access:pre-auth 类型相关 24644 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-4315 | WordPress plugin Woo Custom Emails 跨站脚本漏洞 — Woo Custom Emails CWE-79 | 6.1 | Medium | 2023-08-31 |
| CVE-2023-3162 | WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞 — Payment Gateway of Stripe for WooCommerce CWE-288 | 9.8 | Critical | 2023-08-31 |
| CVE-2023-4161 | WordPress plugin WooCommerce PDF Invoice Builder 跨站请求伪造漏洞 — PDF Builder for WooCommerce. Create invoices,packing slips and more CWE-352 | 4.3 | Medium | 2023-08-31 |
| CVE-2023-31424 | Broadcom Brocade SANnav 安全漏洞 — SANnav CWE-290 | 8.1 | High | 2023-08-31 |
| CVE-2023-3136 | WordPress plugin MailArchiver 跨站脚本漏洞 — MailArchiver CWE-79 | 7.2 | High | 2023-08-30 |
| CVE-2023-4596 | WordPress plugin Forminator 代码问题漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder CWE-434 | 9.8 | Critical | 2023-08-30 |
| CVE-2023-39268 | Aruba Networks ArubaOS 缓冲区错误漏洞 — ArubaOS-Switch | 4.5 | Medium | 2023-08-29 |
| CVE-2023-39266 | Aruba Networks ArubaOS 跨站脚本漏洞 — ArubaOS-Switch | 8.3 | High | 2023-08-29 |
| CVE-2023-41266 | Qlik Sense 输入验证错误漏洞 — n/a | 8.2 | High | 2023-08-29 |
| CVE-2023-38030 | Saho ADM100和ADM-100FP 访问控制错误漏洞 — ADM100 CWE-306 | 7.5 | High | 2023-08-28 |
| CVE-2023-38029 | Saho ADM100 、ADM-100FP 代码问题漏洞 — ADM100 CWE-434 | 9.8 | Critical | 2023-08-28 |
| CVE-2023-38028 | Saho ADM100 、ADM-100FP 访问控制错误漏洞 — ADM100 CWE-306 | 9.1 | Critical | 2023-08-28 |
| CVE-2023-38027 | SpotCam Sense 命令注入漏洞 — SpotCam Sense CWE-78 | 9.8 | Critical | 2023-08-28 |
| CVE-2023-38025 | SpotCam Sense 操作系统命令注入漏洞 — SpotCam FHD 2 | 9.8 | Critical | 2023-08-28 |
| CVE-2023-38024 | SpotCam Sense 信任管理问题漏洞 — SpotCam FHD 2 CWE-798 | 9.8 | Critical | 2023-08-28 |
| CVE-2023-41109 | SySS SmartNode SN200 操作系统命令注入漏洞 — n/a | 9.8 | - | 2023-08-28 |
| CVE-2023-40585 | Metal3 Ironic Container 访问控制错误漏洞 — ironic-image CWE-306 | 7.3 | High | 2023-08-25 |
| CVE-2023-3425 | M-Files 缓冲区错误漏洞 — M-Files Server CWE-125 | 6.5 | Medium | 2023-08-25 |
| CVE-2023-32757 | e-Excellence U-Office Force 代码问题漏洞 — U-Office Force CWE-434 | 9.8 | Critical | 2023-08-25 |
| CVE-2023-32756 | e-Excellence U-Office Force 路径遍历漏洞 — U-Office Force CWE-22 | 7.5 | High | 2023-08-25 |
| CVE-2023-32755 | e-Excellence U-Office Force 安全漏洞 — U-Office Force CWE-209 | 5.3 | Medium | 2023-08-25 |
| CVE-2023-4520 | WordPress plugin FV Flowplayer Video Player 跨站脚本漏洞 — FV Flowplayer Video Player CWE-79 | 5.4 | Medium | 2023-08-25 |
| CVE-2023-40599 | SYNCK GRAPHICA Mailform Pro CGI 安全漏洞 — Mailform Pro CGI | 7.5 | - | 2023-08-25 |
| CVE-2023-40570 | Datasette 安全漏洞 — datasette CWE-213 | 5.3 | Medium | 2023-08-25 |
| CVE-2023-39289 | Mitel MiVoice Connect 安全漏洞 — n/a | 4.3 | - | 2023-08-25 |
| CVE-2023-3705 | CP-Plus DVR 安全漏洞 — CP-VNR-3104, CP-VNR-3108, CP-VNR-3208 CWE-200 | 7.5 | High | 2023-08-24 |
| CVE-2023-3704 | CP-Plus DVR 输入验证错误漏洞 — CP-UVR-1601E1-HC, CP-UVR-1601E2-H, CP-UVR-1601E1-H, CP-UVR-0801F1-HC, CP-UVR-0801K1-H, CP-UVR-0801K1B-H, CP-UVR-0808K1-H, CP-UVR-0401L1-4KH, CP-UVR-0401L1B-4KH | 5.3 | Medium | 2023-08-24 |
| CVE-2023-20169 | Cisco 多款产品输入验证错误漏洞 — Cisco NX-OS Software CWE-788 | 7.4 | High | 2023-08-23 |
| CVE-2023-20168 | Cisco NX-OS Software 输入验证错误漏洞 — Cisco NX-OS Software CWE-120 | 7.1 | High | 2023-08-23 |
| CVE-2023-4404 | WordPress Plugin Donation Forms by Charitable 安全漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More CWE-269 | 9.8 | Critical | 2023-08-23 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24644 条 CVE 漏洞。