Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductDownload Manager (11d90ec9-4d68-5a2f-9b1f-481b4e0f5798)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2926 vulnerable 2026-06-08 05:43:36.725943 Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory
Published: 2022-09-26T12:35:35.000Z
Updated: 2025-05-21T16:23:31.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0189 vulnerable 2026-06-08 04:51:53.486123 Details available
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
Published: 2010-02-23T20:00:00.000Z
Updated: 2024-08-07T00:37:54.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4817 not_vulnerable 2026-06-08 04:50:48.391136 Details available
The Download Manager in Adobe Acrobat Professional and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that calls an AcroJS function with a long string argument, triggering heap corruption.
Published: 2008-11-05T14:51:00.000Z
Updated: 2024-08-07T10:31:27.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4816 not_vulnerable 2026-06-08 04:50:48.390574 Details available
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.
Published: 2008-11-05T14:51:00.000Z
Updated: 2024-08-07T10:31:27.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5856 vulnerable 2026-06-08 04:49:21.446571 Details available
Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.
Published: 2006-12-06T19:00:00.000Z
Updated: 2024-08-07T20:04:55.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.