress plugin WP Testimonial Widget 安全漏洞 — WP Testimonial Widget CWE-862 | 5.3 | Medium | 2024-08-21 |
| CVE-2024-7134 | WordPress plugin LiquidPoll 安全漏洞 — LiquidPoll – Polls, Surveys, NPS and Feedback Reviews CWE-79 | 7.2 | High | 2024-08-21 |
| CVE-2024-5880 | WordPress plugin Hide My Site 安全漏洞 — Hide My Site CWE-200 | 4.3 | Medium | 2024-08-21 |
| CVE-2024-7854 | WordPress plugin Ultimate Store Kit 安全漏洞 — Woo Inquiry CWE-89 | 10.0 | Critical | 2024-08-21 |
| CVE-2024-6847 | WordPress plugin Chatbot with ChatGPT 安全漏洞 — Chatbot with ChatGPT WordPress | 9.8AI | Critical AI | 2024-08-20 |
| CVE-2024-5940 | WordPress plugin GiveWP 安全漏洞 — GiveWP – Donation Plugin and Fundraising Platform CWE-862 | 6.5 | Medium | 2024-08-20 |
| CVE-2024-5939 | WordPress plugin GiveWP 安全漏洞 — GiveWP – Donation Plugin and Fundraising Platform CWE-862 | 5.3 | Medium | 2024-08-20 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。