Vendors / Tonec Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Tonec records in CISA KEV No Tonec vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 78
Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00247 · Published 2025-11-05 · No fix listed CWE-295
Priority HIGH 75
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows.
CVSS 4.0 CRITICAL 9.3· Local · Low privileges · No interaction · EPSS 0.00155 · Published 2026-09-13 · No fix listed CWE-266
Priority MEDIUM 51
Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server…
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08146 · Published 2010-05-05 · No fix listed CWE-119
Priority LOW 31
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function.
CVSS 3.1 HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00409 · Published 2021-10-22 · No fix listed CWE-787
Priority LOW 30
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function.
CVSS 3.1 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00414 · Published 2021-10-22 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
3 1 1 0 0
THREATIST.IORead the docs