Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

pwndoc vulnerabilities

6 published CVEs name pwndoc among the affected products.

Newest CVEs

  • CVE-2025-27413

    PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json

    pwndoc · pwndoc

    Medium6.5
  • CVE-2025-27410

    PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin

    pwndoc · pwndoc

    Medium6.5
  • CVE-2025-23044

    Cross-Site Request Forgery (CSRF) allows creating admin account with POST request

    pwndoc · pwndoc

    Medium6.8
  • CVE-2024-55652

    PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters

    pwndoc · pwndoc

    Medium6.5
  • CVE-2024-55653

    pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)

    pwndoc · pwndoc

    Medium6.5
  • CVE-2024-55602

    PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal

    pwndoc · pwndoc

    High7.6