access:pre-auth 类型相关 24771 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-21865 | KDDI HGW BL1500HM 安全漏洞 — HGW BL1500HM CWE-1391 | 8.8AI | High AI | 2024-03-25 |
| CVE-2024-29071 | KDDI HGW BL1500HM 安全漏洞 — HGW BL1500HM CWE-1391 | 6.5AI | Medium AI | 2024-03-25 |
| CVE-2024-28041 | KDDI HGW BL1500HM 安全漏洞 — HGW BL1500HM | 8.8AI | High AI | 2024-03-25 |
| CVE-2024-2326 | WordPress Plugin Pretty Links 安全漏洞 — PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin CWE-352 | 4.3 | Medium | 2024-03-23 |
| CVE-2024-0957 | WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 安全漏洞 — WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels CWE-79 | 6.1 | Medium | 2024-03-22 |
| CVE-2024-29272 | VvvebJs 安全漏洞 — n/a | 9.8 | - | 2024-03-22 |
| CVE-2024-29275 | SeaCMS 安全漏洞 — n/a | 9.8 | - | 2024-03-22 |
| CVE-2024-29385 | D-Link DIR-845L 安全漏洞 — n/a | 9.8 | - | 2024-03-22 |
| CVE-2024-29732 | Abast SCAN_VISIO eDocument Suite Web Viewer 安全漏洞 — SCAN_VISIO eDocument Suite Web Viewer CWE-89 | 9.8 | Critical | 2024-03-21 |
| CVE-2024-1538 | WordPress Plugin File Manager 安全漏洞 — File Manager CWE-352 | 8.8 | High | 2024-03-21 |
| CVE-2023-48901 | Autoexpress 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-21 |
| CVE-2023-48902 | Autoexpress 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-21 |
| CVE-2023-48903 | AutoExpress 安全漏洞 — n/a | 6.1AI | Medium AI | 2024-03-21 |
| CVE-2024-28179 | Jupyter Server 安全漏洞 — jupyter-server-proxy CWE-306 | 9.1 | Critical | 2024-03-20 |
| CVE-2024-1711 | WordPress Plugin Create by Mediavine 安全漏洞 — Create CWE-89 | 9.8 | Critical | 2024-03-20 |
| CVE-2024-1379 | WordPress Plugin Website Article Monetization By MageNet 安全漏洞 — Website Article Monetization By MageNet CWE-79 | 6.1 | Medium | 2024-03-20 |
| CVE-2024-1325 | WordPress Plugin Woomotiv 安全漏洞 — Live Sales Notification for Woocommerce – Woomotiv CWE-352 | 4.3 | Medium | 2024-03-20 |
| CVE-2024-1119 | WordPress Plugin Order Tip for WooCommerce 安全漏洞 — Order Tip for WooCommerce CWE-862 | 5.3 | Medium | 2024-03-20 |
| CVE-2024-1181 | WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler 安全漏洞 — Coming Soon, Under Construction & Maintenance Mode By Dazzler CWE-862 | 5.3 | Medium | 2024-03-20 |
| CVE-2024-1473 | WordPress Plugin Coming Soon & Maintenance Mode by Colorlib 安全漏洞 — Coming Soon & Maintenance Mode by Colorlib CWE-284 | 5.3 | Medium | 2024-03-20 |
| CVE-2024-0337 | WordPress Plugin Travelpayouts 安全漏洞 — Travelpayouts: All Travel Brands in One Place | 6.1AI | Medium AI | 2024-03-20 |
| CVE-2024-1785 | WordPress Plugin Contests 安全漏洞 — Contests by Rewards Fuel CWE-352 | 5.4 | Medium | 2024-03-20 |
| CVE-2024-2387 | WordPress Plugin Advanced Form Integration 安全漏洞 — AFI – The Easiest Integration Plugin CWE-89 | 6.1 | Medium | 2024-03-20 |
| CVE-2024-22080 | Elspec G5 digital fault recorder 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-20 |
| CVE-2024-22081 | Elspec G5 digital fault recorder 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-03-20 |
| CVE-2024-22082 | Elspec G5 digital fault recorder 安全漏洞 — n/a | 5.3AI | Medium AI | 2024-03-20 |
| CVE-2024-2169 | User Datagram Protocol 安全漏洞 — RouterOS-TFTP | 7.5AI | High AI | 2024-03-19 |
| CVE-2024-21677 | Atlassian Confluence Server 安全漏洞 — Confluence Data Center | 8.3AI | High AI | 2024-03-19 |
| CVE-2024-1144 | Devklans Alma 安全漏洞 — Alma Blog CWE-284 | 6.5 | Medium | 2024-03-19 |
| CVE-2023-40276 | OpenClinic GA 安全漏洞 — n/a | 7.5AI | High AI | 2024-03-19 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24771 条 CVE 漏洞。