Herac Tuxguitar
2 CVEs affecting Herac Tuxguitar. Latest disclosed: 2020-06-23. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14940 | High | 7.5 | 2020-06-23 | An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7… |
CVE-2010-3385 | | 2010-10-20 | TuxGuitar 1.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the… |