access:pre-auth 类型相关 24777 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-32049 | F5 BIG-IP 安全漏洞 — BIG-IP Next Central Manager CWE-300 | 7.4 | High | 2024-05-08 |
| CVE-2024-4135 | WordPress plugin WP Latest Posts 安全漏洞 — WP Latest Posts CWE-94 | 5.4 | Medium | 2024-05-08 |
| CVE-2024-4393 | WordPress plugin Social Connect 安全漏洞 — Social Connect CWE-288 | 9.8 | Critical | 2024-05-08 |
| CVE-2023-7240 | NetIQ Identity Console 安全漏洞 — NetIQ Identity Console CWE-20 | 5.8 | Medium | 2024-05-07 |
| CVE-2024-4345 | WordPress plugin Startklar Elementor Addons 安全漏洞 — Startklar Elementor Addons CWE-434 | 9.8 | Critical | 2024-05-07 |
| CVE-2024-4346 | WordPress plugin Startklar Elementor Addons 安全漏洞 — Startklar Elementor Addons CWE-22 | 9.1 | Critical | 2024-05-07 |
| CVE-2024-4186 | WordPress plugin Build App Online 安全漏洞 — Edwiser Bridge – WordPress Moodle Integration CWE-288 | 9.8 | Critical | 2024-05-07 |
| CVE-2024-34523 | AChecker 安全漏洞 — n/a | 7.5AI | High AI | 2024-05-07 |
| CVE-2024-4548 | Delta Electronics DIAEnergie SQL注入漏洞 — DIAEnergie CWE-20 | 9.8 | Critical | 2024-05-06 |
| CVE-2024-4547 | Delta Electronics DIAEnergie SQL注入漏洞 — DIAEnergie CWE-20 | 9.8 | Critical | 2024-05-06 |
| CVE-2023-49676 | CODESYS Development System 资源管理错误漏洞 — CODESYS Development System V2.3 CWE-416 | 5.5 | Medium | 2024-05-06 |
| CVE-2023-49675 | CODESYS Development System 缓冲区错误漏洞 — CODESYS Development System V2.3 CWE-787 | 7.8 | High | 2024-05-06 |
| CVE-2024-34093 | Archer Platform 安全漏洞 — n/a | 5.3 | Medium | 2024-05-06 |
| CVE-2024-34470 | HSC Cybersecurity HC Mailinspector 路径遍历漏洞 — n/a | 7.5AI | High AI | 2024-05-06 |
| CVE-2023-7065 | WordPress plugin Stop Spammers Security 安全漏洞 — Stop Spammers Classic CWE-352 | 5.4 | Medium | 2024-05-04 |
| CVE-2024-4439 | WordPress 跨站脚本漏洞 — WordPress | 7.2 | High | 2024-05-03 |
| CVE-2023-50202 | D-Link G416 安全漏洞 — G416 CWE-78 | 8.8 | - | 2024-05-03 |
| CVE-2023-39467 | Triangle MicroWorks SCADA Data Gateway 安全漏洞 — SCADA Data Gateway CWE-219 | 7.5 | - | 2024-05-03 |
| CVE-2024-3473 | WordPress Plugin Header Footer Code Manager Pro 跨站脚本漏洞 — Header Footer Code Manager Pro CWE-79 | 6.1 | Medium | 2024-05-02 |
| CVE-2024-3681 | WordPress Plugin Interactive World Maps 跨站脚本漏洞 — Interactive World Maps CWE-79 | 6.1 | Medium | 2024-05-02 |
| CVE-2024-4097 | WordPress Plugin Cost Calculator Builder Pro 跨站脚本漏洞 — Cost Calculator Builder PRO CWE-79 | 7.2 | High | 2024-05-02 |
| CVE-2024-0710 | WordPress Plugin GP Unique ID 安全漏洞 — GP Unique ID CWE-20 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-3601 | WordPress plugin Poll Maker 安全漏洞 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls CWE-862 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-2667 | WordPress plugin InstaWP Connect 安全漏洞 — InstaWP Connect – 1-click WP Staging & Migration CWE-434 | 9.8 | Critical | 2024-05-02 |
| CVE-2024-3553 | WordPress plugin Tutor LMS 安全漏洞 — Tutor LMS – eLearning and online course solution CWE-862 | 6.5 | Medium | 2024-05-02 |
| CVE-2024-4086 | WordPress plugin CM Tooltip Glossary 安全漏洞 — CM Tooltip Glossary CWE-352 | 4.3 | Medium | 2024-05-02 |
| CVE-2024-2960 | WordPress plugin SVS Pricing Tables 安全漏洞 — SVS Pricing Tables CWE-352 | 4.3 | Medium | 2024-05-02 |
| CVE-2024-3897 | WordPress plugin Popup Box 安全漏洞 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups CWE-862 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-2876 | WordPress Plugin email-subscribers SQL注入漏洞 — Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress CWE-89 | 9.8 | Critical | 2024-05-02 |
| CVE-2024-1415 | WordPress plugin Responsive Contact Form Builder & Lead Generation 安全漏洞 — Lead Form Builder & Contact Form CWE-352 | 4.3 | Medium | 2024-05-02 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24777 条 CVE 漏洞。