Vulnerability
Recently, Office Vulnerability (CVE-2018-0802) was fixed in a monthly security update released by Microsoft on Tuesday. This vulnerability is the latest in the Office Formula Editor due to improper handling of objects in memory
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers (CVE-2018-0762). By exploiting this vulnerability, an attacker can execute arbitrary code in the context of the current user.
VMWare released three patches for vSphere Data Protection (VDP) that affects to VDP 5.x, 6.0.x and 6.1.x version. An attacker can exploit some of these vSphere Data Protection vulnerabilities to gain unauthorized root access to the affected systems.
Recently, a new version of phpMyAdmin has been released to fix CSRF vulnerability that affects phpMyAdmin versions 4.7.x (prior to 4.7.7). By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.