目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 22120

access:pre-auth 类型相关 22120 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2024-9501 WordPress plugin Wp Social Login and Register Social Counter 安全漏洞 — Wp Social Login and Register Social CounterCWE-288 9.8 Critical2024-10-26
CVE-2024-9772 WordPress plugin The Uix Shortcodes 安全漏洞 — Uix ShortcodesCWE-94 7.3 High2024-10-26
CVE-2024-8870 WordPress plugin Forms for Mailchimp by Optin Cat 跨站脚本漏洞 — Forms for Mailchimp by Optin Cat – Grow Your MailChimp ListCWE-79 6.1 Medium2024-10-26
CVE-2024-9613 WordPress plugin FormFacade 跨站脚本漏洞 — FormFacade – Embed Google Forms in your websiteCWE-79 6.1 Medium2024-10-26
CVE-2024-9930 WordPress plugin Extensions by HocWP Team 安全漏洞 — Extensions by HocWP TeamCWE-288 9.8 Critical2024-10-26
CVE-2024-9932 WordPress plugin Wux Blog Editor 代码问题漏洞 — Wux Blog EditorCWE-434 9.8 Critical2024-10-26
CVE-2024-9933 WordPress plugin WatchTowerHQ 安全漏洞 — WatchTowerHQCWE-288 9.8 Critical2024-10-26
CVE-2024-9931 WordPress plugin Wux Blog Editor 安全漏洞 — Wux Blog EditorCWE-288 9.8 Critical2024-10-26
CVE-2024-47483 Dell Data Lakehouse SQL注入漏洞 — Data LakehouseCWE-89 2.9 Low2024-10-25
CVE-2024-47481 Dell Data Lakehouse 访问控制错误漏洞 — Dell Data LakehouseCWE-284 6.5 Medium2024-10-25
CVE-2024-9598 WordPress plugin AMP for WP 跨站请求伪造漏洞 — AMP for WP – Accelerated Mobile PagesCWE-352 8.8 High2024-10-25
CVE-2024-9630 WordPress plugin WPS Telegram Chat 安全漏洞 — WPS Telegram ChatCWE-862 5.4 Medium2024-10-25
CVE-2024-9607 WordPress plugin 10Web Social Post Feed 跨站脚本漏洞 — 10Web Social Post FeedCWE-79 6.1 Medium2024-10-25
CVE-2024-9302 WordPress plugin App Builder 授权问题漏洞 — App Builder – Create Native Android & iOS Apps On The FlightCWE-640 8.1 High2024-10-25
CVE-2024-9488 WordPress plugin Comments – wpDiscuz 安全漏洞 — Comments – wpDiscuzCWE-288 9.8 Critical2024-10-25
CVE-2024-9686 WordPress plugin Order Notification for Telegram 安全漏洞 — Order Notification for TelegramCWE-862 5.3 Medium2024-10-25
CVE-2024-48932 ZimaOS 访问控制错误漏洞 — ZimaOSCWE-284 5.3 Medium2024-10-24
CVE-2024-9692 VIMESA VHF/FM Transmitter Blue Plus 访问控制错误漏洞 — VHF/FM Transmitter Blue PlusCWE-284 7.5AIHighAI2024-10-24
CVE-2024-9214 WordPress plugin Extra Product Options Builder for WooCommerce 跨站脚本漏洞 — Extra Product Options Builder for WooCommerceCWE-79 6.1 Medium2024-10-24
CVE-2024-8717 WordPress plugin DearFlip 跨站脚本漏洞 — Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewerCWE-79 6.1 Medium2024-10-24
CVE-2024-6049 Lawo AG vsm LTC Time Sync 安全漏洞 — vsm LTC Time Sync (vTimeSync)CWE-32 7.5AIHighAI2024-10-24
CVE-2024-9943 WordPress plugin MultiVendorX 跨站请求伪造漏洞 — MultiVendorX – WooCommerce Multivendor Marketplace SolutionsCWE-352 6.3 Medium2024-10-24
CVE-2024-9864 WordPress plugin EventPrime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and TicketsCWE-79 6.1 Medium2024-10-24
CVE-2024-9865 WordPress plugin EventPrime 跨站脚本漏洞 — EventPrime – Events Calendar, Bookings and TicketsCWE-79 6.1 Medium2024-10-24
CVE-2024-9374 WordPress plugin Terms descriptions 安全漏洞 — Terms descriptionsCWE-79 6.1 Medium2024-10-24
CVE-2024-41617 Money Manager EX WebApp 安全漏洞 — n/a 8.8AIHighAI2024-10-24
CVE-2024-48442 Tuoshi NR500-EA 安全漏洞 — n/a 9.1AICriticalAI2024-10-24
CVE-2024-20526 Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-400 5.3 Medium2024-10-23
CVE-2024-20495 Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-20 8.6 High2024-10-23
CVE-2024-20494 Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 — Cisco Adaptive Security Appliance (ASA) SoftwareCWE-1287 8.6 High2024-10-23

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22120 条 CVE 漏洞。