access:pre-auth 类型相关 24775 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-25692 | Esri Portal For ArcGIS 跨站请求伪造漏洞 — Portal for ArcGIS CWE-352 | 5.4 | Medium | 2024-04-04 |
| CVE-2024-2759 | Apaczka 安全漏洞 — Apaczka CWE-552 | 5.3 | - | 2024-04-04 |
| CVE-2024-1418 | WordPress plugin CGC Maintenance Mode 安全漏洞 — CGC Maintenance Mode CWE-284 | 5.3 | Medium | 2024-04-04 |
| CVE-2024-29225 | ELECOM wireless LAN routers 安全漏洞 — WRC-X3200GST3-B | 6.5 | - | 2024-04-04 |
| CVE-2024-25568 | ELECOM wireless LAN routers 安全漏洞 — WRC-X3200GST3-B | 8.8 | - | 2024-04-04 |
| CVE-2024-20347 | Cisco Emergency Responder 安全漏洞 — Cisco Emergency Responder CWE-352 | 4.3 | Medium | 2024-04-03 |
| CVE-2024-20362 | Cisco Small Business 安全漏洞 — Cisco Small Business RV Series Router Firmware CWE-80 | 6.1 | Medium | 2024-04-03 |
| CVE-2024-20348 | Cisco Nexus Dashboard 安全漏洞 — Cisco Data Center Network Manager CWE-27 | 7.5 | High | 2024-04-03 |
| CVE-2024-20368 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software CWE-352 | 6.5 | Medium | 2024-04-03 |
| CVE-2024-20281 | Cisco Nexus Dashboard 安全漏洞 — Cisco Data Center Network Manager CWE-352 | 7.5 | High | 2024-04-03 |
| CVE-2024-20310 | Cisco Unified Communications Manager 安全漏洞 — Cisco IOS XE Software CWE-23 | 6.1 | Medium | 2024-04-03 |
| CVE-2024-0172 | Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 安全漏洞 — PowerEdge Platform CWE-269 | 7.9 | High | 2024-04-03 |
| CVE-2023-35764 | WordPress plugin Survey Maker 安全漏洞 — Survey Maker | 5.3 | - | 2024-04-03 |
| CVE-2024-2879 | WordPress Plugin LayerSlider SQL注入漏洞 — LayerSlider | 9.8 | Critical | 2024-04-03 |
| CVE-2023-44038 | VeridiumID 安全漏洞 — n/a | 7.5 | - | 2024-04-03 |
| CVE-2023-44039 | VeridiumID 安全漏洞 — n/a | 9.8 | - | 2024-04-03 |
| CVE-2023-44040 | VeridiumID 安全漏洞 — n/a | 6.1 | - | 2024-04-03 |
| CVE-2024-22246 | VMware SD-WAN 安全漏洞 — VMware SD-WAN Edge | 7.4 | High | 2024-04-02 |
| CVE-2024-2389 | Progress Flowmon 安全漏洞 — Flowmon CWE-78 | 10.0 | Critical | 2024-04-02 |
| CVE-2024-1807 | WordPress plugin Product Sort and Display for WooCommerce 安全漏洞 — Product Sort and Display for WooCommerce CWE-862 | 6.5 | Medium | 2024-04-02 |
| CVE-2024-1732 | WordPress Plugin Sharkdropship for AliExpress Dropshipping and Affiliate 安全漏洞 — Sharkdropship & affiliate for AliExpress CWE-862 | 5.3 | Medium | 2024-04-02 |
| CVE-2024-1504 | WordPress Plugin SecuPress Free — WordPress Security 安全漏洞 — SecuPress with Simple SSL – Simple and Performant Security CWE-352 | 4.3 | Medium | 2024-04-02 |
| CVE-2024-25187 | 71cms 安全漏洞 — n/a | 7.5AI | High AI | 2024-04-02 |
| CVE-2023-41724 | Ivanti Sentry 安全漏洞 — Sentry | 8.8AI | High AI | 2024-03-31 |
| CVE-2024-25944 | Dell OpenManage Enterprise 安全漏洞 — Dell OpenManage Enterprise CWE-23 | 5.7 | Medium | 2024-03-29 |
| CVE-2024-2848 | WordPress Plugin Responsive 安全漏洞 — Responsive CWE-862 | 7.5 | High | 2024-03-29 |
| CVE-2024-2409 | WordPress Plugin MasterStudy LMS 安全漏洞 — MasterStudy LMS WordPress Plugin – for Online Courses and Education CWE-266 | 9.8 | Critical | 2024-03-29 |
| CVE-2024-2411 | WordPress Plugin MasterStudy LMS 安全漏洞 — MasterStudy LMS WordPress Plugin – for Online Courses and Education CWE-98 | 9.8 | Critical | 2024-03-29 |
| CVE-2024-2964 | WordPress Plugin Pocket News Generator 安全漏洞 — Pocket News Generator CWE-352 | 5.4 | Medium | 2024-03-29 |
| CVE-2024-0609 | WordPress Plugin WP ERP 安全漏洞 — ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support CWE-79 | 7.2 | High | 2024-03-29 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24775 条 CVE 漏洞。