8973 matches found
CVE-2025-49746: Improper Authorization
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
CVE-2025-49747: Missing Authorization
Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
PT-2025-30067 · Microsoft · Azure Machine Learning
Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information...
PT-2025-30068 · Microsoft · Azure Machine Learning
Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information...
PT-2025-30066 · Microsoft · Azure Machine Learning
Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information abou...
Microsoft Azure Machine Learning Authorization Vulnerability
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
CVE-2025-47995: Weak Authentication
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
Microsoft Azure Machine Learning security vulnerabilities
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
Microsoft Azure Machine Learning security vulnerabilities
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
CVE-2025-46102
Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...
CVE-2025-46102
Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...
CVE-2025-46102
Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...
A Crowdsensing Intrusion Detection Dataset for Decentralized Federated Learning Models
This paper introduces a dataset and experimental study for decentralized federated learning DFL applied to IoT crowdsensing malware detection. The dataset comprises behavioral records from benign and eight malware families. A total of 21,582,484 original records were collected from system calls,...
Learning-Based Cost-Aware Defense of Parallel Server Systems against Malicious Attacks
We consider the cyber-physical security of parallel server systems, which is relevant for a variety of engineering applications such as networking, manufacturing, and transportation. These systems rely on feedback control and may thus be vulnerable to malicious attacks such as denial-of-service,...
SHIELD: a Secure and Highly Enhanced Integrated Learning for Robust Deepfake Detection against Adversarial Attacks
Audio plays a crucial role in applications like speaker verification, voice-enabled smart devices, and audio conferencing. However, audio manipulations, such as deepfakes, pose significant risks by enabling the spread of misinformation. Our empirical analysis reveals that existing methods for...
A Distributed Generative AI Approach for Heterogeneous Multi-Domain Environments under Data Sharing Constraints
Federated Learning has gained increasing attention for its ability to enable multiple nodes to collaboratively train machine learning models without sharing their raw data. At the same time, Generative AI -- particularly Generative Adversarial Networks GANs -- have achieved remarkable success...
A Bayesian Incentive Mechanism for Poison-Resilient Federated Learning
Federated learning FL enables collaborative model training across decentralized clients while preserving data privacy. However, its open-participation nature exposes it to data-poisoning attacks, in which malicious actors submit corrupted model updates to degrade the global model. Existing defens...
How to Mitigate and Defend against DDoS Attacks in IoT Devices
Distributed Denial of Service DDoS attacks have become increasingly prevalent and dangerous in the context of Internet of Things IoT networks, primarily due to the low-security configurations of many connected devices. This paper analyzes the nature and impact of DDoS attacks such as those launch...
CVE-2025-46102: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...
Beakon Learning Management System Sharable Content Object Reference Model Security Vulnerabilities
Beakon Learning Management System Sharable Content Object Reference Model is a learning management system from Beakon Australia. A security vulnerability exists in Beakon Learning Management System Sharable Content Object Reference Model version V.5.4.3, which stems from mishandling of URL...