Vulnerabilities in diem-project
13 resultsCVE-2026-82678MEDIUMdiem-project diem Administrative Console actions.class.php executeCommand os command injectionEPSS 2.2%CVE-2026-86183MEDIUMdiem-project diem dmWidget BasedmWidgetActions.class.php authorizationEPSS 0.6%CVE-2026-82679MEDIUMdiem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted uploadEPSS 0.4%CVE-2026-112138MEDIUMdiem-project diem dmCodeEditor actions.class.php join path traversalEPSS 0.3%CVE-2026-112041MEDIUMdiem-project diem dmString.php random weak prngEPSS 0.3%CVE-2026-112030MEDIUMdiem-project diem dmDataLoad.php default passwordEPSS 0.3%CVE-2026-112040MEDIUMdiem-project diem Sign-In BasedmUserActions.class.php redirectEPSS 0.3%CVE-2026-86182MEDIUMdiem-project diem dmConsole actions.class.php executeCommand cross-site request forgeryEPSS 0.2%CVE-2026-112039MEDIUMdiem-project diem Administrative Console actions.class.php append cross site scriptingEPSS 0.2%CVE-2026-112038MEDIUMdiem-project diem Version Check Service dmAdminCtrl.js html cross site scriptingEPSS 0.2%CVE-2026-112042MEDIUMdiem-project diem dmWidget dmBaseLinkTag.php text cross site scriptingEPSS 0.2%CVE-2026-112037MEDIUMdiem-project diem Google Analytics Client gapi.class.php certificate validationEPSS 0.2%CVE-2026-112029LOWdiem-project diem SHA1 PluginDmUser.class.php weak password hashEPSS 0.1%