CVE-2020-9688

CVE-2020-9688 affects Adobe Download Manager for Windows, version 2.0.0.518. The issue is a command-injection vulnerability that could allow arbitrary code execution in the context of the current user when exploited. The CVSS data indicates a local attack vector requiring user interaction. Adobe ...

CVE-2006-5856

Summary (CVE-2006-5856): Adobe Download Manager (ADM) prior to version 2.2 contains a stack-based buffer overflow in the AOM file parser. A long section name in the dm.ini file (populated from AOM files) can be used by a remote attacker to execute arbitrary code. Exploitation generally requires t...

CVE-2022-2926

CVE-2022-2926 affects the WordPress Download Manager plugin, specifically versions before 3.2.55. The vulnerability arises from a lack of validation in one plugin setting, enabling high-privilege users (e.g., admins) to list and read arbitrary files and folders outside the blog directory via path...

CVE-2010-0189

The CVE-2010-0189 issue targets Adobe Download Manager’s getPlus ActiveX control (NOS Microsystems) version 1.5.2.35, where insufficient domain-name validation allows an attacker to craft a download site name that, when loaded in Internet Explorer with the ActiveX control, could cause the user to...

CVE-2019-8071

CVE-2019-8071 pertains to Adobe Download Manager 2.0.0.363 and involves an insecure file-permission vulnerability that could allow privilege escalation. Public sources in the connected documents consistently describe an impact of elevating privileges on affected Windows systems. The root cause is...