Filtered by vendor Herac
Subscriptions
Filtered by product Tuxguitar
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-14940 | 1 Herac | 1 Tuxguitar | 2024-11-21 | 7.5 High |
| An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files. | ||||
| CVE-2010-3385 | 1 Herac | 1 Tuxguitar | 2024-11-21 | N/A |
| TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. | ||||
Page 1 of 1.