Cyber alerts - NHS England Digital

CC-4462 Medium

Published Thursday 7 March 2024 (01:53) (updated 11 March 2024)

Progress Releases Critical Security Update for OpenEdge Authentication Gateway and AdminServer

The critical vulnerability could allow an attacker to bypass authentication controls

CC-4450 Medium

Published Wednesday 7 February 2024 (04:23) (updated 8 February 2024)

Exploitation of Google Chromium Vulnerability CVE-2023-4762

Exploitation of this vulnerability, which affects multiple products, could lead to arbitrary code execution

CC-4438 Medium

Published Wednesday 17 January 2024 (04:39) (updated 17 January 2024)

Google Releases Security Update Addressing Zero-Day Vulnerability in Google Chrome

Security update addresses three high severity vulnerabilities in Google Chrome including one which is actively exploited, along with one additional undisclosed vulnerability

CC-4425 Medium

Published Thursday 21 December 2023 (04:01) (updated 21 December 2023)

Ivanti Releases Security Updates for Multiple Critical Vulnerabilities Affecting Avalanche

Ivanti security updates address twenty two vulnerabilities, thirteen of which are known to be critical severity, affecting Avalanche

CC-4424 Medium

Published Thursday 21 December 2023 (03:55) (updated 21 December 2023)

Google Releases Security Update Addressing Zero-Day Vulnerability in Google Chrome

Security update addresses one high severity vulnerability in Google Chrome which is actively exploited

CC-4426 Medium

Published Thursday 21 December 2023 (03:40) (updated 21 December 2023)

Exploitation of Microsoft Office Vulnerability CVE-2017-11882

The memory corruption vulnerability in Microsoft Office could be exploited to perform code execution

CC-4423 Medium

Published Thursday 14 December 2023 (02:57) (updated 14 December 2023)

Apache Struts 2 Vulnerability CVE-2023-50164

Security update addresses a critical path traversal vulnerability that could lead to RCE

CC-4419 Medium

Published Friday 8 December 2023 (04:08) (updated 8 December 2023)

Multiple Vulnerabilities in Sierra AirLink Cellular Routers

A critical and several high severity vulnerabilities have been found affecting Sierra AirLink cellular routers

CC-4404 Medium

Published Friday 3 November 2023 (11:13) (updated 10 November 2023)

Apache ActiveMQ RCE Vulnerability CVE-2023-46604

A Critical vulnerability that could allow a remote attacker with network access to a broker to run arbitrary shell commands

CC-4243 Medium

Published Thursday 12 January 2023 (02:08) (updated 12 January 2023)

Critical Vulnerability in Control Web Panel (CWP7) for CentOS 7 / 8

A critical remote code execution (RCE) and elevation of privilege vulnerability in the Control Web Panel (CWP7) for CentOS 7 / 8 is being exploited