Filtered by vendor Herac Subscriptions
Filtered by product Tuxguitar Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2010-3385 1 Herac 1 Tuxguitar 2024-09-17 N/A
TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2020-14940 1 Herac 1 Tuxguitar 2024-08-04 7.5 High
An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.