Archive

19 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /19 October 2024 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2024-45410 Public exploit

HTTP client can remove the X-Forwarded headers in Traefik

Traefik is a golang, Cloud Native Application Proxy. When a HTTP request is processed by Traefik, certain HTTP headers such as X-Forwarded-Host or X-Forwarded-Port are added by Traefik before the request is routed to the application. For a HTTP client, it sho…

traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go

Sep 19, 2024
Critical 9.4

CVE-2024-8963 Exploited Public exploit Scanner template EPSS 99%

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted fun…

ivanti CSA (Cloud Services Appliance) Network devices

Sep 19, 2024
KEV Sep 19, 2024