Ddiem-project

Products

Exploited and recent CVEs

• CVE-2026-112138 Medium 4.7 diem-project diem dmCodeEditor actions.class.php join path traversal 0.3%
• CVE-2026-112042 Low 3.5 diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting 0.2%
• CVE-2026-112041 Low 3.7 diem-project diem dmString.php random weak prng 0.3%
• CVE-2026-112040 Medium 4.3 diem-project diem Sign-In BasedmUserActions.class.php redirect 0.3%
• CVE-2026-112039 Low 2.4 diem-project diem Administrative Console actions.class.php append cross site scripting 0.2%
• CVE-2026-112038 Low 2.4 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting 0.2%
• CVE-2026-112037 Low 3.7 diem-project diem Google Analytics Client gapi.class.php certificate validation 0.2%
• CVE-2026-112030 Medium 6.3 diem-project diem dmDataLoad.php default password 0.3%
• CVE-2026-112029 Low 2.5 diem-project diem SHA1 PluginDmUser.class.php weak password hash <0.1%
• CVE-2026-86183 Medium 5.3 diem-project diem dmWidget BasedmWidgetActions.class.php authorization 0.6%
• CVE-2026-86182 Medium 4.3 diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery 0.2%
• CVE-2026-82679 Medium 6.3 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload 0.4%
• CVE-2026-82678 Medium 4.7 diem-project diem Administrative Console actions.class.php executeCommand os command injection 2.2%