DEBIAN-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

UBUNTU-CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...

CVE-2019-10742

Axios versions prior to 0.18.1 are vulnerable to a Denial of Service due to continuing to accept content after maxContentLength is exceeded, potentially causing server/application resource exhaustion. Public advisories reference DoS in Axios up to 0.18.0 and recommend upgrading to 0.18.1 or later...

Denial of Service

Overview Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...

Design/Logic Flaw

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...

CVE-2019-7693

CVE-2019-7693 affects Axios Italia Axios RE 1.7.0/7.0.0 devices. The issue is an XSS vulnerability triggered via the RELogOff.aspx Error_Parameters parameter, with potential impact on the family.axioscloud.it cloud service; offline operation is supported by the vendor via “Sissi in Rete (con serv...

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

Design/Logic Flaw

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

CVE-2018-18437

CVE-2018-18437 affects AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in secret/relogoff.aspx exploitable via the Error_Desc parameter, allowing an attacker to inject arbitrary script when the page is rendered. Documented in mul...

CVE-2018-18437

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the ErrorDesc parameter...

Malicious Package

Overview All versions of axois are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Thi...

Denial Of Service (DoS)

axios is vulnerable to Denial Of Service DoS. The vulnerability exists as content can continue to be sent through the stream even after the request has exceeded the maxContentLength, potentially causing a denial of service attack...

10chars-test (>=1.0.0 <=1.0.34), 12366.ui-comp (=0.0.1) +9227 more potentially affected by CVE-2019-10742 via axios (>=0.10.0 <=0.18.0)

axios NPM version =0.10.0, =1.0.0, =1.0.0, =1.2.0, =1.0.0, =0.3.11, =0.3.3, =0.3.0, =1.0.0, =0.2.0, =0.2.1 and more Source cves: CVE-2019-10742 Source advisory: SNYK:JS-AXIOS-174505...

Denial of Service (DoS)

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Denial of Service DoS due to content continuing to be accepted from requests after maxContentLength is exceeded. PoC require'axios'.get...