access:pre-auth 类型相关 24777 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-31469 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31468 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31467 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-31466 | Aruba Networks ArubaOS 和 InstantOS 安全漏洞 — AOS-8 Instant and AOS-10 AP | 9.8 | Critical | 2024-05-14 |
| CVE-2024-3676 | Proofpoint Enterprise Protection 输入验证错误漏洞 — Enterprise Protection CWE-20 | 7.5 | High | 2024-05-14 |
| CVE-2024-23105 | Fortinet FortiPortal 安全漏洞 — FortiPortal CWE-348 | 7.1 | High | 2024-05-14 |
| CVE-2024-26007 | Fortinet FortiOS 安全漏洞 — FortiOS CWE-703 | 5.0 | Medium | 2024-05-14 |
| CVE-2024-32977 | OctoPrint 安全漏洞 — OctoPrint CWE-290 | 7.1 | High | 2024-05-14 |
| CVE-2024-3374 | MongoDB Server 安全漏洞 — MongoDB Server CWE-617 | 5.3 | Medium | 2024-05-14 |
| CVE-2024-33498 | Siemens 多款产品 资源管理错误漏洞 — SIMATIC RTLS Locating Manager CWE-400 | 5.3 | Medium | 2024-05-14 |
| CVE-2024-33495 | Siemens 多款产品 安全漏洞 — SIMATIC RTLS Locating Manager CWE-770 | 6.5 | Medium | 2024-05-14 |
| CVE-2024-33494 | Siemens 多款产品 数据伪造问题漏洞 — SIMATIC RTLS Locating Manager CWE-345 | 6.5 | Medium | 2024-05-14 |
| CVE-2024-30207 | Siemens 多款产品 安全漏洞 — SIMATIC RTLS Locating Manager CWE-321 | 10.0 | Critical | 2024-05-14 |
| CVE-2024-30206 | Siemens 多款产品 安全漏洞 — SIMATIC RTLS Locating Manager CWE-494 | 8.8 | High | 2024-05-14 |
| CVE-2024-27942 | Siemens RUGGEDCOM CROSSBOW 访问控制错误漏洞 — RUGGEDCOM CROSSBOW CWE-306 | 7.5 | High | 2024-05-14 |
| CVE-2024-27939 | Siemens RUGGEDCOM CROSSBOW 安全漏洞 — RUGGEDCOM CROSSBOW CWE-862 | 9.8 | Critical | 2024-05-14 |
| CVE-2024-28134 | PHOENIX CONTACT CHARX SEC-3000 安全漏洞 — CHARX SEC-3000 CWE-319 | 7.0 | High | 2024-05-14 |
| CVE-2024-25969 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-770 | 6.2 | Medium | 2024-05-14 |
| CVE-2024-25966 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS CWE-241 | 5.3 | Medium | 2024-05-14 |
| CVE-2024-25968 | Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS CWE-327 | 5.9 | Medium | 2024-05-14 |
| CVE-2024-4144 | WordPress plugin Simple Basic Contact Form 安全漏洞 — Simple Basic Contact Form CWE-94 | 6.5 | Medium | 2024-05-14 |
| CVE-2024-33006 | SAP NetWeaver Application Server 代码问题漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-434 | 9.6 | Critical | 2024-05-14 |
| CVE-2024-32733 | SAP NetWeaver Application Server 跨站脚本漏洞 — SAP NetWeaver Application Server ABAP and ABAP Platform CWE-79 | 6.1 | Medium | 2024-05-14 |
| CVE-2024-0870 | WordPress plugin YITH WooCommerce Gift Cards 安全漏洞 — YITH WooCommerce Gift Cards CWE-285 | 5.3 | Medium | 2024-05-14 |
| CVE-2023-6812 | WordPress plugin WP Compress 安全漏洞 — WP Compress – Instant Performance & Speed Optimization CWE-601 | 4.3 | Medium | 2024-05-14 |
| CVE-2024-34697 | FreeScout 注入漏洞 — freescout CWE-74 | 7.6 | High | 2024-05-13 |
| CVE-2024-29895 | Cacti 安全漏洞 — cacti CWE-77 | 10.0 | Critical | 2024-05-13 |
| CVE-2024-34749 | Phormer 安全漏洞 — Phormer | 6.1 | - | 2024-05-13 |
| CVE-2024-4560 | WordPress plugin Kognetiks Chatbot 安全漏洞 — Kognetiks Chatbot for WordPress CWE-434 | 9.8 | Critical | 2024-05-11 |
| CVE-2024-4213 | WordPress plugin Shopping Cart & eCommerce Store 安全漏洞 — Shopping Cart & eCommerce Store CWE-922 | 5.3 | Medium | 2024-05-10 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24777 条 CVE 漏洞。