# CVEs published 2018-08-18

8 CVEs were published on August 18, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-15491](https://cve.now/CVE-2018-15491.md): A vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527 and prior (fixed in 1.9.3.602) allows an att (no CVSS)
- [CVE-2018-15492](https://cve.now/CVE-2018-15492.md): A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. (no CVSS)
- [CVE-2018-15494](https://cve.now/CVE-2018-15494.md): In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. (no CVSS, dojox)
- [CVE-2018-15495](https://cve.now/CVE-2018-15495.md): /filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used direct (no CVSS)
- [CVE-2018-15501](https://cve.now/CVE-2018-15501.md): In ng\_pkt in transports/smart\_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol " (no CVSS)
- [CVE-2018-15503](https://cve.now/CVE-2018-15503.md): The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process. (no CVSS)
- [CVE-2018-15504](https://cve.now/CVE-2018-15504.md): An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. (no CVSS)
- [CVE-2018-15505](https://cve.now/CVE-2018-15505.md): An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.