NVD disclosure day

Published threat advisories for January 13, 2015

CVE-2015-0016

Microsoft Windows Privilege Escalation Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A directory traversal vulnerability in Microsoft Windows TS WebProxy could allow an attacker to gain elevated privileges. This impacts organizations by enabling unauthorized access and control over system resources. The realistic business risk involves potential system compromise and data integrity issues.

NVD published: January 13, 2015 • CISA KEV

CVE advisoryKnown Exploit

CVE-2014-100005

D-Link DIR-600 Router Administrator Account Compromise

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Certain D-Link DIR-600 routers have vulnerabilities allowing remote attackers to alter configurations via cross-site request forgery by hijacking administrator sessions. This could lead to unauthorized account creation or remote management enablement, increasing business risk.

NVD published: January 13, 2015 • CISA KEV