Vulnerabilities
Summary — last 7 days
New vulnerabilities5,441▲ 2,180 vs. last week
Critical / high2,814▲ 1,258 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)610▲ 400 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (4.6) | 0.36% | — | IdailydiaryAI | 1/16/2026 | 6/17/2026 | iDailyDiary 4.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the preferences tab name field. Attackers can paste a 2,000,000 character buffer into the default diary tab name to trigger an application crash. | |
| Modified | Medium (4.6) | 0.24% | — | KAB Software Lydia | 2/19/1999 | 6/16/2026 | Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges. |