Lucene search
+L

1148 matches found

Packet Storm News
Packet Storm News
added 2026/03/08 12:0 a.m.5 views

Post-Quantum Federated Learning: Secure and Scalable Threat Intelligence for Collaborative Cyber Defense

Collaborative threat intelligence via federated learning FL faces critical risks from quantum computing, which can compromise classical encryption methods. This study proposes a quantum-secure FL framework using post-quantum cryptography PQC to protect cross-organizational data sharing. We expose...

5.8AI score
SaveExploits0
Wiz blog
Wiz blog
added 2026/03/06 1:0 p.m.26 views

Introducing Wiz Tenant Manager: Multi-Tenant Management for Federated Organizations

Experience full Wiz security with zero friction, managing multiple tenants in a single console...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/25 10:16 a.m.6 views

CVE-2024-1524

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

8.1CVSS5.3AI score0.00261EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 9:16 a.m.8 views

CVE-2024-1524

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

8.1CVSS5.7AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/24 9:16 a.m.9 views

CVE-2024-1524

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

8.1CVSS0.00261EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/24 8:51 a.m.5 views

CVE-2024-1524

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

7.7CVSS5.3AI score0.00261EPSS
SaveExploits0References2Affected Software2
EUVD
EUVD
added 2026/02/24 8:51 a.m.10 views

EUVD-2024-17272

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

7.7CVSS5.3AI score0.00261EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/24 8:51 a.m.6 views

CVE-2024-1524 A local user can be impersonated when using federated authentication with Silent JIT Provisioning.

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

7.7CVSS5.2AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/24 8:51 a.m.23 views

CVE-2024-1524 A local user can be impersonated when using federated authentication with Silent JIT Provisioning.

When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP there is a risk that a local user store user's information may be replaced during the account provisioning process in cases where federated users share the same username as local users. There will...

7.7CVSS0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/24 8:51 a.m.15 views

CVE-2024-1524

CVE-2024-1524 describes a risk when a federated IDP uses Silent Just-In-Time provisioning: if preconditions are met, a malicious actor could cause a targeted local user account to be linked to a federated IDP user they control, potentially replacing information in the local user store. The CVE is...

8.1CVSS5.3AI score0.00261EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.8 views

WSO2 API Manager和WSO2 Identity Server(IS) 安全漏洞

WSO2 API Manager and WSO2 Identity Server are both products of the American company WSO2. WSO2 API Manager is a set of API lifecycle management solutions. WSO2 Identity Server is an identity authentication server. Both WSO2 API Manager and WSO2 Identity Server have security vulnerabilities. These...

8.1CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.11 views

PT-2026-21674

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider IDP, a local user store user’s information may be replaced duri...

7.7CVSS5.9AI score0.00261EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
added 2026/02/19 12:0 a.m.6 views

PenTiDef: Enhancing Privacy and Robustness in Decentralized Federated Intrusion Detection Systems against Poisoning Attacks

The increasing deployment of Federated Learning FL in Intrusion Detection Systems IDS introduces new challenges related to data privacy, centralized coordination, and susceptibility to poisoning attacks. While significant research has focused on protecting traditional FL-IDS with centralized...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/18 7:30 p.m.6 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS5.5AI score0.0024EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/18 3:2 p.m.14 views

Security Bulletin: IBM® Db2® Federated server is vulnerable to a denial of service with a specially crafted query (CVE-2025-36424)

Summary IBM® Db2® Federated server could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic. Vulnerability Details CVEID:CVE-2025-36424 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a us...

6.5CVSS5.5AI score0.00328EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/02/17 6:20 p.m.4 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/17 6:20 p.m.13 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/17 5:12 p.m.29 views

CVE-2025-14689 IBM Db2 Denial of Service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 5:12 p.m.4 views

CVE-2025-14689 IBM Db2 Denial of Service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS5.5AI score0.0024EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 5:12 p.m.4 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS5.5AI score0.0024EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder