access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-38530 | Open eClass Platform 安全漏洞 — openeclass CWE-434 | 9.8 | Critical | 2024-08-12 |
| CVE-2024-7693 | Team Johnlong software Raiden MAILD Mail Server 安全漏洞 — Raiden MAILD Remote Management System CWE-23 | 7.5 | High | 2024-08-12 |
| CVE-2024-33535 | Zimbra Collaboration Server 安全漏洞 — n/a | 7.5AI | High AI | 2024-08-12 |
| CVE-2024-7589 | FreeBSD 安全漏洞 — FreeBSD | 9.8AI | Critical AI | 2024-08-11 |
| CVE-2024-7574 | WordPress plugin Christmasify! 安全漏洞 — Christmasify! CWE-352 | 6.1 | Medium | 2024-08-10 |
| CVE-2024-7649 | WordPress plugin Opal Membership 安全漏洞 — Opal Membership CWE-79 | 6.1 | Medium | 2024-08-10 |
| CVE-2024-7503 | WordPress plugin WooCommerce - Social Login 安全漏洞 — WooCommerce - Social Login CWE-288 | 9.8 | Critical | 2024-08-10 |
| CVE-2024-42468 | openHAB 安全漏洞 — openhab-webui CWE-22 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-42467 | openHAB 安全漏洞 — openhab-webui CWE-918 | 10.0 | Critical | 2024-08-09 |
| CVE-2024-42470 | openHAB 安全漏洞 — openhab-webui CWE-862 | 6.5 | Medium | 2024-08-09 |
| CVE-2024-6562 | WordPress plugin affiliate-toolkit 安全漏洞 — affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7410 | WordPress plugin My Custom CSS PHP & ADS 安全漏洞 — My Custom CSS PHP & ADS CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7412 | WordPress plugin No Update Nag 安全漏洞 — No Update Nag CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7414 | WordPress plugin PDF Builder for WPForms 安全漏洞 — PDF Builder for WPForms CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7416 | WordPress plugin Reveal Template 安全漏洞 — Reveal Template CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7382 | WordPress plugin Linkify Text 安全漏洞 — Linkify Text CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-7413 | WordPress plugin Obfuscate Email 安全漏洞 — Obfuscate Email CWE-200 | 5.3 | Medium | 2024-08-09 |
| CVE-2024-40480 | Online Exam System 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-08-09 |
| CVE-2024-41570 | Havoc 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-09 |
| CVE-2024-42001 | Vonets 安全漏洞 — VAR1200-H CWE-425 | 8.6 | High | 2024-08-08 |
| CVE-2024-39791 | Vonets 安全漏洞 — VAR1200-H CWE-121 | 10.0 | Critical | 2024-08-08 |
| CVE-2024-39815 | Vonets 安全漏洞 — VAR1200-H CWE-703 | 9.1 | Critical | 2024-08-08 |
| CVE-2024-41936 | Vonets 路径遍历漏洞 — VAR1200-H CWE-22 | 7.5 | High | 2024-08-08 |
| CVE-2024-29082 | Vonets 访问控制错误漏洞 — VAR1200-H CWE-284 | 8.6 | High | 2024-08-08 |
| CVE-2024-41161 | Vonets多款产品 信任管理问题漏洞 — VAR1200-H CWE-798 | 7.5 | High | 2024-08-08 |
| CVE-2024-6552 | WordPress plugin Amelia 安全漏洞 — Booking for Appointments and Events Calendar – Amelia CWE-200 | 5.3 | Medium | 2024-08-08 |
| CVE-2024-6254 | WordPress plugin Brizy 安全漏洞 — Brizy – Page Builder CWE-20 | 4.3 | Medium | 2024-08-08 |
| CVE-2024-7492 | WordPress plugin MainWP Child Reports 安全漏洞 — MainWP Child Reports CWE-352 | 8.8 | High | 2024-08-08 |
| CVE-2024-7350 | WordPress plugin BookingPress 安全漏洞 — Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress CWE-288 | 9.8 | Critical | 2024-08-08 |
| CVE-2024-6893 | Journyx 代码问题漏洞 — Journyx (jtime) CWE-611 | 9.8AI | Critical AI | 2024-08-07 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。