Guitar Pro

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-43264 HIGH POC This Week

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Guitar Pro

NVD

CVSS 3.1

7.5

EPSS

0.9%

CVE-2022-43263 MEDIUM POC This Month

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Guitar Pro

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2012-6048 MEDIUM POC This Month

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Guitar Pro

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

7.4%

CVE-2022-43264

EPSS 1% CVSS 7.5

HIGH POC This Week

Path Traversal Guitar Pro

NVD

CVE-2022-43263

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS Guitar Pro

NVD

CVE-2012-6048

EPSS 7% CVSS 5.0

MEDIUM POC This Month

Buffer Overflow Denial Of Service Guitar Pro

NVD Exploit-DB