5527 matches found
GHSA-42XW-2XVC-QX8M Denial of Service in axios
Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...
Design/Logic Flaw
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
DEBIAN-CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
UBUNTU-CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
CVE-2019-10742
Axios versions prior to 0.18.1 are vulnerable to a Denial of Service due to continuing to accept content after maxContentLength is exceeded, potentially causing server/application resource exhaustion. Public advisories reference DoS in Axios up to 0.18.0 and recommend upgrading to 0.18.1 or later...
CVE-2019-10742: Improper Handling of Exceptional Conditions
Axios up to and including 0.18.0 allows attackers to cause a denial of service application crash by continuing to accepting content after maxContentLength is exceeded...
Denial of Service
Overview Versions of axios prior to 0.18.1 are vulnerable to Denial of Service. If a request exceeds the maxContentLength property, the package prints an error but does not stop the request. This may cause high CPU usage and lead to Denial of Service. Recommendation Upgrade to 0.18.1 or later...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
Design/Logic Flaw
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693
CVE-2019-7693 affects Axios Italia Axios RE 1.7.0/7.0.0 devices. The issue is an XSS vulnerability triggered via the RELogOff.aspx Error_Parameters parameter, with potential impact on the family.axioscloud.it cloud service; offline operation is supported by the vendor via “Sissi in Rete (con serv...
CVE-2019-7693
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...
CVE-2019-7693: Improper Neutralization of Input During Web Page Generation
Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx ErrorParameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendor also supports "Sissi in Rete con server" for offline operation...