目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

access:pre-auth 标签下的 CVE 漏洞 22137

access:pre-auth 类型相关 22137 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE IDタイトルCVSS深刻度公開日
CVE-2024-7202 Simopro Technology WinMatrix3 Web package - SQL Injection — WinMatrix3CWE-89 9.8 Critical2024-07-29
CVE-2024-7201 Simopro Technology WinMatrix3 Web package - SQL Injection — WinMatrix3CWE-89 9.8 Critical2024-07-29
CVE-2024-5670 Softnext Mail SQR Expert and Mail Archiving Expert - OS Command Injection — SN OS 12.1CWE-78 9.8 Critical2024-07-29
CVE-2024-28806 Italtel i-MCS NFV 安全漏洞 — n/a 7.5AIHighAI2024-07-29
CVE-2024-5614 Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure — Piotnet Addons For ElementorCWE-200 5.3 Medium2024-07-27
CVE-2024-6569 Campaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path Disclosure — Campaign Monitor for WordPressCWE-200 5.3 Medium2024-07-27
CVE-2024-5969 AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending — Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI ToolkitCWE-20 5.8 Medium2024-07-27
CVE-2024-6546 One Click Close Comments <= 2.7.1 - Unauthenticated Full Path Disclosure — One Click Close CommentsCWE-200 5.3 Medium2024-07-27
CVE-2024-6566 Aramex Shipping WooCommerce <= 1.1.21 - Unauthenticated Full Path Disclosure — Aramex Shipping WooCommerceCWE-200 5.3 Medium2024-07-27
CVE-2024-6549 Admin Post Navigation <= 2.1 - Unauthenticated Full Path Disclosure — Admin Post NavigationCWE-200 5.3 Medium2024-07-27
CVE-2024-6573 Intelligence <= 1.4.0 - Unauthenticated Full Path Disclosure — IntelligenceCWE-200 5.3 Medium2024-07-27
CVE-2024-6545 Admin Trim Interface <= 3.5.1 - Unauthenticated Full Path Disclosure — Admin Trim InterfaceCWE-200 5.3 Medium2024-07-27
CVE-2024-6548 Add Admin JavaScript <= 2.0 - Unauthenticated Full Path Dislcosure — Add Admin JavaScriptCWE-200 5.3 Medium2024-07-27
CVE-2024-6591 Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation — Ultimate WordPress Auction PluginCWE-862 5.8 Medium2024-07-27
CVE-2024-1798 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml — Tutor LMS – Migration ToolCWE-862 5.3 Medium2024-07-27
CVE-2024-6547 Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure — Add Admin CSSCWE-200 5.3 Medium2024-07-27
CVE-2024-6922 Server-Side Request Forgery in Automation 360 — Automation 360CWE-918 8.2 -2024-07-26
CVE-2024-38287 RHUB TurboMeeting 安全漏洞 — n/a 9.8AICriticalAI2024-07-25
CVE-2024-38289 RHUB TurboMeeting 安全漏洞 — n/a 9.8AICriticalAI2024-07-25
CVE-2024-21684 Atlassian Bitbucket Data Center 安全漏洞 — Bitbucket Data Center 6.1AIMediumAI2024-07-24
CVE-2024-7079 Openshift-console: unauthenticated installation of helm charts CWE-306 6.5 Medium2024-07-24
CVE-2024-6571 Optimize Images ALT Text (alt tag) & names for SEO using AI <= 3.1.1 - Unauthenticated Full Path Disclosure — Image SEO – AI-Driven Image SEO OptimizerCWE-200 5.3 Medium2024-07-24
CVE-2024-6553 WP Meteor Website Speed Optimization Addon <= 3.4.3 - Unauthenticated Full Path Disclosure — WP Meteor Website Speed Optimization AddonCWE-200 5.3 Medium2024-07-24
CVE-2024-3246 LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting — LiteSpeed CacheCWE-352 6.1 Medium2024-07-24
CVE-2024-5861 WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection — WP Easy Pay – Payment and Donation form Builder for SquareCWE-862 5.3 Medium2024-07-24
CVE-2024-6755 Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion — Social Auto PosterCWE-862 6.5 Medium2024-07-24
CVE-2024-6751 Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions — Social Auto PosterCWE-352 6.3 Medium2024-07-24
CVE-2024-7027 WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor — WooCommerce - PDF VouchersCWE-288 7.3 High2024-07-24
CVE-2024-6753 Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting — Social Auto PosterCWE-79 7.2 High2024-07-24
CVE-2024-6750 Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions — Social Auto PosterCWE-862 7.3 High2024-07-24

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22137 条 CVE 漏洞。