access:pre-auth 类型相关 24786 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-35061 | NASA AIT-Core 安全漏洞 — n/a | 7.4AI | High AI | 2024-05-21 |
| CVE-2024-36081 | Westermo EDW-100 安全漏洞 — n/a | 9.8 | Critical | 2024-05-19 |
| CVE-2024-28064 | Accellion Kiteworks 安全漏洞 — n/a | 9.8 | - | 2024-05-18 |
| CVE-2024-2782 | WordPress plugin Fluent Forms 安全漏洞 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder CWE-862 | 7.5 | High | 2024-05-18 |
| CVE-2024-2771 | WordPress plugin Fluent Forms 安全漏洞 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder CWE-862 | 9.8 | Critical | 2024-05-18 |
| CVE-2024-3231 | WordPress Plugin Popup4Phone 安全漏洞 — Popup4Phone | 6.1 | - | 2024-05-17 |
| CVE-2024-3551 | WordPress Plugin Penci Soledad Data Migrator 安全漏洞 — Penci Soledad Data Migrator CWE-98 | 9.8 | Critical | 2024-05-17 |
| CVE-2021-33146 | Intel Ethernet Adapters 和 Intel Ethernet Controller I225 Manageability firmware 安全漏洞 — Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware | 5.3 | Medium | 2024-05-16 |
| CVE-2021-33141 | Intel Ethernet Adapters 和 Intel Ethernet Controller I225 Manageability firmware 安全漏洞 — Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware | 8.6 | High | 2024-05-16 |
| CVE-2023-38417 | Intel PROSet/Wireless WiFi Software 安全漏洞 — Intel(R) PROSet/Wireless WiFi software | 4.3 | Medium | 2024-05-16 |
| CVE-2023-40536 | Intel PROSet/Wireless WiFi Software 安全漏洞 — Intel(R) PROSet/Wireless WiFi software for Windows | 4.3 | Medium | 2024-05-16 |
| CVE-2023-47210 | Intel PROSet/Wireless WiFi Software 安全漏洞 — Intel(R) PROSet/Wireless WiFi software for linux | 4.7 | Medium | 2024-05-16 |
| CVE-2023-38654 | Intel PROSet/Wireless WiFi Software 安全漏洞 — some Intel(R) PROSet/Wireless WiFi software for Windows | 8.2 | High | 2024-05-16 |
| CVE-2024-21864 | Intel Arc 和 Iris Xe 安全漏洞 — Intel(R) Arc(TM) & Iris(R) Xe Graphics software | 7.8 | High | 2024-05-16 |
| CVE-2024-22476 | Intel Neural Compressor 安全漏洞 — Intel(R) Neural Compressor software | 10.0 | Critical | 2024-05-16 |
| CVE-2024-4204 | WordPress plugin Bulk Posts Editing For WordPress 安全漏洞 — WPBULKiT – Bulk Edit WordPress Posts & Pages CWE-352 | 4.3 | Medium | 2024-05-16 |
| CVE-2024-3286 | Lenovo printers 安全漏洞 — Printers CWE-121 | 7.5 | High | 2024-05-16 |
| CVE-2023-48643 | Facebook Tacacs+ 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-05-16 |
| CVE-2024-4956 | Sonatype Nexus Repository 安全漏洞 — Nexus Repository CWE-22 | 7.5 | High | 2024-05-16 |
| CVE-2024-4222 | WordPress Plugin Tutor LMS Pro 安全漏洞 — Tutor LMS Pro CWE-862 | 7.3 | High | 2024-05-16 |
| CVE-2024-4223 | WordPress plugin Tutor LMS 安全漏洞 — Tutor LMS – eLearning and online course solution CWE-862 | 9.8 | Critical | 2024-05-16 |
| CVE-2024-3641 | WordPress plugin Newsletter Popup 安全漏洞 — Newsletter Popup | 6.1AI | Medium AI | 2024-05-16 |
| CVE-2024-20258 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-79 | 6.1 | Medium | 2024-05-15 |
| CVE-2024-20391 | Cisco Secure Client 安全漏洞 — Cisco Secure Client CWE-306 | 6.8 | Medium | 2024-05-15 |
| CVE-2024-20369 | Cisco Crosswork Network Services Orchestrator 安全漏洞 — Cisco Network Services Orchestrator CWE-601 | 4.7 | Medium | 2024-05-15 |
| CVE-2024-20392 | Cisco AsyncOS 安全漏洞 — Cisco Secure Email CWE-113 | 6.1 | Medium | 2024-05-15 |
| CVE-2024-20394 | Cisco AppDynamics Network Visibility Agent 安全漏洞 — Cisco AppDynamics CWE-20 | 5.5 | Medium | 2024-05-15 |
| CVE-2024-4837 | Progress Software Telerik Report Server 安全漏洞 — Telerik Report Server CWE-200 | 5.3 | Medium | 2024-05-15 |
| CVE-2024-3488 | NetIQ iManager 安全漏洞 — iManager CWE-20 | 5.6 | Medium | 2024-05-15 |
| CVE-2024-4894 | ITPison OMICARD EDM 代码问题漏洞 — OMICARD EDM CWE-918 | 5.3 | Medium | 2024-05-15 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24786 条 CVE 漏洞。