access:pre-auth 类型相关 24786 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-4409 | WordPress plugin WP-ViperGB 安全漏洞 — WP-ViperGB CWE-352 | 4.3 | Medium | 2024-05-24 |
| CVE-2024-5084 | WordPress plugin Hash Form Drag Drop Form Builder 安全漏洞 — Hash Form – Drag & Drop Form Builder CWE-434 | 9.8 | Critical | 2024-05-23 |
| CVE-2024-5085 | WordPress plugin Hash Form Drag Drop Form Builder 安全漏洞 — Hash Form – Drag & Drop Form Builder CWE-502 | 8.1 | High | 2024-05-23 |
| CVE-2024-5168 | Prodys Quantum Audio 访问控制错误漏洞 — Quantum Audio codec CWE-284 | 9.8 | Critical | 2024-05-23 |
| CVE-2024-2038 | WordPress plugin Atarim 安全漏洞 — Atarim – Visual Feedback, Review & AI Collaboration CWE-259 | 7.5 | High | 2024-05-23 |
| CVE-2024-4399 | WordPress Theme CAS 安全漏洞 — cas | 9.1AI | Critical AI | 2024-05-23 |
| CVE-2024-4388 | WordPress Theme CAS 安全漏洞 — cas | 7.5AI | High AI | 2024-05-23 |
| CVE-2023-6325 | WordPress plugin RomethemeForm For Elementor 安全漏洞 — RTMForm Builder CWE-862 | 5.3 | Medium | 2024-05-23 |
| CVE-2024-4895 | WordPress plugin wpDataTables 安全漏洞 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin CWE-79 | 4.7 | Medium | 2024-05-23 |
| CVE-2024-1855 | WordPress plugin WPCafe 安全漏洞 — WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System CWE-918 | 5.3 | Medium | 2024-05-23 |
| CVE-2024-29849 | Veeam Backup Enterprise Manager 安全漏洞 — Backup & Replication | 9.8AI | Critical AI | 2024-05-22 |
| CVE-2024-20293 | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-436 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20361 | Cisco Firepower Management Center 安全漏洞 — Cisco Firepower Management Center CWE-264 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20261 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software CWE-284 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-20363 | Cisco 多款产品安全漏洞 — Cisco Firepower Threat Defense Software CWE-290 | 5.8 | Medium | 2024-05-22 |
| CVE-2024-3495 | WordPress plugin Country State City Dropdown CF7 安全漏洞 — Country State City Dropdown CF7 CWE-89 | 9.8 | Critical | 2024-05-22 |
| CVE-2024-5147 | WordPress plugin WPZOOM Addons for Elementor 安全漏洞 — WPZOOM Addons for Elementor – Starter Templates & Widgets CWE-22 | 9.8 | Critical | 2024-05-22 |
| CVE-2024-2119 | WordPress plugin LuckyWP Table of Contents 安全漏洞 — LuckyWP Table of Contents CWE-79 | 6.1 | Medium | 2024-05-22 |
| CVE-2024-1762 | WordPress plugin NextScripts Social Networks Auto-Poster 跨站脚本漏洞 — NextScripts: Social Networks Auto-Poster CWE-79 | 6.1 | Medium | 2024-05-22 |
| CVE-2024-3927 | WordPress plugin Element Pack Elementor 安全漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-424 | 5.3 | Medium | 2024-05-22 |
| CVE-2024-1446 | WordPress plugin NextScripts Social Networks Auto-Poster 跨站请求伪造漏洞 — NextScripts: Social Networks Auto-Poster CWE-352 | 5.4 | Medium | 2024-05-22 |
| CVE-2024-4443 | WordPress plugin Business Directory Plugin – Easy Listing Directories 安全漏洞 — Business Directory Plugin – Easy Listing Directories for WordPress CWE-89 | 9.8 | Critical | 2024-05-22 |
| CVE-2024-4971 | WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-79 | 6.4 | Medium | 2024-05-22 |
| CVE-2024-31340 | TP-LINK Tapo 安全漏洞 — TP-Link Tether | 5.9AI | Medium AI | 2024-05-22 |
| CVE-2024-3519 | WordPress Plugin Media Library Assistant 跨站脚本漏洞 — Media Library Assistant CWE-87 | 6.1 | Medium | 2024-05-21 |
| CVE-2024-31847 | Italtel Embrace 安全漏洞 — n/a | 6.1AI | Medium AI | 2024-05-21 |
| CVE-2024-31845 | Italtel Embrace 安全漏洞 — n/a | 6.5AI | Medium AI | 2024-05-21 |
| CVE-2024-31844 | Italtel Embrace 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-05-21 |
| CVE-2024-3268 | WordPress Plugin youtube-showcase 安全漏洞 — Video Gallery – YouTube Gallery & Responsive Video Playlist CWE-862 | 5.3 | Medium | 2024-05-21 |
| CVE-2024-4442 | WordPress Plugin Salon booking system 安全漏洞 — Salon Booking System – Free Version CWE-22 | 9.1 | Critical | 2024-05-21 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24786 条 CVE 漏洞。