Vulnerabilities in Thales Group software