Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

diem-project — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting diem-project. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data specifically for the diem-project vendor, focusing on software weaknesses within its blockchain infrastructure and associated tags. The collection encompasses a wide spectrum of security issues ranging from consensus protocol flaws and smart contract logic errors to cryptographic implementation bugs and network layer vulnerabilities reported between the project's inception in 2019 and its final archival phase in 2022. Visitors can utilize this resource to track the complete history of official security advisories issued by the maintainers, analyze the prevalence and impact of specific weakness classes across the ecosystem, or review the comprehensive vulnerability timeline for individual products within the suite. By centralizing these records, the page serves as a definitive reference for security researchers and developers seeking to understand the evolution of security posture within the diem-project codebase without needing to navigate disparate external databases. The data presented here is derived from public disclosures and internal reports, ensuring an accurate and chronological view of how threats were identified, categorized, and addressed over the project's operational lifespan. This structured aggregation facilitates efficient risk assessment and historical analysis for anyone evaluating the security maturity of the former digital currency platform.

Top products by diem-project: diem
CVE ID Title CVSS Severity Published
CVE-2026-112138 diem-project diem dmCodeEditor actions.class.php join path traversal — diem CWE-22 4.7 Medium 2026-10-19
CVE-2026-112042 diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting — diem CWE-79 3.5 Low 2026-10-19
CVE-2026-112041 diem-project diem dmString.php random weak prng — diem CWE-338 3.7 Low 2026-10-19
CVE-2026-112040 diem-project diem Sign-In BasedmUserActions.class.php redirect — diem CWE-601 4.3 Medium 2026-10-19
CVE-2026-112039 diem-project diem Administrative Console actions.class.php append cross site scripting — diem CWE-79 2.4 Low 2026-10-19
CVE-2026-112038 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting — diem CWE-79 2.4 Low 2026-10-19
CVE-2026-112037 diem-project diem Google Analytics Client gapi.class.php certificate validation — diem CWE-295 3.7 Low 2026-10-19
CVE-2026-112030 diem-project diem dmDataLoad.php default password — diem CWE-1393 6.3 Medium 2026-10-18
CVE-2026-112029 diem-project diem SHA1 PluginDmUser.class.php weak password hash — diem CWE-916 2.5 Low 2026-10-18
CVE-2026-86183 diem-project diem dmWidget BasedmWidgetActions.class.php authorization — diem CWE-639 5.3 Medium 2026-09-06
CVE-2026-86182 diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery — diem CWE-352 4.3 Medium 2026-09-06
CVE-2026-82679 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload — diem CWE-434 6.3 Medium 2026-08-31
CVE-2026-82678 diem-project diem Administrative Console actions.class.php executeCommand os command injection — diem CWE-78 4.7 Medium 2026-08-31

This page lists every published CVE security advisory associated with diem-project. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.