access:pre-auth 类型相关 22110 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-46891 | Siemens SINEC INS 资源管理错误漏洞 — SINEC INSCWE-400 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-44102 | Siemens PP TeleControl Server 代码问题漏洞 — PP TeleControl Server Basic 1000 to 5000 V3.1CWE-502 | 10.0 | Critical | 2024-11-12 |
| CVE-2024-10245 | WordPress plugin Relais 2FA 安全漏洞 — Relais 2FACWE-288 | 9.8 | Critical | 2024-11-12 |
| CVE-2024-9357 | WordPress plugin xili-tidy-tags 跨站脚本漏洞 — xili-tidy-tagsCWE-79 | 6.1 | Medium | 2024-11-12 |
| CVE-2024-10685 | WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞 — Business Essentials for Contact Form 7CWE-79 | 6.1 | Medium | 2024-11-12 |
| CVE-2024-47593 | SAP NetWeaver Application Server和SAP ABAP Platform 安全漏洞 — SAP NetWeaver Application Server ABAP | 4.3 | Medium | 2024-11-12 |
| CVE-2024-47592 | SAP NetWeaver AS 安全漏洞 — SAP NetWeaver Application Server Java (Logon Application)CWE-307 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-47590 | SAP Web Dispatcher 安全漏洞 — SAP Web DispatcherCWE-791 | 8.8 | High | 2024-11-12 |
| CVE-2024-47586 | SAP NetWeaver Application Server和SAP ABAP Platform 代码问题漏洞 — SAP NetWeaver Application Server for ABAP and ABAP PlatformCWE-476 | 5.3 | Medium | 2024-11-12 |
| CVE-2024-52286 | Stirling-PDF 安全漏洞 — Stirling-PDFCWE-20 | 6.1AI | MediumAI | 2024-11-11 |
| CVE-2024-10314 | Perforce Helix Core 资源管理错误漏洞 — Helix CoreCWE-400 | 7.5AI | HighAI | 2024-11-11 |
| CVE-2024-10344 | Perforce Helix Core 资源管理错误漏洞 — Helix CoreCWE-400 | 7.5AI | HighAI | 2024-11-11 |
| CVE-2024-10345 | Perforce Helix Core 资源管理错误漏洞 — Helix CoreCWE-400 | 7.5AI | HighAI | 2024-11-11 |
| CVE-2024-11068 | D-Link DSL6740C 安全漏洞 — DSL6740CCWE-648 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11067 | D-Link DSL6740C 安全漏洞 — DSL6740CCWE-23 | 7.5 | High | 2024-11-11 |
| CVE-2024-11020 | Grand Vice info Webopac SQL注入漏洞 — Webopac7CWE-89 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11019 | Grand Vice info Webopac 跨站脚本漏洞 — Webopac7CWE-79 | 6.1 | Medium | 2024-11-11 |
| CVE-2024-11018 | Grand Vice info Webopac 代码问题漏洞 — WebopacCWE-434 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-11016 | Grand Vice info Webopac SQL注入漏洞 — WebopacCWE-89 | 9.8 | Critical | 2024-11-11 |
| CVE-2024-10958 | WordPress plugin The WP Photo Album Plus 代码注入漏洞 — WP Photo Album PlusCWE-94 | 7.3 | High | 2024-11-10 |
| CVE-2024-10265 | WordPress plugin Form Maker by 10Web 跨站脚本漏洞 — Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderCWE-79 | 6.1 | Medium | 2024-11-10 |
| CVE-2024-10837 | WordPress plugin SysBasics Customize My Account for WooCommerce 跨站脚本漏洞 — SysBasics Customize My Account for WooCommerceCWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10261 | WordPress plugin The Paid Membership Subscriptions 代码注入漏洞 — Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content RestrictionCWE-94 | 7.3 | High | 2024-11-09 |
| CVE-2024-10640 | WordPress plugin The FOX 代码注入漏洞 — FOX – Currency Switcher Professional for WooCommerceCWE-94 | 7.3 | High | 2024-11-09 |
| CVE-2024-10508 | WordPress plugin RegistrationMagic 安全漏洞 — RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User LoginCWE-230 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10801 | WordPress plugin WordPress User Extra Fields 代码问题漏洞 — WordPress User Extra FieldsCWE-434 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10547 | WordPress plugin WP Membership 代码问题漏洞 — WP MembershipCWE-434 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10871 | WordPress plugin Category Ajax Filter 安全漏洞 — Category AJAX Filter – Advanced Filter for Posts & Custom Post TypesCWE-98 | 9.8 | Critical | 2024-11-09 |
| CVE-2024-10876 | WordPress plugin Charitable 跨站脚本漏洞 — Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & MoreCWE-79 | 6.1 | Medium | 2024-11-09 |
| CVE-2024-10683 | WordPress plugin Contact Form 7 跨站脚本漏洞 — Contact Form 7 – PayPal & Stripe Add-onCWE-79 | 6.1 | Medium | 2024-11-09 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22110 条 CVE 漏洞。