Severity: High (CVSS 8.7) Affected Systems: Affected products listed in the NVD and vendor advisory Overview Shell command injection in Logseq A high vulnerability identified as CVE-2026-9279 has been disclosed. Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name ... Read More »
Severity: High (CVSS 8.7) Affected Systems: Affected products listed in the NVD and vendor advisory Overview Arbitrary File Read, Write, Rename, and Delete in Logseq A high vulnerability identified as CVE-2026-47899 has been disclosed. The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC ... Read More »
Severity: High (CVSS 8.8) Affected Systems: Affected products listed in the NVD and vendor advisory Overview manageiq: YAML safe_load production fallback to unsafe_load enables RCE via deserializa... A high vulnerability identified as CVE-2026-52903 has been disclosed. A deserialization of untrusted data vulnerability was found in ManageIQ. The ... Read More »
Severity: High (CVSS 8.8) Affected Systems: Affected products listed in the NVD and vendor advisory Overview Wow Forms WordPress Plugin 2.1 SQL Injection A high vulnerability identified as CVE-2017-20244 has been disclosed. Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read ... Read More »
