access:pre-auth 类型相关 21465 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-9777 | WordPress plugin Ashe 跨站脚本漏洞 — AsheCWE-79 | 6.1 | Medium | 2024-11-19 |
| CVE-2024-9830 | WordPress plugin Bard 跨站脚本漏洞 — BardCWE-79 | 6.1 | Medium | 2024-11-19 |
| CVE-2024-11036 | WordPress plugin GamiPress 代码注入漏洞 — GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPressCWE-94 | 7.3 | High | 2024-11-19 |
| CVE-2024-11038 | WordPress plugin WPB Popup for Contact Form 代码注入漏洞 — WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button ClickCWE-94 | 7.3 | High | 2024-11-19 |
| CVE-2024-10388 | WordPress plugin WordPress GDPR 跨站脚本漏洞 — WordPress GDPRCWE-79 | 7.2 | High | 2024-11-19 |
| CVE-2024-11069 | WordPress plugin WordPress GDPR 安全漏洞 — WordPress GDPRCWE-862 | 6.5 | Medium | 2024-11-19 |
| CVE-2024-21287 | Oracle Agile PLM Framework 安全漏洞 — Oracle Agile PLM Framework | 7.5 | High | 2024-11-18 |
| CVE-2024-10486 | WordPress plugin Google for WooCommerce 产品安全漏洞 — Google for WooCommerceCWE-862 | 5.3 | Medium | 2024-11-18 |
| CVE-2024-43416 | GLPI 信息泄露漏洞 — glpiCWE-200 | 7.5 | High | 2024-11-18 |
| CVE-2020-26062 | Cisco?Integrated Management Controller 安全漏洞 — Cisco Unified Computing System (Managed)CWE-203 | 5.3 | Medium | 2024-11-18 |
| CVE-2020-27124 | Cisco ASA Software 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-457 | 8.6 | High | 2024-11-18 |
| CVE-2020-3431 | Cisco RV042 Dual WAN VPN Router和RV042G Dual Gigabit WAN VPN Router 跨站脚本漏洞 — Cisco Small Business RV Series Router FirmwareCWE-79 | 6.1 | Medium | 2024-11-18 |
| CVE-2020-26073 | Cisco?SD-WAN vManage 信息泄露漏洞 — Cisco Catalyst SD-WAN ManagerCWE-35 | 7.5 | High | 2024-11-18 |
| CVE-2020-3532 | 多款Cisco产品跨站脚本漏洞 — Cisco Unity ConnectionCWE-79 | 6.1 | - | 2024-11-18 |
| CVE-2020-3548 | Cisco AsyncOS TLS 安全漏洞 — Cisco Secure EmailCWE-407 | 5.3 | Medium | 2024-11-18 |
| CVE-2024-0012 | Palo Alto Networks PAN-OS 安全漏洞 — Cloud NGFWCWE-306 | 9.8AI | CriticalAI | 2024-11-18 |
| CVE-2021-1234 | Cisco SD-WAN vManage 安全漏洞 — Cisco Catalyst SD-WAN ManagerCWE-497 | 5.3 | Medium | 2024-11-18 |
| CVE-2021-1132 | Cisco?Network Services Orchestrator 安全漏洞 — Cisco Network Services OrchestratorCWE-35 | 5.3 | Medium | 2024-11-18 |
| CVE-2021-1379 | Cisco IP Phone 安全漏洞 — Cisco IP Phones with Multiplatform FirmwareCWE-120 | 6.5 | Medium | 2024-11-18 |
| CVE-2021-1285 | Cisco Snort安全漏洞 — Cisco UTD SNORT IPS Engine SoftwareCWE-770 | 7.4 | - | 2024-11-18 |
| CVE-2021-1424 | Cisco ASR 缓冲区错误漏洞 — Cisco ASR 5000 Series SoftwareCWE-119 | 5.3 | Medium | 2024-11-18 |
| CVE-2021-1440 | Cisco IOS XR 安全漏洞 — Cisco IOS XR SoftwareCWE-617 | 6.8 | Medium | 2024-11-18 |
| CVE-2021-1444 | Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software） 跨站脚本漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-79 | 6.1 | Medium | 2024-11-18 |
| CVE-2024-37155 | OpenCTI 访问控制错误漏洞 — openctiCWE-284 | 6.5 | Medium | 2024-11-18 |
| CVE-2024-11318 | AbsysNET 安全漏洞 — AbsysNetCWE-639 | 7.5 | High | 2024-11-18 |
| CVE-2024-11315 | TRCore DVC 安全漏洞 — DVCCWE-23 | 9.8 | Critical | 2024-11-18 |
| CVE-2024-11314 | TRCore DVC 安全漏洞 — DVCCWE-23 | 9.8 | Critical | 2024-11-18 |
| CVE-2024-11313 | TRCore DVC 安全漏洞 — DVCCWE-23 | 9.8 | Critical | 2024-11-18 |
| CVE-2024-11312 | TRCore DVC 安全漏洞 — DVCCWE-23 | 9.8 | Critical | 2024-11-18 |
| CVE-2024-11311 | TRCore DVC 安全漏洞 — DVCCWE-23 | 9.8 | Critical | 2024-11-18 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 21465 条 CVE 漏洞。