access:pre-auth 类型相关 24777 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-3047 | WordPress plugin PDF Invoices & Packing Slips for WooCommerce 安全漏洞 — PDF Invoices & Packing Slips for WooCommerce CWE-918 | 7.2 | High | 2024-05-02 |
| CVE-2024-0847 | WordPress plugin 5280 Bootstrap Modal Contact Form 安全漏洞 — 5280 Bootstrap Modal Contact Form CWE-352 | 4.3 | Medium | 2024-05-02 |
| CVE-2024-3957 | WordPress plugin Booster for WooCommerce 安全漏洞 — Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools CWE-94 | 6.5 | Medium | 2024-05-02 |
| CVE-2024-3717 | WordPress plugin Contact Form 7 安全漏洞 — Drag and Drop Multiple File Upload for Contact Form 7 CWE-922 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-4083 | WordPress plugin Easy Restaurant Table Booking 安全漏洞 — Easy Restaurant Table Booking CWE-352 | 4.3 | Medium | 2024-05-02 |
| CVE-2024-3585 | WordPress plugin Send PDF for Contact Form 7 安全漏洞 — Send PDF for Contact Form 7 CWE-862 | 5.3 | Medium | 2024-05-02 |
| CVE-2023-6962 | WordPress plugin WP Meta SEO 安全漏洞 — WP Meta SEO CWE-1230 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-3544 | DELL ECS Connection Manager 安全漏洞 — LoadMaster CWE-798 | 7.5 | High | 2024-05-02 |
| CVE-2024-31964 | Mitel 6800 SIP 和 6900 SIP 安全漏洞 — n/a | 9.1 | - | 2024-05-02 |
| CVE-2024-31967 | Mitel 6800 SIP 和 6900 SIP 安全漏洞 — n/a | 9.1 | - | 2024-05-02 |
| CVE-2024-20376 | Cisco IP Phone 安全漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-787 | 7.5 | High | 2024-05-01 |
| CVE-2024-20378 | Cisco IP Phone 安全漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-305 | 7.5 | High | 2024-05-01 |
| CVE-2024-20357 | Cisco IP Phone 安全漏洞 — Cisco IP Phones with Multiplatform Firmware CWE-787 | 5.9 | Medium | 2024-05-01 |
| CVE-2024-33518 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33517 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33516 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33515 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33514 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.3 | Medium | 2024-05-01 |
| CVE-2024-33513 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 5.9 | Medium | 2024-05-01 |
| CVE-2023-49606 | Tinyproxy 资源管理错误漏洞 — Tinyproxy CWE-416 | 9.8 | Critical | 2024-05-01 |
| CVE-2024-33512 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2024-05-01 |
| CVE-2024-33511 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2024-05-01 |
| CVE-2024-26305 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2024-05-01 |
| CVE-2024-26304 | Aruba Networks ArubaOS 安全漏洞 — Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central | 9.8 | Critical | 2024-05-01 |
| CVE-2024-3591 | WordPress plugin Geo Controller 安全漏洞 — Geo Controller | 9.8AI | Critical AI | 2024-05-01 |
| CVE-2023-46295 | Teledyne FLIR M300 安全漏洞 — n/a | 9.8 | - | 2024-05-01 |
| CVE-2024-2663 | WordPress plugin ZD YouTube FLV Player 安全漏洞 — ZD YouTube FLV Player CWE-918 | 8.3 | High | 2024-04-30 |
| CVE-2024-4185 | WordPress plugin Customer Email Verification for WooCommerce 安全漏洞 — Customer Email Verification for WooCommerce CWE-330 | 8.1 | High | 2024-04-30 |
| CVE-2024-1371 | WordPress plugin LeadConnector 安全漏洞 — LeadConnector CWE-862 | 6.5 | Medium | 2024-04-30 |
| CVE-2024-4302 | Super 8 安全漏洞 — livechat SDK CWE-79 | 6.1 | Medium | 2024-04-29 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24777 条 CVE 漏洞。