access:pre-auth 类型相关 22137 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-5671 | Trellix IPS Manager 代码问题漏洞 — Intrusion Prevention System (IPS) ManagerCWE-502 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-2472 | WordPress Plugin LatePoint 安全漏洞 — LatePoint PluginCWE-639 | 9.1 | Critical | 2024-06-14 |
| CVE-2024-3912 | ASUS Router 代码问题漏洞 — DSL-N17UCWE-434 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-5577 | WordPress plugin Where I Was, Where I Will Be 安全漏洞 — Where I Was, Where I Will BeCWE-98 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-31163 | ASUS Download Master 安全漏洞 — Download MasterCWE-121 | 7.2 | High | 2024-06-14 |
| CVE-2024-31162 | ASUS Download Master 安全漏洞 — Download MasterCWE-78 | 7.2 | High | 2024-06-14 |
| CVE-2024-3966 | WordPress plugin Pray For Me 安全漏洞 — Pray For Me | 6.1AI | MediumAI | 2024-06-14 |
| CVE-2024-5551 | WordPress plugin WP STAGING Pro WordPress Backup 安全漏洞 — WP STAGING Pro WordPress Backup PluginCWE-352 | 7.5 | High | 2024-06-14 |
| CVE-2024-4936 | WordPress plugin Canto 安全漏洞 — CantoCWE-98 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-1094 | WordPress plugin Timetics 安全漏洞 — Timetics – Appointment Booking & SchedulingCWE-862 | 7.3 | High | 2024-06-14 |
| CVE-2024-27169 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-306 | 8.4 | High | 2024-06-14 |
| CVE-2023-6492 | WordPress plugin Simple Sitemap 安全漏洞 — Simple Sitemap – Create a Responsive HTML SitemapCWE-352 | 4.3 | Medium | 2024-06-14 |
| CVE-2024-0892 | WordPress plugin Schema App Structured Data 安全漏洞 — Schema App Structured DataCWE-352 | 4.3 | Medium | 2024-06-14 |
| CVE-2024-3080 | ASUS Router 授权问题漏洞 — ZenWiFi XT8CWE-287 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27144 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-22 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27141 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP)CWE-776 | 5.9 | Medium | 2024-06-14 |
| CVE-2024-33374 | LB-LINK BL-W1210M 安全漏洞 — n/a | 8.8AI | HighAI | 2024-06-14 |
| CVE-2024-5949 | Deep Sea Electronics DSE855 安全漏洞 — DSE855CWE-835 | 6.5AI | MediumAI | 2024-06-13 |
| CVE-2024-37131 | Dell Secure Connect Gateway 安全漏洞 — Secure Connect Gateway (SCG) Policy ManagerCWE-942 | 7.5 | High | 2024-06-13 |
| CVE-2024-30472 | Dell ThinOS 信息泄露漏洞 — Wyse 5070 Thin ClientCWE-200 | 7.5 | High | 2024-06-13 |
| CVE-2024-4371 | WordPress plugin CoDesigner WooCommerce Builder for Elementor 安全漏洞 — CoDesigner – All in One Elementor WooCommerce BuilderCWE-502 | 9.0 | Critical | 2024-06-13 |
| CVE-2024-0979 | WordPress plugin Dashboard Widgets Suite 安全漏洞 — Dashboard Widgets SuiteCWE-79 | 6.1 | Medium | 2024-06-13 |
| CVE-2024-3552 | WordPress plugin Web Directory Free 安全漏洞 — Web Directory Free | 9.8AI | CriticalAI | 2024-06-13 |
| CVE-2024-2098 | WordPress plugin Download Manager 安全漏洞 — Download ManagerCWE-289 | 7.5 | High | 2024-06-13 |
| CVE-2024-3922 | WordPress plugin Dokan Pro 安全漏洞 — Dokan ProCWE-89 | 10.0 | Critical | 2024-06-13 |
| CVE-2023-35858 | Modern Campus Omni CMS 安全漏洞 — n/a | 5.3AI | MediumAI | 2024-06-13 |
| CVE-2023-35860 | Modern Campus Omni CMS 安全漏洞 — n/a | 7.5AI | HighAI | 2024-06-13 |
| CVE-2024-28964 | Dell Common Event Enabler 代码问题漏洞 — Common Event EnablerCWE-502 | 7.8 | High | 2024-06-12 |
| CVE-2024-34065 | Strapi 安全漏洞 — strapiCWE-294 | 7.1 | High | 2024-06-12 |
| CVE-2024-5674 | WordPress plugin Newsletter 安全漏洞 — Newsletter - API v1 and v2 addon for NewsletterCWE-862 | 6.5 | Medium | 2024-06-12 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 22137 条 CVE 漏洞。