access:pre-auth 类型相关 24639 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-37145 | PlexTrac API 安全漏洞 — n/a | 7.5 | - | 2022-09-08 |
| CVE-2022-37144 | PlexTrac API 安全漏洞 — n/a | 8.8 | - | 2022-09-08 |
| CVE-2022-1368 | Cognex 3D-A1000 Dimensioning System 访问控制错误漏洞 — 3D-A1000 Dimensioning System CWE-306 | 9.8 | Critical | 2022-09-06 |
| CVE-2022-31789 | WatchGuard Firebox 输入验证错误漏洞 — n/a | 9.8 | - | 2022-09-06 |
| CVE-2022-31790 | WatchGuard Firebox 安全漏洞 — n/a | 7.5 | - | 2022-09-06 |
| CVE-2022-2939 | WordPress plugin WP Cerber Security 信息泄露漏洞 — WP Cerber Security, Anti-spam & Malware Scan CWE-200 | 5.3 | Medium | 2022-09-06 |
| CVE-2022-2540 | WordPress plugin Link Optimizer Lite 跨站请求伪造漏洞 — Link Optimizer Lite CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-2541 | WordPress plugin uContext for Amazon 跨站请求伪造漏洞 — uContext for Amazon CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-2542 | WordPress plugin uContext for Clickbank 跨站请求伪造漏洞 — uContext for Clickbank CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-2633 | WordPress plugin All-in-One Video Gallery 安全漏洞 — All-in-One Video Gallery | 7.5 | High | 2022-09-06 |
| CVE-2022-2461 | WordPress plugin Transposh WordPress Translation 安全漏洞 — Transposh WordPress Translation CWE-862 | 5.3 | Medium | 2022-09-06 |
| CVE-2022-2518 | WordPress plugin Stockists Manager for Woocommerce 跨站请求伪造漏洞 — Stockists Manager for Woocommerce CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-2434 | WordPress plugin String Locator 代码问题漏洞 — String locator CWE-502 | 8.8 | High | 2022-09-06 |
| CVE-2022-2462 | WordPress plugin Transposh WordPress Translation 信息泄露漏洞 — Transposh WordPress Translation CWE-200 | 5.3 | Medium | 2022-09-06 |
| CVE-2022-2432 | WordPress plugin Ecwid Ecommerce Shopping Cart 跨站请求伪造漏洞 — Ecwid Ecommerce Shopping Cart CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-2433 | WordPress plugin WordPress Infinite Scroll – Ajax Load More 代码问题漏洞 — Ajax Load More – Infinite Scroll, Load More, & Lazy Load CWE-502 | 7.5 | High | 2022-09-06 |
| CVE-2022-2233 | WordPress plugin Banner Cycler 跨站请求伪造漏洞 — Banner Cycler CWE-352 | 8.8 | High | 2022-09-06 |
| CVE-2022-23690 | Aruba AOS-CX 安全漏洞 — Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aruba 6400 Switch Series; Aruba 8325 Switch Series; Aruba 8400 Switch Series; Aruba CX 8360 Switch Series; ArubaOS-CX Switches | 5.3 | - | 2022-09-06 |
| CVE-2022-34867 | WordPress plugin WP Libre Form 2 信息泄露漏洞 — WP Libre Form 2 (WordPress plugin) CWE-200 | 7.3 | High | 2022-09-06 |
| CVE-2022-26114 | Fortinet FortiMail 跨站脚本漏洞 — Fortinet FortiMail | 5.4 | Medium | 2022-09-06 |
| CVE-2022-27491 | Fortinet FortiOS 安全漏洞 — Fortinet FortiOS | 6.8 | Medium | 2022-09-06 |
| CVE-2022-38367 | Atlassian Jira 安全漏洞 — n/a | - | - | 2022-09-05 |
| CVE-2022-2657 | WordPress plugin WooCommerce 安全漏洞 — Multivendor Marketplace Solution for WooCommerce – WC Marketplace CWE-862 | 4.3 | - | 2022-09-05 |
| CVE-2022-2565 | WordPress plugin Simple Payment Donations & Subscriptions 跨站脚本漏洞 — Simple Payment Donations & Subscriptions Plugin by Paymattic – Best Payments Plugin for WP CWE-79 | 6.1 | - | 2022-09-05 |
| CVE-2022-2543 | WordPress plugin Visual Portfolio 安全漏洞 — Visual Portfolio, Photo Gallery & Post Grid CWE-862 | 6.1 | - | 2022-09-05 |
| CVE-2022-2376 | WordPress plugin Directorist 安全漏洞 — Directorist – WordPress Business Directory Plugin with Classified Ads Listings CWE-862 | 5.3 | - | 2022-09-05 |
| CVE-2022-36640 | InfluxData InfluxDB 安全漏洞 — n/a | 9.8 | - | 2022-09-02 |
| CVE-2022-36638 | Garage Management System 安全漏洞 — n/a | 5.3 | - | 2022-09-02 |
| CVE-2022-29158 | Apache OFBiz 安全漏洞 — Apache OFBiz CWE-1333 | 7.5 | - | 2022-09-02 |
| CVE-2022-25370 | Apache OFBiz 跨站脚本漏洞 — Apache OFBiz CWE-79 | 5.4 | - | 2022-09-02 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24639 条 CVE 漏洞。