access:pre-auth 类型相关 24806 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-20451 | Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞 — Cisco Small Business IP Phones CWE-120 | 7.5 | High | 2024-08-07 |
| CVE-2024-20454 | Cisco Small Business SPA500 Series IP Phones和Cisco Small Business 安全漏洞 — Cisco Small Business IP Phones CWE-120 | 9.8 | Critical | 2024-08-07 |
| CVE-2024-20450 | Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞 — Cisco Small Business IP Phones CWE-120 | 9.8 | Critical | 2024-08-07 |
| CVE-2024-6494 | WordPress plugin WordPress File Upload 安全漏洞 — WordPress File Upload | 6.1AI | Medium AI | 2024-08-07 |
| CVE-2024-41243 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41244 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41245 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41246 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41247 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41248 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41249 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41250 | Kashipara Responsive School Management System 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-08-07 |
| CVE-2024-41251 | Kashipara Responsive School Management System 安全漏洞 — n/a | 6.5AI | Medium AI | 2024-08-07 |
| CVE-2024-41252 | Kashipara Responsive School Management System 安全漏洞 — n/a | 6.5AI | Medium AI | 2024-08-07 |
| CVE-2024-38166 | Microsoft Dynamics 365 跨站脚本漏洞 — Dynamics CRM Service Portal Web Resource CWE-79 | 8.2 | High | 2024-08-06 |
| CVE-2024-42400 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 5.3 | Medium | 2024-08-06 |
| CVE-2024-42399 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 5.3 | Medium | 2024-08-06 |
| CVE-2024-42398 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 5.3 | Medium | 2024-08-06 |
| CVE-2024-42393 | Aruba Networks Access Points 安全漏洞 — Hpe Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 9.8 | Critical | 2024-08-06 |
| CVE-2024-42394 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 9.8 | Critical | 2024-08-06 |
| CVE-2024-42395 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 9.8 | Critical | 2024-08-06 |
| CVE-2024-42396 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 5.3 | Medium | 2024-08-06 |
| CVE-2024-42397 | Aruba Networks Access Points 安全漏洞 — HPE Aruba Networking InstantOS and Aruba Access Points running ArubaOS 10 | 5.3 | Medium | 2024-08-06 |
| CVE-2024-28962 | Dell Update和Dell Alienware Update 安全漏洞 — Dell Update (DU) CWE-610 | 6.5 | Medium | 2024-08-06 |
| CVE-2024-6782 | Calibre 安全漏洞 — Calibre CWE-863 | 9.8 | Critical | 2024-08-06 |
| CVE-2024-6781 | Calibre 安全漏洞 — Calibre CWE-22 | 7.5 | High | 2024-08-06 |
| CVE-2024-7485 | WordPress plugin Traffic Manager 安全漏洞 — Traffic Manager CWE-79 | 7.2 | High | 2024-08-06 |
| CVE-2024-39227 | GL.iNet多款产品 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-08-06 |
| CVE-2024-40101 | Microweber 安全漏洞 — n/a | 6.1AI | Medium AI | 2024-08-06 |
| CVE-2024-41959 | mailcow 安全漏洞 — mailcow-dockerized CWE-79 | 7.6 | High | 2024-08-05 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24806 条 CVE 漏洞。