4886 matches found
Malicious Package
axios-http is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...
Denial of Service in axios
Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...
GHSA-42XW-2XVC-QX8M Denial of Service in axios
Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...
Design/Logic Flaw
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
DEBIAN-CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
UBUNTU-CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios versions prior to 0.18.1 are vulnerable to a Denial of Service due to continuing to accept content after maxContentLength is exceeded, potentially causing server/application resource exhaustion. Public advisories reference DoS in Axios up to 0.18.0 and recommend upgrading to 0.18.1 or later...
Denial of Service
Overview Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...
Design/Logic Flaw
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693
CVE-2019-7693 affects Axios Italia Axios RE 1.7.0/7.0.0 devices. The issue is an XSS vulnerability triggered via the RELogOff.aspx Error_Parameters parameter, with potential impact on the family.axioscloud.it cloud service; offline operation is supported by the vendor via “Sissi in Rete (con serv...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...