access:pre-auth 类型相关 24796 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-5598 | WordPress plugin Advanced File Manager 安全漏洞 — Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution CWE-922 | 7.5 | High | 2024-06-29 |
| CVE-2024-5889 | WordPress plugin Events Manager 安全漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! CWE-79 | 6.1 | Medium | 2024-06-29 |
| CVE-2024-6265 | WordPress plugin UsersWP 安全漏洞 — UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP CWE-89 | 9.8 | Critical | 2024-06-29 |
| CVE-2024-6405 | WordPress plugin Floating Social Buttons 安全漏洞 — Floating Social Buttons CWE-352 | 6.1 | Medium | 2024-06-29 |
| CVE-2024-38528 | ntpd-rs 安全漏洞 — ntpd-rs CWE-770 | 7.5 | High | 2024-06-28 |
| CVE-2024-2795 | WordPress plugin SEO SIMPLE PACK 安全漏洞 — SEO SIMPLE PACK CWE-200 | 5.3 | Medium | 2024-06-28 |
| CVE-2024-6288 | WordPress plugin Conversios 安全漏洞 — Conversios: Google Analytics (GA4), Google Ads, Conversion and Analytics Tracking for Multi-Channels CWE-79 | 4.7 | Medium | 2024-06-28 |
| CVE-2024-6071 | Creo Elements/Direct 安全漏洞 — Creo Elements/Direct License CWE-862 | 10.0 | Critical | 2024-06-27 |
| CVE-2024-6127 | BC Security Empire 安全漏洞 — Empire CWE-22 | 9.8 | Critical | 2024-06-27 |
| CVE-2024-6085 | LoLLMs 安全漏洞 — parisneo/lollms CWE-22 | 9.1AI | Critical AI | 2024-06-27 |
| CVE-2024-3043 | Silicon Labs Simplicity SDK 安全漏洞 — Ember ZNet SDK CWE-829 | 7.5 | High | 2024-06-27 |
| CVE-2024-31883 | IBM Security Verify Access 安全漏洞 — Security Verify Access CWE-703 | 5.3 | Medium | 2024-06-27 |
| CVE-2024-36072 | Netwrix CoSoSys Endpoint Protector 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-06-27 |
| CVE-2024-1839 | Intrado 911 Emergency Gateway 安全漏洞 — 911 Emergency Gateway (EGW) CWE-89 | 10.0 | Critical | 2024-06-26 |
| CVE-2024-29175 | Dell PowerProtect Data Domain 安全漏洞 — PowerProtect DD CWE-327 | 5.9 | Medium | 2024-06-26 |
| CVE-2024-23766 | HMS Networks Anybus X-Gateway AB7832-F3 安全漏洞 — n/a | 7.5AI | High AI | 2024-06-26 |
| CVE-2024-23767 | HMS Networks Anybus X-Gateway AB7832-F3 安全漏洞 — n/a | 7.5AI | High AI | 2024-06-26 |
| CVE-2024-4869 | WordPress Plugin WP Cookie Consent 跨站脚本漏洞 — Cookie Banner for GDPR / CCPA – WPLP Cookie Consent CWE-79 | 7.2 | High | 2024-06-25 |
| CVE-2024-5019 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-22 | 5.3 | Medium | 2024-06-25 |
| CVE-2024-5018 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-22 | 5.3 | Medium | 2024-06-25 |
| CVE-2024-5017 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-22 | 6.5 | Medium | 2024-06-25 |
| CVE-2024-5013 | Progress Software WhatsUp Gold 2023.1.3 安全漏洞 — WhatsUp Gold CWE-400 | 7.5 | High | 2024-06-25 |
| CVE-2024-5012 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-287 | 8.6 | High | 2024-06-25 |
| CVE-2024-5011 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-400 | 7.5 | High | 2024-06-25 |
| CVE-2024-5010 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-200 | 7.5 | High | 2024-06-25 |
| CVE-2024-4885 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-22 | 9.8 | Critical | 2024-06-25 |
| CVE-2024-4884 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-77 | 9.8 | Critical | 2024-06-25 |
| CVE-2024-4883 | Progress Software WhatsUp Gold 安全漏洞 — WhatsUp Gold CWE-77 | 9.8 | Critical | 2024-06-25 |
| CVE-2024-5276 | Fortra FileCatalyst 安全漏洞 — FileCatalyst Workflow CWE-20 | 9.8 | Critical | 2024-06-25 |
| CVE-2024-5990 | Rockwell Automation ThinServer 安全漏洞 — ThinManager® ThinServer™ CWE-20 | 7.5AI | High AI | 2024-06-25 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24796 条 CVE 漏洞。