目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24771

access:pre-auth 类型相关 24771 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-1064 Crafty Controller 安全漏洞 — Crafty Controller CWE-644 7.5 High 2024-02-03
CVE-2024-0909 WordPress plugin Anonymous Restricted Content 安全漏洞 — Anonymous Restricted Content CWE-200 5.3 Medium 2024-02-03
CVE-2022-34381 Dell BSAFE 安全漏洞 — Dell BSAFE Crypto-J CWE-1329 9.1 Critical 2024-02-02
CVE-2024-1047 WordPress plugin Orbit Fox by ThemeIsle 安全漏洞 — Menu Icons by ThemeIsle CWE-862 5.3 Medium 2024-02-02
CVE-2024-1162 WordPress plugin Orbit Fox by ThemeIsle 安全漏洞 — Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More CWE-352 4.3 Medium 2024-02-02
CVE-2024-0685 WordPress plugin Ninja Forms Contact Form 安全漏洞 — Ninja Forms – The Contact Form Builder That Grows With You CWE-89 5.9 Medium 2024-02-02
CVE-2024-22108 GTB Central Console 安全漏洞 — n/a 9.8 - 2024-02-02
CVE-2023-49115 MachineSense FeverWarn 访问控制错误漏洞 — FeverWarn CWE-306 7.5 High 2024-02-01
CVE-2023-49617 MachineSense FeverWarn 访问控制错误漏洞 — FeverWarn CWE-306 10.0 Critical 2024-02-01
CVE-2023-4472 Objectplanet Opinio 安全漏洞 — Opinio CWE-335 9.8 - 2024-02-01
CVE-2024-22433 Dell Data Protection Search 安全漏洞 — Data Protection Search CWE-538 8.8 High 2024-02-01
CVE-2024-24548 Payment EX 安全漏洞 — Payment EX 5.3 - 2024-02-01
CVE-2024-21893 Ivanti Connect Secure 代码问题漏洞 — ICS 9.8 - 2024-01-31
CVE-2023-50166 Pegasystem PEGA Platform 安全漏洞 — Pega Platform CWE-79 6.1 Medium 2024-01-31
CVE-2023-50356 AREAL Topkapi 信任管理问题漏洞 — Topkapi Vision (Server) CWE-295 6.5 Medium 2024-01-31
CVE-2023-6943 Mitsubishi Electric 多款产品安全漏洞 — EZSocket CWE-470 9.8 Critical 2024-01-30
CVE-2023-6942 Mitsubishi Electric 多款产品安全漏洞 — EZSocket CWE-306 7.5 High 2024-01-30
CVE-2023-6374 Mitsubishi Electric MELSEC WS Series 安全漏洞 — MELSEC WS Series WS0-GETH00200 CWE-294 5.9 Medium 2024-01-30
CVE-2024-1061 WordPress Plugin HTML5 Video Player SQL注入漏洞 CWE-89 8.6 High 2024-01-30
CVE-2023-4553 OpenText AppBuilder 安全漏洞 — AppBuilder CWE-20 5.3 Medium 2024-01-29
CVE-2023-4550 OpenText AppBuilder 安全漏洞 — AppBuilder CWE-20 7.5 High 2024-01-29
CVE-2023-7199 WordPress plugin Relevanssi 安全漏洞 — Relevanssi 7.5 - 2024-01-29
CVE-2023-6389 WordPress plugin WordPress Toolbar 安全漏洞 — WordPress Toolbar 6.1 - 2024-01-29
CVE-2023-6200 Linux Kernel 安全漏洞 — kernel CWE-362 7.5 High 2024-01-28
CVE-2024-0667 WordPress plugin Form Maker by 10Web 安全漏洞 — Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder CWE-1078 5.4 Medium 2024-01-27
CVE-2024-20253 Cisco Unified Communications Products 安全漏洞 — Cisco Unified Contact Center Enterprise CWE-502 9.9 Critical 2024-01-26
CVE-2024-20263 Cisco Small Business 安全漏洞 — Cisco Small Business Smart and Managed Switches CWE-284 5.8 Medium 2024-01-26
CVE-2024-22545 TRENDnet TEW-824DRU 安全漏洞 — n/a 9.8 - 2024-01-26
CVE-2024-23625 D-Link DAP-1650 命令注入漏洞 — DAP-1650 CWE-77 9.6 Critical 2024-01-25
CVE-2024-23624 D-Link DAP-1650 命令注入漏洞 — DAP-1650 CWE-77 9.6 Critical 2024-01-25

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24771 条 CVE 漏洞。