Cyber alerts - NHS England Digital

CC-4426 Medium

Published Thursday 21 December 2023 (03:40) (updated 21 December 2023)

Exploitation of Microsoft Office Vulnerability CVE-2017-11882

The memory corruption vulnerability in Microsoft Office could be exploited to perform code execution

CC-4423 Medium

Published Thursday 14 December 2023 (02:57) (updated 14 December 2023)

Apache Struts 2 Vulnerability CVE-2023-50164

Security update addresses a critical path traversal vulnerability that could lead to RCE

CC-4419 Medium

Published Friday 8 December 2023 (04:08) (updated 8 December 2023)

Multiple Vulnerabilities in Sierra AirLink Cellular Routers

A critical and several high severity vulnerabilities have been found affecting Sierra AirLink cellular routers

CC-4404 Medium

Published Friday 3 November 2023 (11:13) (updated 10 November 2023)

Apache ActiveMQ RCE Vulnerability CVE-2023-46604

A Critical vulnerability that could allow a remote attacker with network access to a broker to run arbitrary shell commands

CC-4350 Low

Published Friday 30 June 2023 (02:15) (updated 30 June 2023)

Critical Vulnerability in Medtronic Paceart Optima System

The Critical vulnerability could allow an unauthenticated user to perform remote code execution or create a DoS condition

CC-4243 Medium

Published Thursday 12 January 2023 (02:08) (updated 12 January 2023)

Critical Vulnerability in Control Web Panel (CWP7) for CentOS 7 / 8

A critical remote code execution (RCE) and elevation of privilege vulnerability in the Control Web Panel (CWP7) for CentOS 7 / 8 is being exploited

CC-4223 Information only

Published Tuesday 6 December 2022 (02:08) (updated 18 January 2023)

Critical Security Update for Sophos Firewall

Critical security advisory addresses seven vulnerabilities including RCE

CC-4221 Low

Published Friday 2 December 2022 (11:16) (updated 2 December 2022)

BD BodyGuard Pumps Vulnerability

CISA Advisory includes a missing protection mechanism for alternate hardware interface vulnerability that could allow an attacker to change configuration settings or disable the pump

CC-4157 Information only

Published Tuesday 30 August 2022 (12:15) (updated 3 October 2022)

Atlassian Releases Security Update for Bitbucket Server and Data Center

Update addresses critical command injection vulnerability

CC-4025 Medium

Published Wednesday 26 January 2022 (02:17) (updated 29 June 2022)

PwnKit Linux Privilege Escalation Vulnerability

A vulnerability in the widely used PolKit extension