access:pre-auth 类型相关 24771 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-25999 | PHOENIX CONTACT CHARX SEC 输入验证错误漏洞 — CHARX SEC-3000 CWE-20 | 8.4 | High | 2024-03-12 |
| CVE-2024-25998 | PHOENIX CONTACT CHARX SEC-3000 输入验证错误漏洞 — CHARX SEC-3000 CWE-77 | 7.3 | High | 2024-03-12 |
| CVE-2024-25997 | Phoenix Contact CHARX SEC-3000 输入验证错误漏洞 — CHARX SEC-3000 CWE-20 | 5.3 | Medium | 2024-03-12 |
| CVE-2024-25996 | PHOENIX CONTACT CHARX SEC 访问控制错误漏洞 — CHARX SEC-3000 CWE-346 | 5.3 | Medium | 2024-03-12 |
| CVE-2024-25995 | PHOENIX CONTACT CHARX SEC-3000 访问控制错误漏洞 — CHARX SEC-3000 CWE-20 | 9.8 | Critical | 2024-03-12 |
| CVE-2024-25994 | PHOENIX CONTACT CHARX SEC 输入验证错误漏洞 — CHARX SEC-3000 CWE-434 | 5.3 | Medium | 2024-03-12 |
| CVE-2024-25331 | D-Link DIR-822 和DIR-822-CA 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-12 |
| CVE-2023-6444 | WordPress Plugin Seriously Simple Podcasting 安全漏洞 — Seriously Simple Podcasting | 5.3AI | Medium AI | 2024-03-11 |
| CVE-2024-1320 | WordPress Plugin EventPrime 安全漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-79 | 6.5 | Medium | 2024-03-09 |
| CVE-2024-1123 | WordPress Plugin EventPrime 安全漏洞 — EventPrime – Events Calendar, Bookings and Tickets CWE-862 | 6.5 | Medium | 2024-03-09 |
| CVE-2024-23255 | Apple macOS Sonoma 安全漏洞 — iOS and iPadOS | 7.5AI | High AI | 2024-03-08 |
| CVE-2024-23273 | Apple Safari 安全漏洞 — Safari | 7.5AI | High AI | 2024-03-08 |
| CVE-2024-23240 | Apple iOS 和 iPadOS 安全漏洞 — iOS and iPadOS | - | - | 2024-03-08 |
| CVE-2024-23295 | Apple visionOS 安全漏洞 — visionOS | 9.1AI | Critical AI | 2024-03-08 |
| CVE-2024-26309 | Archer Platform 安全漏洞 — n/a | 5.3 | Medium | 2024-03-08 |
| CVE-2024-2044 | pgAdmin 安全漏洞 — pgAdmin 4 | 9.9 | Critical | 2024-03-07 |
| CVE-2024-0203 | WordPress plugins Digits 安全漏洞 — Digits: WordPress Mobile Number Signup and Login | 8.8 | High | 2024-03-07 |
| CVE-2024-1169 | WordPress Plugin buddyforms 安全漏洞 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) CWE-862 | 7.5 | High | 2024-03-07 |
| CVE-2024-1170 | WordPress Plugin buddyforms 安全漏洞 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) CWE-862 | 8.2 | High | 2024-03-07 |
| CVE-2024-1720 | WordPress Plugin User Registration 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-79 | 4.7 | Medium | 2024-03-07 |
| CVE-2023-51395 | Z-Wave 安全漏洞 — Z-Wave SDK CWE-787 | 8.8 | High | 2024-03-07 |
| CVE-2024-28213 | nGrinder 安全漏洞 — nGrinder CWE-502 | 9.8AI | Critical AI | 2024-03-07 |
| CVE-2024-28222 | Veritas NetBackup 安全漏洞 — n/a | 9.8 | Critical | 2024-03-07 |
| CVE-2023-33676 | Lost and Found Information System 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-03-07 |
| CVE-2024-20337 | Cisco Secure Client 安全漏洞 — Cisco Secure Client CWE-93 | 8.2 | High | 2024-03-06 |
| CVE-2024-1760 | WordPress Plugin Appointment Booking Calendar 安全漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin CWE-352 | 4.3 | Medium | 2024-03-06 |
| CVE-2023-33677 | Lost and Found Information System SQL注入漏洞 — n/a | 9.8AI | Critical AI | 2024-03-06 |
| CVE-2020-26942 | Axigen 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-03-06 |
| CVE-2024-25615 | Aruba Networks ArubaOS 安全漏洞 — ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | 5.3 | Medium | 2024-03-05 |
| CVE-2024-2054 | Artica Proxy 代码问题漏洞 — Artica Proxy CWE-502 | 9.8 | - | 2024-03-05 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24771 条 CVE 漏洞。