access:pre-auth 类型相关 22084 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-10875 | WordPress plugin Gallery Manager 安全漏洞 — Gallery ManagerCWE-79 | 6.1 | Medium | 2024-11-16 |
| CVE-2024-11118 | WordPress plugin 404 Error Monitor 跨站请求伪造漏洞 — 404 Error MonitorCWE-352 | 5.3 | Medium | 2024-11-16 |
| CVE-2024-9935 | WordPress plugin PDF Generator Addon for Elementor Page Builder 路径遍历漏洞 — PDF Generator for WordPress ElementorCWE-22 | 7.5 | High | 2024-11-16 |
| CVE-2024-10884 | WordPress plugin SimpleForm Contact Form Submissions 跨站脚本漏洞 — SimpleForm Contact Form SubmissionsCWE-79 | 6.1 | Medium | 2024-11-16 |
| CVE-2024-10883 | WordPress plugin SimpleForm 跨站脚本漏洞 — SimpleForm – Contact form made simpleCWE-79 | 6.1 | Medium | 2024-11-16 |
| CVE-2024-10861 | WordPress plugin Popup Box 安全漏洞 — Popup Box – Create Countdown, Coupon, Video, Contact Form PopupsCWE-862 | 5.3 | Medium | 2024-11-16 |
| CVE-2024-45610 | GLPI 安全漏洞 — glpiCWE-79 | 6.5 | Medium | 2024-11-15 |
| CVE-2024-45609 | GLPI 跨站脚本漏洞 — glpiCWE-79 | 6.5 | Medium | 2024-11-15 |
| CVE-2024-43418 | GLPI 跨站脚本漏洞 — glpiCWE-79 | 6.5 | Medium | 2024-11-15 |
| CVE-2024-43417 | GLPI 跨站脚本漏洞 — glpiCWE-79 | 6.5 | Medium | 2024-11-15 |
| CVE-2024-41678 | GLPI 安全漏洞 — glpiCWE-79 | 6.5 | Medium | 2024-11-15 |
| CVE-2021-1494 | Snort 安全漏洞 — Cisco Firepower Threat Defense SoftwareCWE-693 | 5.8 | Medium | 2024-11-15 |
| CVE-2022-20633 | Cisco Enterprise Chat and Email 安全漏洞 — Cisco Enterprise Chat and EmailCWE-204 | 5.3 | Medium | 2024-11-15 |
| CVE-2022-20632 | Cisco Enterprise Chat and Email 安全漏洞 — Cisco Enterprise Chat and EmailCWE-79 | 6.1 | Medium | 2024-11-15 |
| CVE-2021-34753 | Cisco Firepower Threat Defense 访问控制错误漏洞 — Cisco Firepower Threat Defense SoftwareCWE-284 | 5.8 | Medium | 2024-11-15 |
| CVE-2022-20631 | Cisco Enterprise Chat and Email 跨站脚本漏洞 — Cisco Enterprise Chat and EmailCWE-79 | 6.1 | Medium | 2024-11-15 |
| CVE-2022-20654 | Cisco Webex Meetings 跨站脚本漏洞 — Cisco Webex MeetingsCWE-80 | 6.1 | Medium | 2024-11-15 |
| CVE-2022-20634 | Cisco Enterprise Chat and Email 安全漏洞 — Cisco Enterprise Chat and EmailCWE-601 | 4.7 | Medium | 2024-11-15 |
| CVE-2022-20648 | Cisco Redundancy Configuration Manager for Cisco StarOS 信息泄露漏洞 — Cisco Redundancy Configuration ManagerCWE-200 | 5.3 | Medium | 2024-11-15 |
| CVE-2022-20649 | Cisco Redundancy Configuration Manager for Cisco StarOS 安全漏洞 — Cisco Redundancy Configuration ManagerCWE-489 | 8.1 | High | 2024-11-15 |
| CVE-2022-20657 | Cisco Prime Infrastructure 和 Evolved Programmable Network Manager 安全漏洞 — Cisco Evolved Programmable Network Manager (EPNM)CWE-79 | 6.1 | Medium | 2024-11-15 |
| CVE-2022-20663 | Cisco Secure Network Analytics 跨站脚本漏洞 — Cisco Secure Network AnalyticsCWE-79 | 6.1 | Medium | 2024-11-15 |
| CVE-2022-20685 | Cisco Products Snort 输入验证错误漏洞 — Cisco Cyber VisionCWE-190 | 7.5 | High | 2024-11-15 |
| CVE-2022-20766 | Cisco ATA 190 安全漏洞 — Cisco Analog Telephone Adaptor (ATA) SoftwareCWE-125 | 5.3 | Medium | 2024-11-15 |
| CVE-2022-20793 | Cisco Touch 10 安全漏洞 — Cisco RoomOS SoftwareCWE-325 | 6.8 | Medium | 2024-11-15 |
| CVE-2022-20814 | Cisco Expressway Series和Cisco TelePresence Video Communication Server 安全漏洞 — Cisco TelePresence Video Communication Server (VCS) ExpresswayCWE-295 | 7.4 | High | 2024-11-15 |
| CVE-2022-20846 | Cisco IOS XR 安全漏洞 — Cisco IOS XR SoftwareCWE-120 | 4.3 | Medium | 2024-11-15 |
| CVE-2022-20849 | Cisco IOS XR 安全漏洞 — Cisco IOS XR SoftwareCWE-391 | 6.1 | Medium | 2024-11-15 |
| CVE-2022-20931 | Cisco Touch 10 安全漏洞 — Cisco TelePresence Endpoint Software (TC/CE)CWE-527 | 6.5 | Medium | 2024-11-15 |
| CVE-2022-20853 | Cisco Expressway Series和Cisco TelePresence Video Communication Server 跨站请求伪造漏洞 — Cisco TelePresence Video Communication Server (VCS) ExpresswayCWE-352 | 7.4 | High | 2024-11-15 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22084 条 CVE 漏洞。