access:pre-auth 类型相关 24771 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-2053 | Artica Proxy 安全漏洞 — Artica Proxy CWE-23 | 9.8AI | Critical AI | 2024-03-05 |
| CVE-2024-2188 | TP-LINK AX50 跨站脚本漏洞 — Archer AX50 CWE-79 | 6.1 | Medium | 2024-03-05 |
| CVE-2023-45598 | AiLux imx6 安全漏洞 — imx6 bundle CWE-425 | 5.3 | Medium | 2024-03-05 |
| CVE-2023-45596 | AiLux imx6 安全漏洞 — imx6 bundle CWE-425 | 5.3 | Medium | 2024-03-05 |
| CVE-2023-5457 | AiLux imx6 安全漏洞 — imx6 bundle CWE-1269 | 7.5 | High | 2024-03-05 |
| CVE-2023-5456 | AiLux imx6 安全漏洞 — imx6 bundle CWE-798 | 8.1 | High | 2024-03-05 |
| CVE-2024-1093 | WordPress Plugin Change Memory Limit 安全漏洞 — Change Memory Limit CWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1769 | WordPress Plugin JM Twitter Cards 安全漏洞 — JM Twitter Cards CWE-200 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1088 | WordPress Plugin Password Protected Store for WooCommerce 安全漏洞 — Password Protected Store for WooCommerce CWE-284 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1095 | WordPress Plugin Build & Control Block Patterns 安全漏洞 — Build & Control Block Patterns – Boost up Gutenberg Editor CWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1478 | WordPress Plugin Maintenance Mode 安全漏洞 — Maintenance Mode CWE-284 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1782 | WordPress Plugin Blue Triad EZAnalytics 安全漏洞 — Blue Triad EZAnalytics CWE-79 | 6.1 | Medium | 2024-03-05 |
| CVE-2024-1178 | WordPress Plugin SportsPress 安全漏洞 — SportsPress – Sports Club & League Manager CWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-25164 | IDURAR ERP/CRM 安全漏洞 — n/a | 7.5AI | High AI | 2024-03-04 |
| CVE-2024-25016 | IBM MQ 输入验证错误漏洞 — MQ CWE-20 | 7.5 | High | 2024-03-03 |
| CVE-2023-6326 | WordPress Plugin Master Slider 安全漏洞 — Master Slider – Responsive Touch Slider CWE-352 | 5.4 | Medium | 2024-03-02 |
| CVE-2024-0378 | WordPress Plugin AI Engine 安全漏洞 — AI Engine – The Chatbot, AI Framework & MCP for WordPress CWE-79 | 6.5 | Medium | 2024-03-02 |
| CVE-2024-1775 | WordPress Plugin Nextend Social Login and Register 安全漏洞 — Nextend Social Login and Register CWE-79 | 5.4 | Medium | 2024-03-02 |
| CVE-2024-1592 | WordPress Plugin Complianz 安全漏洞 — Complianz – GDPR/CCPA Cookie Consent CWE-352 | 4.3 | Medium | 2024-03-02 |
| CVE-2024-22182 | Commend WS203VICM 参数注入漏洞 — WS203VICM CWE-88 | 8.6 | High | 2024-03-01 |
| CVE-2024-27296 | Directus 安全漏洞 — directus CWE-200 | 5.3 | Medium | 2024-03-01 |
| CVE-2024-27139 | Apache Archiva 安全漏洞 — Apache Archiva CWE-863 | 9.1 | - | 2024-03-01 |
| CVE-2024-22458 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway (SCG) 5.0 Appliance - SRS CWE-327 | 3.7 | Low | 2024-03-01 |
| CVE-2024-1120 | WordPress Plugin NextMove Lite 安全漏洞 — Finale Lite – Sales Countdown Timer & Discount for WooCommerce CWE-862 | 5.3 | Medium | 2024-03-01 |
| CVE-2024-25972 | ATSUMI Electric OET-213H-BTS1 安全漏洞 — OET-213H-BTS1 | 8.1 | - | 2024-03-01 |
| CVE-2024-0692 | SolarWinds Security Event Manager 代码问题漏洞 — Security Event Manager CWE-502 | 8.8 | High | 2024-03-01 |
| CVE-2024-1981 | WordPress Plugin Migration, Backup, Staging 安全漏洞 — Migration, Backup, Staging – WPvivid | 9.8 | Critical | 2024-02-29 |
| CVE-2024-1982 | WordPress Plugin Migration, Backup, Staging 安全漏洞 — WPvivid — Backup, Migration & Staging CWE-862 | 6.5 | Medium | 2024-02-29 |
| CVE-2024-1976 | WordPress Plugin Marketing Optimizer plugin for WordPress 安全漏洞 — Marketing Optimizer CWE-352 | 4.3 | Medium | 2024-02-29 |
| CVE-2023-38367 | IBM Cloud Pak for Automation 安全漏洞 — Cloud Pak for Automation | 6.5 | Medium | 2024-02-29 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24771 条 CVE 漏洞。