Microsoft Releases December 2020 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review Microsoft’s...

Security Updates for Microsoft Excel Products (December 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2020-17123, CVE-2020-17125,...

Security Update for Microsoft Exchange Server 2010 SP 3 (December 2020)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability: - A remote code execution vulnerability. An attacker could exploit this to execute unauthorized arbitrary code. CVE-2020-17144 %NASLMINLEVEL 70300 C Tenable...

CVE-2017-1000501

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:18+00:00| seen| https://t.me/cibsecurity/17207 2020-12-12 02:35:52+00:00| seen| https://t.me/cibsecurity/20651 2020-12-12 02:38:53+00:00| seen| https://t.me/cibsecurity/20671 2020-12-12 03:25:20+00:00| seen| https://t.me/cibsecurity/206...

CVE-2020-9247

creationtimestamp| type| source ---|---|--- 2020-12-07 16:30:03+00:00| seen| https://t.me/cibsecurity/17184...

Pixel Update Bulletin—December 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2020-12-05 or later address all issues in this bulletin and all issues in the December 2020 Android...

CVE-2020-29288

creationtimestamp| type| source ---|---|--- 2020-12-03 00:55:25+00:00| seen| https://t.me/cibsecurity/17067...

CVE-2017-15682

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:18+00:00| seen| https://t.me/cibsecurity/16898 2020-12-09 07:32:07+00:00| seen| https://t.me/cibsecurity/17443...

Trump’s Election Attack Ends December 14—Whether He Knows It or Not

Despite the Trump campaign’s fight to overturn the election, the wheels of American democracy keep turning...

CVE-2020-26226

creationtimestamp| type| source ---|---|--- 2020-11-19 00:40:41+00:00| seen| https://t.me/cibsecurity/16564 2020-12-09 06:25:20+00:00| seen| https://t.me/cibsecurity/17398...

CVE-2020-28136

creationtimestamp| type| source ---|---|--- 2020-11-17 22:39:28+00:00| seen| https://t.me/cibsecurity/16473 2020-12-09 04:25:20+00:00| seen| https://t.me/cibsecurity/17357...

CVE-2020-25988

creationtimestamp| type| source ---|---|--- 2020-11-17 22:39:20+00:00| seen| https://t.me/cibsecurity/16466 2020-11-21 19:18:00+00:00| published-proof-of-concept| Telegram/UxTNBzpYPuAvWiUw14OoLCI4dqVav6XCEd41yK8XAnw 2020-12-09 03:25:22+00:00| seen| https://t.me/cibsecurity/17346 2020-12-09...

November 10, 2020—KB4586793 (OS Build 17763.1577) - EXPIRED

None None...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

Description of the Office 2010 update: December 13, 2011

Description of the Office 2010 update: December 13, 2011 INTRODUCTION Microsoft has released an update for Microsoft Office 2010. This update provides the latest fixes for the 32-bit and the 64-bit editions of Office 2010. Additionally, this update contains stability and performance improvements...

MS15-131: Description of the security update for Office 2010: December 8, 2015

MS15-131: Description of the security update for Office 2010: December 8, 2015 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

CVE-2015-5524

An issue was discovered on Samsung mobile devices with KK4.4 and later software through 2015-05-13. There is a buffer overflow in datablockwrite because the amount of received data is not validated. The Samsung ID is SVE-2015-4018 December 2015...