Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

diem — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in diem, with AI-generated Chinese analysis, references, and POCs.

Vendor: diem-project

CVE ID Title CVSS Severity Published
CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal CWE-22 4.7 Medium 2026-10-19
CVE-2026-112042 diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting CWE-79 3.5 Low 2026-10-19
CVE-2026-112041 diem-project diem dmString.php random weak prng CWE-338 3.7 Low 2026-10-19
CVE-2026-112040 diem-project diem Sign-In BasedmUserActions.class.php redirect CWE-601 4.3 Medium 2026-10-19
CVE-2026-112039 diem-project diem Administrative Console actions.class.php append cross site scripting CWE-79 2.4 Low 2026-10-19
CVE-2026-112038 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting CWE-79 2.4 Low 2026-10-19
CVE-2026-112037 diem-project diem Google Analytics Client gapi.class.php certificate validation CWE-295 3.7 Low 2026-10-19
CVE-2026-112030 diem-project diem dmDataLoad.php default password CWE-1393 6.3 Medium 2026-10-18
CVE-2026-112029 diem-project diem SHA1 PluginDmUser.class.php weak password hash CWE-916 2.5 Low 2026-10-18
CVE-2026-86183 diem-project diem dmWidget BasedmWidgetActions.class.php authorization CWE-639 5.3 Medium 2026-09-06
CVE-2026-86182 diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery CWE-352 4.3 Medium 2026-09-06
CVE-2026-82679 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload CWE-434 6.3 Medium 2026-08-31
CVE-2026-82678 diem-project diem Administrative Console actions.class.php executeCommand os command injection CWE-78 4.7 Medium 2026-08-31

All 13 known CVE vulnerabilities affecting diem with full Chinese analysis, references, and POCs where available.