目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 21987

access:pre-auth 类型相关 21987 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2024-8525 Automated Logic WebCtrl 代码问题漏洞 — WebCTRLCWE-434 9.8AICriticalAI2024-11-21
CVE-2024-28892 GoCast 操作系统命令注入漏洞 — GoCastCWE-78 9.8 Critical2024-11-21
CVE-2024-29224 GoCast 操作系统命令注入漏洞 — GoCastCWE-78 9.8 Critical2024-11-21
CVE-2024-21855 GoCast 访问控制错误漏洞 — GoCastCWE-306 9.8 Critical2024-11-21
CVE-2024-11088 WordPress plugin Simple Membership 安全漏洞 — Simple MembershipCWE-200 5.3 Medium2024-11-21
CVE-2024-11089 WordPress plugin Anonymous Restricted Content 安全漏洞 — Anonymous Restricted ContentCWE-200 5.3 Medium2024-11-21
CVE-2024-10792 WordPress plugin Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels 跨站脚本漏洞 — WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click UpsellCWE-79 6.1 Medium2024-11-21
CVE-2024-10675 WordPress plugin affiliate-toolkit 跨站脚本漏洞 — affiliate-toolkit – Multi-Network Affiliate & Amazon Product DisplayCWE-79 6.1 Medium2024-11-21
CVE-2024-11371 WordPress plugin Theater 跨站脚本漏洞 — Theater for WordPressCWE-79 6.1 Medium2024-11-21
CVE-2024-11456 WordPress plugin Run Contests, Raffles, and Giveaways with ContestsWP 跨站脚本漏洞 — Run Contests, Raffles, and Giveaways with ContestsWPCWE-79 6.1 Medium2024-11-21
CVE-2024-10400 WordPress plugin Tutor LMS SQL注入漏洞 — Tutor LMS – eLearning and online course solutionCWE-89 7.5 High2024-11-21
CVE-2024-10890 WordPress plugin WPAdverts 跨站脚本漏洞 — WPAdverts – Classifieds PluginCWE-79 6.1 Medium2024-11-21
CVE-2024-10393 WordPress plugin Tutor LMS 访问控制错误漏洞 — Tutor LMS – eLearning and online course solutionCWE-284 5.3 Medium2024-11-21
CVE-2024-11334 WordPress plugin My Contador lesr 安全漏洞 — My Contador lesrCWE-862 4.3 Medium2024-11-21
CVE-2024-10788 WordPress plugin Activity Log – Monitor & Record User Changes 跨站脚本漏洞 — Activity Log – Monitor & Record User ChangesCWE-79 7.2 High2024-11-21
CVE-2024-10623 WordPress plugin ForumEngine 跨站脚本漏洞 — ForumEngineCWE-79 6.1 Medium2024-11-21
CVE-2024-9371 WordPress plugin Branda 跨站脚本漏洞 — Branda – White Label & Branding, Free Login Page CustomizerCWE-79 6.1 Medium2024-11-21
CVE-2024-11365 WordPress plugin Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes 跨站脚本漏洞 — Crypto and DeFi Widgets – Web3 Cryptocurrency ShortcodesCWE-79 6.1 Medium2024-11-21
CVE-2024-11416 WordPress plugin WIP Incoming Lite 跨站请求伪造漏洞 — WIP Incoming LiteCWE-352 6.1 Medium2024-11-21
CVE-2024-11360 WordPress plugin Page Parts 跨站脚本漏洞 — Page PartsCWE-79 6.1 Medium2024-11-21
CVE-2024-10522 WordPress plugin Co-marquage service-public.fr 跨站脚本漏洞 — Co-marquage service-public.frCWE-79 6.1 Medium2024-11-21
CVE-2024-11435 WordPress plugin salavat counter 跨站脚本漏洞 — salavat counter PluginCWE-79 6.1 Medium2024-11-21
CVE-2024-10726 WordPress plugin Friendly Functions for Welcart 跨站请求伪造漏洞 — Friendly Functions for WelcartCWE-352 6.1 Medium2024-11-21
CVE-2024-11370 WordPress plugin Subaccounts for WooCommerce 跨站脚本漏洞 — Subaccounts for WooCommerceCWE-79 6.1 Medium2024-11-21
CVE-2024-10682 WordPress plugin Announcement & Notification Banner – Bulletin 跨站脚本漏洞 — Announcement & Notification Banner – BulletinCWE-79 6.1 Medium2024-11-21
CVE-2024-11447 WordPress plugin Community by PeepSo 跨站脚本漏洞 — Community by PeepSo – Download from PeepSo.comCWE-79 6.1 Medium2024-11-21
CVE-2024-10913 WordPress plugin Clone 代码问题漏洞 — CloneCWE-502 8.8 High2024-11-20
CVE-2024-10520 WordPress plugin WP Project Manager 安全漏洞 — Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time TrackerCWE-862 5.3 Medium2024-11-20
CVE-2024-11494 Zyxel P-6101C 授权问题漏洞 — P-6101C firmwareCWE-287 7.5 High2024-11-20
CVE-2024-47865 Rakuten Turbo 5G 安全漏洞 — Rakuten Turbo 5GCWE-306 5.3 Medium2024-11-20

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 21987 条 CVE 漏洞。