目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24796

access:pre-auth 类型相关 24796 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-6635 WordPress plugin WooCommerce - Social Login 安全漏洞 — WooCommerce - Social Login CWE-288 7.3 High 2024-07-20
CVE-2024-6637 WordPress plugin WooCommerce - Social Login 安全漏洞 — WooCommerce - Social Login CWE-305 7.3 High 2024-07-20
CVE-2024-6560 WordPress plugin Addonify – Quick View For WooCommerce 安全漏洞 — Addonify – Quick View For WooCommerce CWE-200 5.3 Medium 2024-07-20
CVE-2024-5804 WordPress plugin Conditional Fields for Contact Form 安全漏洞 — Conditional Fields for Contact Form 7 CWE-352 4.3 Medium 2024-07-20
CVE-2024-40348 Bazarr 安全漏洞 — n/a 7.5 - 2024-07-20
CVE-2024-6205 WordPress plugin PayPlus Payment Gateway SQL注入漏洞 — PayPlus Payment Gateway 9.8 - 2024-07-19
CVE-2024-6455 WordPress plugin ElementsKit Elementor 安全漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-200 5.3 Medium 2024-07-18
CVE-2024-40764 SonicWALL SonicOS IPSec VPN 安全漏洞 — SonicOS CWE-122 9.1AI Critical AI 2024-07-18
CVE-2024-6164 WordPress plugin Filter & Grids 安全漏洞 — Filter & Grids 9.8AI Critical AI 2024-07-18
CVE-2024-20396 Cisco Webex 安全漏洞 — Cisco Webex Teams CWE-200 5.3 Medium 2024-07-17
CVE-2024-20395 Cisco Webex 安全漏洞 — Cisco Webex Teams CWE-523 6.4 Medium 2024-07-17
CVE-2024-20400 Cisco Expressway Series 安全漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-601 4.7 Medium 2024-07-17
CVE-2024-20323 Cisco Intelligent Node 安全漏洞 — Cisco Intelligent Node Manager CWE-321 7.5 High 2024-07-17
CVE-2024-20419 Cisco Smart Software Manager On-Prem 安全漏洞 — Cisco Smart Software Manager On-Prem CWE-620 10.0 Critical 2024-07-17
CVE-2024-20401 Cisco Secure Email 安全漏洞 — Cisco Secure Email CWE-36 9.8 Critical 2024-07-17
CVE-2024-23470 SolarWinds Access Rights Manager 授权问题漏洞 — Access Rights Manager CWE-287 9.6 Critical 2024-07-17
CVE-2024-23467 SolarWinds Access Rights Manager 路径遍历漏洞 — Access Rights Manager CWE-22 9.6 Critical 2024-07-17
CVE-2024-23466 SolarWinds Access Rights Manager 路径遍历漏洞 — Access Rights Manager CWE-22 9.6 Critical 2024-07-17
CVE-2024-23465 SolarWinds Access Rights Manager 授权问题漏洞 — Access Rights Manager CWE-287 8.3 High 2024-07-17
CVE-2024-23469 SolarWinds Access Rights Manager 输入验证错误漏洞 — Access Rights Manager CWE-20 9.6 Critical 2024-07-17
CVE-2024-23475 SolarWinds Access Rights Manager 路径遍历漏洞 — Access Rights Manager CWE-22 9.6 Critical 2024-07-17
CVE-2024-28993 SolarWinds Access Rights Manager 路径遍历漏洞 — Access Rights Manager CWE-22 7.6 High 2024-07-17
CVE-2024-28992 SolarWinds Access Rights Manager 授权问题漏洞 — Access Rights Manager CWE-287 7.6 High 2024-07-17
CVE-2024-23468 SolarWinds Access Rights Manager 路径遍历漏洞 — Access Rights Manager CWE-22 7.6 High 2024-07-17
CVE-2024-31070 Century Systems多款产品 安全漏洞 — FutureNet NXR-1300 series 8.2AI High AI 2024-07-17
CVE-2024-6220 WordPress plugin Keydatas 安全漏洞 — 简数采集器 CWE-434 9.8 Critical 2024-07-17
CVE-2024-21188 Oracle Financial Services Applications 安全漏洞 — Financial Services Revenue Management and Billing 6.1 Medium 2024-07-16
CVE-2024-21181 Oracle Fusion Middleware 安全漏洞 — WebLogic Server 9.8 Critical 2024-07-16
CVE-2024-21182 Oracle Fusion Middleware 安全漏洞 — WebLogic Server 7.5 High 2024-07-16
CVE-2024-21183 Oracle Fusion Middleware 安全漏洞 — WebLogic Server 7.5 High 2024-07-16

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24796 条 CVE 漏洞。