access:pre-auth 类型相关 24796 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-50807 | SAMSUNG Wearable Processor 安全漏洞 — n/a | 8.1 | High | 2024-07-09 |
| CVE-2024-23562 | HCL Domino 安全漏洞 — Domino Server | 5.3 | Medium | 2024-07-08 |
| CVE-2024-5753 | Vanna 信息泄露漏洞 — vanna-ai/vanna CWE-89 | 9.1AI | Critical AI | 2024-07-05 |
| CVE-2024-38346 | Apache CloudStack 代码注入漏洞 — Apache CloudStack CWE-94 | 10.0 | - | 2024-07-05 |
| CVE-2024-39864 | Apache CloudStack 安全漏洞 — Apache CloudStack CWE-665 | 9.1 | - | 2024-07-05 |
| CVE-2024-5943 | WordPress plugin Nested Pages 安全漏洞 — Nested Pages CWE-352 | 8.8 | High | 2024-07-04 |
| CVE-2024-1573 | Mitsubishi Electric MC Works64 授权问题漏洞 — GENESIS64 CWE-306 | 5.9 | Medium | 2024-07-04 |
| CVE-2024-31223 | Fides 安全漏洞 — fides CWE-497 | 5.3 | Medium | 2024-07-03 |
| CVE-2024-6427 | MESbook 资源管理错误漏洞 — MESbook CWE-400 | 7.5 | High | 2024-07-03 |
| CVE-2024-4543 | WordPress plugin Snippet Shortcodes 跨站请求伪造漏洞 — Snippet Shortcodes CWE-352 | 4.3 | Medium | 2024-07-03 |
| CVE-2024-6099 | WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-420 | 5.3 | Medium | 2024-07-02 |
| CVE-2024-6088 | WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 5.3 | Medium | 2024-07-02 |
| CVE-2024-4836 | Edito CMS 安全漏洞 — Edito CMS CWE-552 | 7.5 | High | 2024-07-02 |
| CVE-2023-41918 | Kiloview P1 和 P2 安全漏洞 — P1/P2 CWE-306 | 10.0 | Critical | 2024-07-02 |
| CVE-2024-5544 | WordPress plugin Media Library Assistant 安全漏洞 — Media Library Assistant CWE-79 | 6.1 | Medium | 2024-07-02 |
| CVE-2024-5545 | WordPress plugin Motors 安全漏洞 — Motors – Car Dealership & Classified Listings Plugin CWE-862 | 5.3 | Medium | 2024-07-02 |
| CVE-2024-6172 | WordPress plugin Email Subscribers by Icegram Express 安全漏洞 — Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress CWE-89 | 9.8 | Critical | 2024-07-02 |
| CVE-2024-39891 | Twilio Authy API 安全漏洞 — n/a | 5.3 | Medium | 2024-07-02 |
| CVE-2024-37146 | Flowise 安全漏洞 — Flowise CWE-79 | 6.1 | Medium | 2024-07-01 |
| CVE-2024-37145 | Flowise 安全漏洞 — Flowise CWE-79 | 6.1 | Medium | 2024-07-01 |
| CVE-2024-36423 | Flowise 安全漏洞 — Flowise CWE-79 | 6.1 | Medium | 2024-07-01 |
| CVE-2024-21586 | Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-754 | 7.5 | High | 2024-07-01 |
| CVE-2024-36422 | Flowise 安全漏洞 — Flowise CWE-79 | 6.1 | Medium | 2024-07-01 |
| CVE-2024-36421 | Flowise 安全漏洞 — Flowise CWE-346 | 7.5 | High | 2024-07-01 |
| CVE-2024-36401 | GeoServer 安全漏洞 — geoserver CWE-95 | 9.8 | Critical | 2024-07-01 |
| CVE-2024-6425 | MESbook 安全漏洞 — MESbook CWE-684 | 9.1 | Critical | 2024-07-01 |
| CVE-2024-6424 | MESbook 安全漏洞 — MESbook CWE-918 | 9.3 | Critical | 2024-07-01 |
| CVE-2024-6387 | OpenSSH 安全漏洞 CWE-364 | 8.1 | High | 2024-07-01 |
| CVE-2024-37763 | Machform 安全漏洞 — n/a | 6.1AI | Medium AI | 2024-07-01 |
| CVE-2023-4017 | WordPress Plugin Goya 安全漏洞 — Goya CWE-79 | 6.1 | Medium | 2024-06-29 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24796 条 CVE 漏洞。