目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24644

access:pre-auth 类型相关 24644 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2021-4417 WordPress Plugin Forminator – Contact Form, Payment Form & Custom Form Builder 跨站请求伪造漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder CWE-352 5.4 Medium 2023-07-12
CVE-2021-4415 WordPress Plugin Sunshine Photo Cart 跨站请求伪造漏洞 — Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers CWE-352 4.3 Medium 2023-07-12
CVE-2021-4416 WordPress Plugin wp-mpdf 跨站请求伪造漏洞 — wp-mpdf CWE-352 4.3 Medium 2023-07-12
CVE-2021-4413 WordPress Plugin Process Steps Template Designer 跨站请求伪造漏洞 — Process Steps Template Designer CWE-352 4.3 Medium 2023-07-12
CVE-2021-4414 WordPress Plugin Abandoned Cart Lite for WooCommerce 跨站请求伪造漏洞 — Abandoned Cart Lite for WooCommerce CWE-352 4.3 Medium 2023-07-12
CVE-2021-4411 WordPress Plugin WP EasyPay – Square for WordPress 跨站请求伪造漏洞 — WP Easy Pay – Payment and Donation form Builder for Square CWE-352 4.3 Medium 2023-07-12
CVE-2021-4412 WordPress Plugin WP Prayer 跨站请求伪造漏洞 — WP Prayer CWE-352 4.3 Medium 2023-07-12
CVE-2021-4409 WordPress Plugin WooCommerce Etsy Integration 跨站请求伪造漏洞 — Etsy Integration For WooCommerce CWE-352 4.3 Medium 2023-07-12
CVE-2021-4410 WordPress Plugin Qtranslate Slug 跨站请求伪造漏洞 — Qtranslate Slug CWE-352 4.3 Medium 2023-07-12
CVE-2021-4407 WordPress Plugin Custom Banners 跨站请求伪造漏洞 — Custom Banners CWE-352 4.3 Medium 2023-07-12
CVE-2021-4408 WordPress Plugin DW Question & Answer 跨站请求伪造漏洞 — DW Question & Answer CWE-352 4.3 Medium 2023-07-12
CVE-2020-36750 WordPress Plugin EWWW Image Optimizer 跨站请求伪造漏洞 — EWWW Image Optimizer CWE-352 4.3 Medium 2023-07-12
CVE-2023-26563 Syncfusion ej2-filemanager-node-filesystem 路径遍历漏洞 — n/a 9.8 - 2023-07-12
CVE-2023-26564 Syncfusion EJ2 ASPCore File Provider 路径遍历漏洞 — n/a 9.1 - 2023-07-12
CVE-2023-33274 PowerShield SNMP Web Pro 授权问题漏洞 — n/a 9.8 - 2023-07-12
CVE-2023-37629 Online Piggery Management System 代码问题漏洞 — n/a 9.8 - 2023-07-12
CVE-2023-37630 Online Piggery Management System 跨站脚本漏洞 — n/a 6.1 - 2023-07-12
CVE-2023-3127 Johnson Controls iSTAR Ultra 授权问题漏洞 — iSTAR Ultra CWE-287 7.5 High 2023-07-11
CVE-2023-34090 Decidim 信息泄露漏洞 — decidim CWE-200 7.5 High 2023-07-11
CVE-2022-23447 Fortinet FortiExtender 路径遍历漏洞 — FortiExtender CWE-22 7.3 High 2023-07-11
CVE-2023-3354 QEMU 代码问题漏洞 — qemu CWE-476 7.5 High 2023-07-11
CVE-2023-35921 Siemens SIMATIC 安全漏洞 — SIMATIC MV540 H CWE-400 7.5 High 2023-07-11
CVE-2023-35920 Siemens SIMATIC 多款产品 安全漏洞 — SIMATIC MV540 H CWE-400 7.5 High 2023-07-11
CVE-2022-31810 Siemens SiPass Integrated 缓冲区错误漏洞 — SiPass integrated CWE-20 7.5 High 2023-07-11
CVE-2022-29562 Siemens RUGGEDCOM ROX 输入验证错误漏洞 — RUGGEDCOM ROX MX5000 CWE-20 3.7 Low 2023-07-11
CVE-2023-36925 SAP Solution Manager 代码问题漏洞 — SAP Solution Manager (Diagnostics agent) CWE-918 7.2 High 2023-07-11
CVE-2023-36919 SAP Enable Now 安全漏洞 — SAP Enable Now CWE-213 5.3 Medium 2023-07-11
CVE-2023-36918 SAP Enable Now 跨站脚本漏洞 — SAP Enable Now CWE-79 6.1 Medium 2023-07-11
CVE-2023-35873 SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Runtime Workbench) CWE-306 6.5 Medium 2023-07-11
CVE-2023-35872 SAP NetWeaver Process Integration 访问控制错误漏洞 — SAP NetWeaver Process Integration (Message Display Tool) CWE-306 6.5 Medium 2023-07-11

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24644 条 CVE 漏洞。