Skip to contentDiem-project Diem vulnerabilities
- diem-project diemdiem-project diem dmCodeEditor actions.class.php join path traversalCVE-2026-1121385.1 Medium
- diem-project diemdiem-project diem dmWidget dmBaseLinkTag.php text cross site scriptingCVE-2026-1120425.1 Medium
- diem-project diemdiem-project diem dmString.php random weak prngCVE-2026-1120416.3 Medium
- diem-project diemdiem-project diem Sign-In BasedmUserActions.class.php redirectCVE-2026-1120405.3 Medium
- diem-project diemdiem-project diem Administrative Console actions.class.php append cross site scriptingCVE-2026-1120394.8 Medium
- diem-project diemdiem-project diem Version Check Service dmAdminCtrl.js html cross site scriptingCVE-2026-1120384.8 Medium
- diem-project diemdiem-project diem Google Analytics Client gapi.class.php certificate validationCVE-2026-1120376.3 Medium
- diem-project diemdiem-project diem dmDataLoad.php default passwordCVE-2026-1120305.3 Medium
- diem-project diemdiem-project diem SHA1 PluginDmUser.class.php weak password hashCVE-2026-1120292.0 Low
- diem-project diemdiem-project diem dmWidget BasedmWidgetActions.class.php authorizationCVE-2026-861836.9 Medium
- diem-project diemdiem-project diem dmConsole actions.class.php executeCommand cross-site request forgeryCVE-2026-861825.3 Medium
- diem-project diemdiem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted uploadCVE-2026-826795.3 Medium
- diem-project diemdiem-project diem Administrative Console actions.class.php executeCommand os command injectionCVE-2026-826785.1 Medium