目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24630

access:pre-auth 类型相关 24630 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2022-0679 WordPress plugin Narnoo Distributor 路径遍历漏洞 — Narnoo Distributor CWE-22 9.8 - 2022-03-28
CVE-2021-24978 WordPress plugin OSMapper 安全漏洞 — OSMapper CWE-862 7.5 - 2022-03-28
CVE-2021-26598 ImpressCMS 授权问题漏洞 — n/a 5.3 - 2022-03-28
CVE-2022-26254 Envato WoWonder 安全漏洞 — n/a 5.3 - 2022-03-27
CVE-2022-26258 D-Link Dir-820L 操作系统命令注入漏洞 — n/a 9.8 - 2022-03-27
CVE-2022-22274 SonicOS 缓冲区错误漏洞 — SonicOS CWE-121 9.8 - 2022-03-25
CVE-2021-40906 CheckMK Raw Edition 跨站脚本漏洞 — n/a 4.7 - 2022-03-25
CVE-2021-44905 Fortessa FTBTLD Smart Lock 安全漏洞 — n/a 5.3 - 2022-03-25
CVE-2022-25610 WordPress plugin Simple Ajax Chat 跨站脚本漏洞 — Simple Ajax Chat (WordPress plugin) CWE-79 3.4 Low 2022-03-25
CVE-2021-31326 D-Link DIR-816 A2 授权问题漏洞 — n/a 9.8 - 2022-03-23
CVE-2022-27192 Aseco Lietuva document management system DVS Avilys 日志信息泄露漏洞 — n/a 7.5 - 2022-03-23
CVE-2022-0888 WordPress plugin Ninja Forms - File Uploads Extension 安全漏洞 — Ninja Forms - File Uploads CWE-434 9.8 Critical 2022-03-23
CVE-2022-0889 WordPress plugin Ninja Forms - File Uploads Extension 安全漏洞 — Ninja Forms - File Uploads CWE-79 7.2 High 2022-03-23
CVE-2021-27476 Rockwell Automation FactoryTalk AssetCentre 操作系统命令注入漏洞 — FactoryTalk AssetCentre CWE-78 10.0 Critical 2022-03-23
CVE-2021-27470 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27466 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27474 Rockwell Automation FactoryTalk AssetCentre 安全漏洞 — FactoryTalk AssetCentre CWE-676 10.0 Critical 2022-03-23
CVE-2021-27468 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27472 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27462 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27464 Rockwell Automation FactoryTalk AssetCentre SQL注入漏洞 — FactoryTalk AssetCentre CWE-89 10.0 Critical 2022-03-23
CVE-2021-27460 Rockwell Automation FactoryTalk AssetCentre 代码问题漏洞 — FactoryTalk AssetCentre CWE-502 10.0 Critical 2022-03-23
CVE-2021-27422 GE Grid Solutions UR 信息泄露漏洞 — UR family CWE-200 7.5 High 2022-03-23
CVE-2022-25222 Money Transfer Management System SQL注入漏洞 — Money Transfer Management System 9.8 - 2022-03-23
CVE-2022-27228 Bitrix Site Manager 输入验证错误漏洞 — n/a 9.8 - 2022-03-22
CVE-2022-0760 WordPress plugin Simple Link Directory SQL注入漏洞 — Simple Link Directory CWE-89 9.8 - 2022-03-21
CVE-2022-0747 WordPress plugin Infographic Maker SQL注入漏洞 — Infographic Maker – iList CWE-89 9.8 - 2022-03-21
CVE-2022-0739 WordPress plugin BookingPress SQL注入漏洞 — BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin CWE-89 9.8 - 2022-03-21
CVE-2022-0694 WordPress plugin Advanced Booking Calendar SQL注入漏洞 — Advanced Booking Calendar CWE-89 9.8 - 2022-03-21
CVE-2022-0591 WordPress plugin FormCraft 代码问题漏洞 — FormCraft CWE-918 9.1 - 2022-03-21

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24630 条 CVE 漏洞。