access:pre-auth 类型相关 24771 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-22024 | Ivanti Connect Secure和Ivanti Policy Secure 代码问题漏洞 — ICS | 9.1 | - | 2024-02-13 |
| CVE-2024-24743 | SAP NetWeaver AS 代码问题漏洞 — SAP NetWeaver AS Java (Guided Procedures) CWE-611 | 8.6 | High | 2024-02-13 |
| CVE-2024-22128 | SAP NetWeaver Business Client for HTML 安全漏洞 — SAP NetWeaver Business Client for HTML CWE-79 | 4.7 | Medium | 2024-02-13 |
| CVE-2024-0250 | WordPress Plugin Analytics Insights for Google Analytics 4 (AIWP) 安全漏洞 — Analytics Insights for Google Analytics 4 (AIWP) | 6.1 | - | 2024-02-12 |
| CVE-2024-0421 | WordPress Plugin MapPress Maps 安全漏洞 — MapPress Maps for WordPress | 5.3 | - | 2024-02-12 |
| CVE-2023-50292 | Apache Solr 安全漏洞 — Apache Solr CWE-732 | 9.8 | - | 2024-02-09 |
| CVE-2024-0842 | WordPress Plugin Backuply 安全漏洞 — Backuply – Backup, Restore, Migrate and Clone CWE-400 | 7.5 | High | 2024-02-09 |
| CVE-2024-1122 | WordPress Plugin Eventin 安全漏洞 — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 | 5.3 | Medium | 2024-02-09 |
| CVE-2023-43609 | Emerson Rosemount GC370XA、GC700XA、GC1500XA 安全漏洞 — Rosemount GC370XA CWE-863 | 6.9 | Medium | 2024-02-09 |
| CVE-2023-46687 | Emerson Rosemount GC370XA、GC700XA、GC1500XA 命令注入漏洞 — Rosemount GC370XA CWE-77 | 9.8 | Critical | 2024-02-09 |
| CVE-2023-51761 | Emerson Rosemount GC370XA、GC700XA、GC1500XA 授权问题漏洞 — Rosemount GC370XA CWE-863 | 8.3 | High | 2024-02-09 |
| CVE-2024-0965 | WordPress Plugin Simple Page Access Restriction 安全漏洞 — Simple Page Access Restriction CWE-284 | 5.3 | Medium | 2024-02-08 |
| CVE-2024-1207 | WordPress Plugin WP Booking Calendar SQL注入漏洞 — Booking Calendar CWE-89 | 9.8 | Critical | 2024-02-08 |
| CVE-2024-0511 | WordPress Plugin Royal Elementor Addons and Templates 跨站请求伪造漏洞 — Royal Addons for Elementor – Addons and Templates Kit for Elementor CWE-352 | 4.3 | Medium | 2024-02-08 |
| CVE-2023-40262 | Atos Unify OpenScape 跨站脚本漏洞 — n/a | 6.1 | - | 2024-02-08 |
| CVE-2024-23756 | Plone 安全漏洞 — n/a | 9.1 | - | 2024-02-08 |
| CVE-2023-6536 | Linux kernel 安全漏洞 — Red Hat Enterprise Linux 8 CWE-476 | 6.5 | Medium | 2024-02-07 |
| CVE-2023-6356 | Linux kernel 安全漏洞 — Red Hat Enterprise Linux 8 CWE-476 | 6.5 | Medium | 2024-02-07 |
| CVE-2023-6535 | Linux kernel 安全漏洞 — Red Hat Enterprise Linux 8 CWE-476 | 6.5 | Medium | 2024-02-07 |
| CVE-2024-20290 | Cisco Secure Endpoint 缓冲区错误漏洞 — Cisco Secure Endpoint CWE-126 | 7.5 | High | 2024-02-07 |
| CVE-2024-20255 | Cisco Expressway Series 跨站请求伪造漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-352 | 8.2 | High | 2024-02-07 |
| CVE-2024-20254 | Cisco Expressway Series 跨站请求伪造漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-352 | 9.6 | Critical | 2024-02-07 |
| CVE-2024-20252 | Cisco Expressway Series 跨站请求伪造漏洞 — Cisco TelePresence Video Communication Server (VCS) Expressway CWE-352 | 9.6 | Critical | 2024-02-07 |
| CVE-2024-24811 | SQLAlchemy SQL注入漏洞 — Products.SQLAlchemyDA CWE-89 | 9.8 | Critical | 2024-02-07 |
| CVE-2024-1109 | WordPress Plugin Podlove Podcast Publisher 安全漏洞 — Podlove Podcast Publisher CWE-862 | 5.3 | Medium | 2024-02-07 |
| CVE-2024-1110 | WordPress Plugin Podlove Podcast Publisher 安全漏洞 — Podlove Podcast Publisher CWE-862 | 5.3 | Medium | 2024-02-07 |
| CVE-2024-1079 | WordPress Plugin Quiz Maker 安全漏洞 — Quiz Maker CWE-862 | 5.3 | Medium | 2024-02-07 |
| CVE-2024-1037 | WordPress Plugin All-In-One Security 跨站脚本漏洞 — All-In-One Security (AIOS) – Security and Firewall CWE-79 | 6.1 | Medium | 2024-02-07 |
| CVE-2024-23304 | Cybozu KUNAI 安全漏洞 — Cybozu KUNAI for Android | 7.5 | - | 2024-02-06 |
| CVE-2023-46359 | eCharge Hardy Barth eCharge Ladestation 安全漏洞 — n/a | 9.8 | - | 2024-02-06 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24771 条 CVE 漏洞。