access:pre-auth 类型相关 24796 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-21178 | Oracle PeopleSoft Products 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 6.1 | Medium | 2024-07-16 |
| CVE-2024-21175 | Oracle Fusion Middleware 安全漏洞 — WebLogic Server | 7.5 | High | 2024-07-16 |
| CVE-2024-21169 | Oracle E-Business Suite 安全漏洞 — Marketing | 6.5 | Medium | 2024-07-16 |
| CVE-2024-21155 | Oracle ZFS Storage Appliance 安全漏洞 — Sun ZFS Storage Appliance Kit (AK) Software | 4.7 | Medium | 2024-07-16 |
| CVE-2024-21150 | Oracle JD Edwards Products 安全漏洞 — JD Edwards EnterpriseOne Tools | 6.1 | Medium | 2024-07-16 |
| CVE-2024-21145 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 4.8 | Medium | 2024-07-16 |
| CVE-2024-21147 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 7.4 | High | 2024-07-16 |
| CVE-2024-21143 | Oracle E-Business Suite 安全漏洞 — iStore | 5.3 | Medium | 2024-07-16 |
| CVE-2024-21144 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 3.7 | Low | 2024-07-16 |
| CVE-2024-21140 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 4.8 | Medium | 2024-07-16 |
| CVE-2024-21136 | Oracle Retail Applications 安全漏洞 — Retail Xstore Office | 8.6 | High | 2024-07-16 |
| CVE-2024-21138 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 3.7 | Low | 2024-07-16 |
| CVE-2024-21133 | Oracle Fusion Middleware 安全漏洞 — Reports Developer | 6.1 | Medium | 2024-07-16 |
| CVE-2024-21131 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 3.7 | Low | 2024-07-16 |
| CVE-2024-21126 | Oracle Database Server 安全漏洞 — Database - Enterprise Edition | 5.8 | Medium | 2024-07-16 |
| CVE-2024-6457 | WordPress plugin HUSKY 安全漏洞 — HUSKY – Products Filter Professional for WooCommerce CWE-89 | 9.8 | Critical | 2024-07-16 |
| CVE-2024-6565 | WordPress plugin AForms 安全漏洞 — AForms — Form Builder for Price Calculator & Cost Estimation CWE-200 | 5.3 | Medium | 2024-07-16 |
| CVE-2024-6570 | WordPress plugin Glossary 安全漏洞 — Glossary CWE-200 | 5.3 | Medium | 2024-07-16 |
| CVE-2024-6559 | WordPress plugin XCloner 安全漏洞 — Backup, Restore and Migrate your sites with XCloner CWE-200 | 5.3 | Medium | 2024-07-16 |
| CVE-2024-6557 | WordPress plugin SchedulePress 安全漏洞 — SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher CWE-200 | 5.3 | Medium | 2024-07-16 |
| CVE-2024-40627 | Open Policy Agent 安全漏洞 — fastapi-opa CWE-204 | 5.8 | Medium | 2024-07-15 |
| CVE-2024-38492 | Broadcom Symantec Privileged Access Management 安全漏洞 — Symantec Privileged Access Management | 9.8 | - | 2024-07-15 |
| CVE-2024-38491 | Broadcom Symantec Privileged Access Management 安全漏洞 — Symantec Privileged Access Management | 7.5 | - | 2024-07-15 |
| CVE-2024-36456 | Broadcom Symantec Privileged Access Management 安全漏洞 — Symantec Privileged Access Management | 9.8 | - | 2024-07-15 |
| CVE-2024-36455 | Broadcom Symantec Privileged Access Management 安全漏洞 — Symantec Privileged Access Management | 9.8 | - | 2024-07-15 |
| CVE-2024-6741 | Openfind Mail2000 安全漏洞 — Mail2000 V7.0 CWE-693 | 5.8 | Medium | 2024-07-15 |
| CVE-2024-6740 | Openfind Mail2000 跨站脚本漏洞 — Mail2000 V7.0 CWE-79 | 6.1 | Medium | 2024-07-15 |
| CVE-2024-6744 | Cellopoint Secure Email Gateway 安全漏洞 — Secure Email Gateway CWE-121 | 9.8 | Critical | 2024-07-15 |
| CVE-2024-6743 | AguardNet Space Management System SQL注入漏洞 — Space Management System CWE-89 | 9.8 | Critical | 2024-07-15 |
| CVE-2024-6289 | WordPress plugin WPS Hide Login 安全漏洞 — WPS Hide Login | 6.1 | - | 2024-07-15 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24796 条 CVE 漏洞。