access:pre-auth 类型相关 24775 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-2116 | WordPress Plugin Christmas Greetings 安全漏洞 — Christmas Greetings CWE-79 | 6.1 | Medium | 2024-03-29 |
| CVE-2024-2113 | WordPress Plugin Ninja Forms Contact Form 安全漏洞 — Ninja Forms – The Contact Form Builder That Grows With You CWE-352 | 4.3 | Medium | 2024-03-29 |
| CVE-2024-2970 | WordPress Plugin News Wall 安全漏洞 — News Wall CWE-352 | 4.3 | Medium | 2024-03-29 |
| CVE-2024-2969 | WordPress Plugin WP-Eggdrop 安全漏洞 — WP-Eggdrop CWE-352 | 5.4 | Medium | 2024-03-29 |
| CVE-2024-2844 | WordPress Plugin Easy Appointments 安全漏洞 — Easy Appointments CWE-862 | 4.3 | Medium | 2024-03-29 |
| CVE-2023-49231 | Stilog Visual Planning 8 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-03-29 |
| CVE-2023-49232 | Stilog Visual Planning 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-29 |
| CVE-2024-25954 | Dell PowerScale OneFS 代码问题漏洞 — PowerScale OneFS CWE-613 | 5.3 | Medium | 2024-03-28 |
| CVE-2024-25963 | Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS CWE-327 | 5.9 | Medium | 2024-03-28 |
| CVE-2024-2110 | WordPress Plugin Events Manager 跨站请求伪造漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! CWE-352 | 4.3 | Medium | 2024-03-28 |
| CVE-2024-20307 | 多款Cisco产品安全漏洞 — IOS CWE-121 | 6.8 | Medium | 2024-03-27 |
| CVE-2024-20308 | 多款Cisco产品安全漏洞 — IOS | 8.6 | High | 2024-03-27 |
| CVE-2024-20271 | Cisco Access Point 安全漏洞 — Cisco Aironet Access Point Software CWE-20 | 8.6 | High | 2024-03-27 |
| CVE-2024-20265 | Cisco Access Point 安全漏洞 — Cisco IOS XE Software CWE-501 | 5.9 | Medium | 2024-03-27 |
| CVE-2024-20303 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-459 | 7.4 | High | 2024-03-27 |
| CVE-2024-20314 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-783 | 8.6 | High | 2024-03-27 |
| CVE-2024-20312 | Cisco IOS 和 IOS XE Software 安全漏洞 — IOS CWE-476 | 7.4 | High | 2024-03-27 |
| CVE-2024-20259 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-122 | 8.6 | High | 2024-03-27 |
| CVE-2024-20276 | Cisco Catalyst 安全漏洞 — IOS CWE-248 | 7.4 | High | 2024-03-27 |
| CVE-2024-20311 | Cisco IOS 和 IOS XE Software 安全漏洞 — IOS CWE-674 | 8.6 | High | 2024-03-27 |
| CVE-2024-20316 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software CWE-390 | 5.8 | Medium | 2024-03-27 |
| CVE-2024-20354 | Cisco Aironet Access Point Software 安全漏洞 — Cisco Aironet Access Point Software CWE-460 | 4.7 | Medium | 2024-03-27 |
| CVE-2024-2962 | WordPress Theme Networker 安全漏洞 — Networker - Tech News WordPress Theme with Dark Mode CWE-862 | 5.3 | Medium | 2024-03-27 |
| CVE-2023-43768 | Couchbase Server 安全漏洞 — n/a | 7.5 | - | 2024-03-27 |
| CVE-2024-29833 | WordPress plugin PhotoGallery 安全漏洞 — PhotoGallery CWE-79 | 5.4 | Medium | 2024-03-26 |
| CVE-2024-28048 | ffBull 安全漏洞 — ffBull | 9.8AI | Critical AI | 2024-03-26 |
| CVE-2024-28033 | LunarNight Laboratory WebProxy 安全漏洞 — WebProxy | 9.8AI | Critical AI | 2024-03-26 |
| CVE-2023-7232 | WordPress Plugin Backup and Restore 安全漏洞 — Backup and Restore WordPress | 7.5AI | High AI | 2024-03-26 |
| CVE-2024-29199 | Nautobot 安全漏洞 — nautobot CWE-200 | 3.7 | Low | 2024-03-26 |
| CVE-2024-0866 | WordPress Plugin Check & Log Email 安全漏洞 — Check & Log Email – Easy Email Testing & Mail logging CWE-94 | 8.1 | High | 2024-03-26 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24775 条 CVE 漏洞。