# CVEs published 2018-08-04

1 CVE was published on August 4, 2018: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-14933](https://cve.now/CVE-2018-14933.md): upgrade\_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeup (CVSS 9.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
