Vulnerabilities

TI-2022-21114 CVE-2022-43264 · GHSA-7jfg-qpxp-6grc

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform…

HIGH 72

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00923 Published 2022-11-16 No fix listed CWE-22

TI-2022-21113 CVE-2022-43263 · GHSA-fw87-542j-77hx

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the name of an upload…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00503 Published 2022-11-16 No fix listed CWE-79

TI-2012-05012 CVE-2012-6048 · GHSA-qfpf-hhg3-hc65

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.

LOW 28

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02445 Published 2012-11-27 No fix listed CWE-119

Vulnerabilities

Filters

Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform…

A cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone…

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.