access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-7411 | WordPress plugin Newsletters 安全漏洞 — Newsletters CWE-200 | 5.3 | Medium | 2024-08-15 |
| CVE-2024-7628 | WordPress plugin MStore API 安全漏洞 — MStore API – Create Native Android & iOS Apps On The Cloud CWE-288 | 8.1 | High | 2024-08-15 |
| CVE-2024-7420 | WordPress plugin Insert PHP Code Snippet 安全漏洞 — Insert PHP Code Snippet CWE-352 | 5.8 | Medium | 2024-08-15 |
| CVE-2024-27120 | Comfort ComfortKey 安全漏洞 — ComfortKey CWE-200 | 7.5AI | High AI | 2024-08-14 |
| CVE-2024-5914 | Palo Alto Networks Cortex XSOAR CommonScripts 安全漏洞 — Cortex XSOAR CommonScripts CWE-77 | 9.8AI | Critical AI | 2024-08-14 |
| CVE-2024-23499 | Intel Ethernet Adapters和Intel Ethernet Controllers 安全漏洞 — Intel(R) Ethernet Network Controllers and Adapters E810 Series | 6.5 | Medium | 2024-08-14 |
| CVE-2024-24983 | Intel Ethernet Adapters和Intel Ethernet Controllers 安全漏洞 — Intel(R) Ethernet Network Controllers and Adapters E810 Series | 6.5 | Medium | 2024-08-14 |
| CVE-2024-21844 | Intel CSME 安全漏洞 — Intel(R) CSME | 4.3 | Medium | 2024-08-14 |
| CVE-2023-40067 | Intel CSME 安全漏洞 — Intel(R) CSME | 5.7 | Medium | 2024-08-14 |
| CVE-2024-7732 | SECOM Dr.ID Access Control System SQL注入漏洞 — Dr.ID Attendance system CWE-89 | 9.8 | Critical | 2024-08-14 |
| CVE-2024-7731 | SECOM Dr.ID Access Control System 安全漏洞 — Dr.ID Access control system CWE-89 | 9.8 | Critical | 2024-08-14 |
| CVE-2024-7729 | CAYIN CMS 安全漏洞 — SMP-2100 CWE-552 | 7.5 | High | 2024-08-14 |
| CVE-2024-38652 | Ivanti Avalanche 安全漏洞 — Avalanche | 9.1AI | Critical AI | 2024-08-14 |
| CVE-2024-36136 | Ivanti Avalanche 安全漏洞 — Avalanche | 7.5AI | High AI | 2024-08-14 |
| CVE-2024-37399 | Ivanti Avalanche 安全漏洞 — Avalanche | 7.5AI | High AI | 2024-08-14 |
| CVE-2024-38653 | Ivanti Avalanche 安全漏洞 — Avalanche | 7.5AI | High AI | 2024-08-14 |
| CVE-2024-28986 | SolarWinds Web Help Desk 代码问题漏洞 — Web Help Desk CWE-502 | 9.8 | Critical | 2024-08-13 |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager 安全漏洞 — vTM CWE-287 | 9.8 | Critical | 2024-08-13 |
| CVE-2024-7569 | Ivanti ITSM 安全漏洞 — ITSM CWE-922 | 9.6 | Critical | 2024-08-13 |
| CVE-2024-6788 | PHOENIX CONTACT CHARX SEC 安全漏洞 — CHARX SEC-3000 CWE-1392 | 8.6 | High | 2024-08-13 |
| CVE-2024-38502 | Pepperl+Fuchs ICDM-RX 跨站脚本漏洞 — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 | 7.1 | High | 2024-08-13 |
| CVE-2024-38501 | Pepperl+Fuchs ICDM-RX 跨站脚本漏洞 — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 | 6.1 | Medium | 2024-08-13 |
| CVE-2024-5849 | Pepperl+Fuchs ICDM-RX 跨站脚本漏洞 — ICDM-RX/TCP-DB9/RJ45-DIN CWE-79 | 7.1 | High | 2024-08-13 |
| CVE-2024-3913 | PHOENIX CONTACT CHARX SEC 安全漏洞 — CHARX SEC-3000 (1139022) CWE-552 | 5.9 | Medium | 2024-08-13 |
| CVE-2024-41904 | Siemens SINEC Traffic Analyzer 安全漏洞 — SINEC Traffic Analyzer CWE-307 | 7.5 | High | 2024-08-13 |
| CVE-2024-41682 | Siemens Location Intelligence Perpetual 安全漏洞 — Location Intelligence family CWE-307 | 5.3 | Medium | 2024-08-13 |
| CVE-2024-41681 | Siemens Location Intelligence Perpetual 加密问题漏洞 — Location Intelligence family CWE-326 | 6.7 | Medium | 2024-08-13 |
| CVE-2024-41732 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server ABAP CWE-284 | 4.7 | Medium | 2024-08-13 |
| CVE-2024-7094 | WordPress plugin JS Help Desk 安全漏洞 — JS Help Desk – AI-Powered Support & Ticketing System CWE-94 | 9.8 | Critical | 2024-08-13 |
| CVE-2024-41711 | Mitel 6800 Series 安全漏洞 — n/a | 6.8AI | Medium AI | 2024-08-13 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。