access:pre-auth 类型相关 22564 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-1169 | WordPress Plugin buddyforms 安全漏洞 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)CWE-862 | 7.5 | High | 2024-03-07 |
| CVE-2024-1170 | WordPress Plugin buddyforms 安全漏洞 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)CWE-862 | 8.2 | High | 2024-03-07 |
| CVE-2024-1720 | WordPress Plugin User Registration 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login BuilderCWE-79 | 4.7 | Medium | 2024-03-07 |
| CVE-2023-51395 | Z-Wave 安全漏洞 — Z-Wave SDKCWE-787 | 8.8 | High | 2024-03-07 |
| CVE-2024-28213 | nGrinder 安全漏洞 — nGrinderCWE-502 | 9.8AI | CriticalAI | 2024-03-07 |
| CVE-2024-28222 | Veritas NetBackup 安全漏洞 — n/a | 9.8 | Critical | 2024-03-07 |
| CVE-2023-33676 | Lost and Found Information System 安全漏洞 — n/a | 9.8AI | CriticalAI | 2024-03-07 |
| CVE-2024-20337 | Cisco Secure Client 安全漏洞 — Cisco Secure ClientCWE-93 | 8.2 | High | 2024-03-06 |
| CVE-2024-1760 | WordPress Plugin Appointment Booking Calendar 安全漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking PluginCWE-352 | 4.3 | Medium | 2024-03-06 |
| CVE-2023-33677 | Lost and Found Information System SQL注入漏洞 — n/a | 9.8AI | CriticalAI | 2024-03-06 |
| CVE-2020-26942 | Axigen 安全漏洞 — n/a | 9.1AI | CriticalAI | 2024-03-06 |
| CVE-2024-25615 | Aruba Networks ArubaOS 安全漏洞 — ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | 5.3 | Medium | 2024-03-05 |
| CVE-2024-2054 | Artica Proxy 代码问题漏洞 — Artica ProxyCWE-502 | 9.8 | - | 2024-03-05 |
| CVE-2024-2053 | Artica Proxy 安全漏洞 — Artica ProxyCWE-23 | 9.8AI | CriticalAI | 2024-03-05 |
| CVE-2024-2188 | TP-LINK AX50 跨站脚本漏洞 — Archer AX50CWE-79 | 6.1 | Medium | 2024-03-05 |
| CVE-2023-45598 | AiLux imx6 安全漏洞 — imx6 bundleCWE-425 | 5.3 | Medium | 2024-03-05 |
| CVE-2023-45596 | AiLux imx6 安全漏洞 — imx6 bundleCWE-425 | 5.3 | Medium | 2024-03-05 |
| CVE-2023-5457 | AiLux imx6 安全漏洞 — imx6 bundleCWE-1269 | 7.5 | High | 2024-03-05 |
| CVE-2023-5456 | AiLux imx6 安全漏洞 — imx6 bundleCWE-798 | 8.1 | High | 2024-03-05 |
| CVE-2024-1093 | WordPress Plugin Change Memory Limit 安全漏洞 — Change Memory LimitCWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1769 | WordPress Plugin JM Twitter Cards 安全漏洞 — JM Twitter CardsCWE-200 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1088 | WordPress Plugin Password Protected Store for WooCommerce 安全漏洞 — Password Protected Store for WooCommerceCWE-284 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1095 | WordPress Plugin Build & Control Block Patterns 安全漏洞 — Build & Control Block Patterns – Boost up Gutenberg EditorCWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1478 | WordPress Plugin Maintenance Mode 安全漏洞 — Maintenance ModeCWE-284 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-1782 | WordPress Plugin Blue Triad EZAnalytics 安全漏洞 — Blue Triad EZAnalyticsCWE-79 | 6.1 | Medium | 2024-03-05 |
| CVE-2024-1178 | WordPress Plugin SportsPress 安全漏洞 — SportsPress – Sports Club & League ManagerCWE-862 | 5.3 | Medium | 2024-03-05 |
| CVE-2024-25164 | IDURAR ERP/CRM 安全漏洞 — n/a | 7.5AI | HighAI | 2024-03-04 |
| CVE-2024-25016 | IBM MQ 输入验证错误漏洞 — MQCWE-20 | 7.5 | High | 2024-03-03 |
| CVE-2023-6326 | WordPress Plugin Master Slider 安全漏洞 — Master Slider – Responsive Touch SliderCWE-352 | 5.4 | Medium | 2024-03-02 |
| CVE-2024-0378 | WordPress Plugin AI Engine 安全漏洞 — AI Engine – The Chatbot, AI Framework & MCP for WordPressCWE-79 | 6.5 | Medium | 2024-03-02 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 22564 条 CVE 漏洞。