access:pre-auth 类型相关 24786 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-4997 | WordPress plugin WPUpper Share Buttons 安全漏洞 — WPUpper Share Buttons CWE-862 | 5.3 | Medium | 2024-06-04 |
| CVE-2024-2382 | WordPress plugin Authorize.net Payment Gateway For WooCommerce 安全漏洞 — Authorize.net Payment Gateway For WooCommerce CWE-345 | 5.3 | Medium | 2024-06-04 |
| CVE-2024-1718 | WordPress plugin Claudio Sanches – Checkout Cielo for WooCommerce 安全漏洞 — Claudio Sanches – Checkout Cielo for WooCommerce CWE-345 | 5.3 | Medium | 2024-06-04 |
| CVE-2024-3555 | WordPress plugin Social Link Pages 安全漏洞 — Social Link Pages: link-in-bio landing pages for your social media profiles CWE-862 | 7.2 | High | 2024-06-04 |
| CVE-2024-4552 | WordPress plugin Social Login Lite For WooCommerce 安全漏洞 — Social Login Lite For WooCommerce CWE-288 | 9.8 | Critical | 2024-06-04 |
| CVE-2024-29974 | Zyxel NAS326和Zyxel NAS542 代码问题漏洞 — NAS326 firmware CWE-434 | 9.8 | Critical | 2024-06-04 |
| CVE-2024-29973 | Zyxel NAS326和Zyxel NAS542 操作系统命令注入漏洞 — NAS326 firmware CWE-78 | 9.8 | Critical | 2024-06-04 |
| CVE-2024-29972 | Zyxel NAS326和Zyxel NAS542 操作系统命令注入漏洞 — NAS326 firmware CWE-78 | 9.8 | Critical | 2024-06-04 |
| CVE-2024-4332 | Tripwire 安全漏洞 — Tripwire Enterprise CWE-303 | 8.1AI | High AI | 2024-06-03 |
| CVE-2024-5404 | IFM Moneo 授权问题漏洞 — moneo appliance QVA200 CWE-640 | 9.8 | Critical | 2024-06-03 |
| CVE-2024-5311 | Digiwin DigiWin EasyFlow .NET SQL注入漏洞 — EasyFlow .NET CWE-89 | 9.8 | Critical | 2024-06-03 |
| CVE-2024-36042 | Silverpeas 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-06-03 |
| CVE-2024-27776 | MileSight DeviceHub 路径遍历漏洞 — DeviceHub CWE-22 | 9.8 | Critical | 2024-06-02 |
| CVE-2024-4344 | WordPress plugin Shield Security 安全漏洞 — Shield: Blocks Bots, Protects Users, and Prevents Security Breaches CWE-352 | 4.3 | Medium | 2024-06-02 |
| CVE-2024-3820 | WordPress plugin wpDataTables 安全漏洞 — wpDataTables (Premium) CWE-89 | 10.0 | Critical | 2024-06-01 |
| CVE-2024-3821 | WordPress plugin wpDataTables 安全漏洞 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin CWE-862 | 7.3 | High | 2024-06-01 |
| CVE-2024-1324 | WordPress plugin QQWorld Auto Save Images 安全漏洞 — QQWorld Auto Save Images CWE-862 | 5.3 | Medium | 2024-06-01 |
| CVE-2024-29822 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-29823 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-29824 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-29825 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-29826 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-29827 | Ivanti EPM SQL注入漏洞 — EPM | 8.8 | - | 2024-05-31 |
| CVE-2024-36108 | CasGate 安全漏洞 — casgate CWE-285 | 9.8 | Critical | 2024-05-31 |
| CVE-2024-23692 | Rejetto HTTP File Server 安全漏洞 — HTTP File Server CWE-1336 | 9.8 | Critical | 2024-05-31 |
| CVE-2024-2793 | WordPress plugin Atarim 安全漏洞 — Atarim – Visual Feedback, Review & AI Collaboration CWE-79 | 7.2 | High | 2024-05-31 |
| CVE-2024-2421 | NetBox 安全漏洞 — NetBox CWE-78 | 9.8AI | Critical AI | 2024-05-30 |
| CVE-2024-35431 | ZKTeco ZKBioSecurity 安全漏洞 — n/a | 7.5AI | High AI | 2024-05-30 |
| CVE-2024-4426 | WordPress plugin Comparison Slider 安全漏洞 — Comparison Slider CWE-352 | 4.3 | Medium | 2024-05-30 |
| CVE-2024-3947 | WordPress plugin WP To Do 安全漏洞 — WP To Do CWE-352 | 4.3 | Medium | 2024-05-30 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24786 条 CVE 漏洞。