access:pre-auth 类型相关 22137 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-41959 | mailcow 安全漏洞 — mailcow-dockerizedCWE-79 | 7.6 | High | 2024-08-05 |
| CVE-2024-38856 | Apache OFBiz 安全漏洞 — Apache OFBizCWE-863 | 5.6AI | MediumAI | 2024-08-05 |
| CVE-2024-41889 | Pimax Play 安全漏洞 — Pimax Play | 9.8AI | CriticalAI | 2024-08-05 |
| CVE-2024-7257 | WordPress plugin YayExtra 安全漏洞 — YayExtra – WooCommerce Extra Product OptionsCWE-434 | 9.8 | Critical | 2024-08-03 |
| CVE-2024-6477 | WordPress plugin UsersWP 安全漏洞 — UsersWP | 5.3AI | MediumAI | 2024-08-03 |
| CVE-2024-7314 | AJ-Report 安全漏洞 — AJ-ReportCWE-288 | 9.8 | Critical | 2024-08-02 |
| CVE-2024-7029 | AVTECH IP camera 命令注入漏洞 — AVM1203 (IP Camera)CWE-77 | 8.8 | High | 2024-08-02 |
| CVE-2024-6704 | WordPress plugin Comments – wpDiscuz 安全漏洞 — Comments – wpDiscuzCWE-79 | 5.3 | Medium | 2024-08-02 |
| CVE-2024-7204 | Ai3 QbiBot 跨站脚本漏洞 — QbiBotCWE-79 | 6.1 | Medium | 2024-08-02 |
| CVE-2024-40723 | Changing TCBServiSign 安全漏洞 — HWATAIServiSign Windows VersionCWE-121 | 4.3 | Medium | 2024-08-02 |
| CVE-2024-40722 | Changing TCBServiSign 安全漏洞 — TCBServiSign Windows VersionCWE-121 | 4.3 | Medium | 2024-08-02 |
| CVE-2024-40721 | Changing TCBServiSign 输入验证错误漏洞 — TCBServiSign Windows VersionCWE-20 | 8.8 | High | 2024-08-02 |
| CVE-2024-40720 | Changing TCBServiSign 输入验证错误漏洞 — TCBServiSign Windows VersionCWE-20 | 8.8 | High | 2024-08-02 |
| CVE-2024-3238 | WordPress plugin Superfly Responsive Menu 安全漏洞 — WordPress Menu Plugin — Superfly Responsive MenuCWE-352 | 8.8 | High | 2024-08-02 |
| CVE-2024-7389 | WordPress plugin Forminator 安全漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form BuilderCWE-522 | 7.5 | High | 2024-08-02 |
| CVE-2024-6567 | WordPress plugin Ebook Store 安全漏洞 — Ebook StoreCWE-200 | 5.3 | Medium | 2024-08-02 |
| CVE-2024-6873 | ClickHouse 安全漏洞 — ClickHouseCWE-122 | 8.1 | High | 2024-08-01 |
| CVE-2024-28972 | Dell InsightIQ 加密问题漏洞 — InsightIQCWE-327 | 5.9 | Medium | 2024-08-01 |
| CVE-2024-38182 | Microsoft Dynamics 365 安全漏洞 — Dynamics 365 Field Service (on-premises) v7 seriesCWE-1390 | 9.0 | Critical | 2024-07-31 |
| CVE-2022-4001 | Motorola Q14 安全漏洞 — Q14 Mesh Router FirmwareCWE-287 | 7.3 | High | 2024-07-31 |
| CVE-2024-2508 | WordPress plugin WP Mobile Menu 安全漏洞 — WP Mobile Menu – The Mobile-Friendly Responsive MenuCWE-862 | 5.3 | Medium | 2024-07-31 |
| CVE-2023-28074 | Dell BSAFE Micro Edition Suite和Dell BSAFE Crypto-C Micro Edition 输入验证错误漏洞 — Dell BSAFE Micro Edition SuiteCWE-125 | 6.2 | Medium | 2024-07-31 |
| CVE-2024-6770 | WordPress plugin Lifetime free Drag & Drop Contact Form Builder for WordPress VForm 安全漏洞 — VPSUForm – Drag & Drop Contact Form Builder with Email AutomationCWE-79 | 7.2 | High | 2024-07-31 |
| CVE-2024-40895 | FFRI AMC 安全漏洞 — FFRI AMC | 9.8AI | CriticalAI | 2024-07-30 |
| CVE-2024-5975 | WordPress plugin CZ Loan Management 安全漏洞 — CZ Loan Management | 9.8AI | CriticalAI | 2024-07-30 |
| CVE-2024-5765 | WordPress plugin WpStickyBar 安全漏洞 — WpStickyBar | 9.8AI | CriticalAI | 2024-07-30 |
| CVE-2024-40794 | Apple iOS和Apple iPadOS 安全漏洞 — Safari | 7.5AI | HighAI | 2024-07-29 |
| CVE-2024-40778 | Apple iOS和Apple iPadOS 安全漏洞 — iOS and iPadOS | 7.5AI | HighAI | 2024-07-29 |
| CVE-2024-6366 | WordPress plugin User Profile Builder 安全漏洞 — User Profile Builder | 7.5AI | HighAI | 2024-07-29 |
| CVE-2024-5882 | WordPress plugin Ultimate Classified Listings 安全漏洞 — Ultimate Classified Listings | 7.5AI | HighAI | 2024-07-29 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22137 条 CVE 漏洞。