Known vulnerabilities in VMware Tanzu Application Service for VMs - page 23
Vendor:
Broadcom
Software:
VMware Tanzu Application Service for VMs
Software CPE:
cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
483
Public exploits:
18
Known exploited (KEV):
6
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.0.14
2.11.58
2.13.40
5.0.13
5.0.12
2.13.39
2.11.57
5.0.11
2.11.56
2.13.38
2.11.55
2.13.37
5.0.10
5.0.9
5.0.8
2.13.36
2.11.54
2.13.35
2.11.53
5.0.7
5.0.6
2.13.34
2.11.52
5.0.5
2.13.33
2.11.51
2.11.50
5.0.4
2.13.32
4.0.11
4.0.12
3.0.20
5.0.3
2.13.31
2.11.49
5.0.2
2.13.30
2.11.48
5.0.1
3.0.19
2.13.29
2.11.47
4.0.9
4.0.10
4.0.8
5.0.0
3.0.18
2.13.28
2.11.46
3.0.17
2.13.27
2.11.45
3.0.16
2.13.26
2.11.44
4.0.6
3.0.15
2.13.25
2.11.43
4.0.5
3.0.14
2.13.24
2.11.42
4.0.4
3.0.13
2.13.23
2.11.41
2.13.22
2.11.40
4.0.3
3.0.12
4.0.2
3.0.11
2.13.21
2.11.39
4.0.1
3.0.10
4.0.0
2.13.20
2.11.38
3.0.9
2.13.19
2.11.37
2.13.18
2.12.25
2.11.36
3.0.8
2.11.35
3.0.7
2.13.17
2.12.24
3.0.6
2.13.16
2.12.23
2.11.34
3.0.5
2.13.15
2.12.22
2.11.33
3.0.4
2.13.14
2.12.21
2.11.32
3.0.3
2.13.13
2.12.20
2.11.31
3.0.2
2.13.12
2.11.30
3.0.1
2.13.11
2.12.19
2.11.29
2.11.28
2.13.10
2.12.18
2.11.27
3.0.0
2.13.9
2.12.17
2.11.26
2.7.53
2.13.8
2.12.16
2.11.23
2.10.35
2.12.15
2.13.7
2.11.22
2.10.34
2.7.52
2.13.6
2.12.14
2.11.21
2.10.33
2.7.51
2.13.5
2.12.13
2.11.20
2.10.32
2.7.50
2.13.4
2.13.3
2.12.12
2.11.19
2.10.31
2.7.49
2.13.2
2.12.11
2.11.18
2.10.30
2.13.1
2.12.10
2.11.17
2.10.29
2.12.9
2.11.16
2.10.28
2.7.48
2.13.0
2.12.8
2.11.15
2.10.27
2.7.47
2.12.7
2.11.14
2.10.26
2.7.46
2.12.6
2.11.13
2.10.25
2.9.31
2.8.31
2.7.45
2.6.23
2.12.5
2.11.12
2.10.24
2.9.30
2.8.30
2.7.44
2.11.11
2.12.4
2.10.23
2.7.43
2.6.22
2.9.29
2.8.29
2.10.22
2.12.3
2.11.10
2.7.42
2.12.2
2.11.9
2.10.21
2.7.41
2.12.1
2.10.20
2.11.8
2.9.28
2.7.40
2.12.0
2.11.7
2.10.19
2.9.27
2.7.39
2.11.6
2.10.18
2.9.26
2.7.38
2.11.5
2.10.17
2.9.25
2.7.37
2.11.4
2.10.16
2.9.24
2.7.36
2.11.3
2.10.15
2.9.23
2.7.35
2.11.2
2.10.14
2.9.22
2.8.28
2.7.34
2.11.1
2.10.13
2.9.21
2.8.27
2.7.33
2.8.26
2.7.32
2.10.12
2.9.20
2.11.0
2.10.11
2.7.31
2.9.19
2.8.25
2.10.10
2.9.18
2.8.24
2.7.30
2.10.9
2.9.17
2.8.23
2.7.29
2.7.28
2.8.22
2.10.8
2.10.7
2.10.6
2.10.5
2.10.4
2.9.16
2.9.15
2.9.14
2.9.13
2.9.12
2.9.0
2.8.21
2.8.20
2.8.19
2.8.18
2.8.4
2.7.27
2.7.26
2.7.25
2.7.24
2.6.21
2.6.20
2.6.19
2.6.18
2.6.17
2.6.16
2.6.15
2.6.14
2.6.13
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.21
2.5.20
2.5.19
2.5.18
2.5.17
2.5.16
2.5.15
2.5.14
2.5.13
2.5.12
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.16
2.4.15
2.4.14
2.4.13
2.4.12
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.18
2.3.17
2.3.16
2.3.15
2.3.14
2.3.13
2.3.12
2.3.11
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.10.3
2.10.2
2.10.1
2.9.11
2.9.10
2.9.9
2.8.17
2.8.16
2.8.15
2.7.23
2.7.22
2.7.21
2.10.0
2.9.8
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.2
2.9.1
2.8.14
2.8.13
2.8.12
2.8.11
2.8.10
2.8.9
2.8.8
2.8.7
2.8.6
2.8.5
2.8.3
2.8.2
2.8.1
2.8.0
2.7.20
2.7.19
2.7.18
2.7.17
2.7.16
2.7.15
2.7.12
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
Vulnerabilities (483)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63055 - Unchecked Return Value CVE-2019-9704 |
CWE-252 | Low | 2.7.50, 2.10.32, 2.11.20, 2.12.13 | 11.05.2022 |
SB2022051133 SB2022051206 SB2022051207 and 7 more |
||
| #VU63054 - Allocation of Resources Without Limits or Throttling CVE-2019-9705 |
CWE-770 | Low | 2.7.50, 2.10.32, 2.11.20, 2.12.13 | 11.05.2022 |
SB2022051133 SB2022051206 SB2022051207 and 7 more |
||
| #VU63053 - Use After Free CVE-2019-9706 |
CWE-416 | Low | 2.7.50, 2.10.32, 2.11.20, 2.12.13 | 11.05.2022 |
SB2022051133 SB2022051206 SB2022051207 and 3 more |
||
| #VU62883 - Use After Free CVE-2020-35512 |
CWE-416 | Low | 2.7.50, 2.10.32, 2.11.20, 2.12.13 | 09.05.2022 |
SB2021021526 SB2022050921 SB2022051206 and 11 more |
||
| #VU62378 - Integer overflow CVE-2021-31873 |
CWE-190 | High | - | 19.04.2022 |
SB2021043022 SB2022041906 SB2022041922 and 2 more |
||
| #VU62377 - Integer overflow CVE-2021-31872 |
CWE-190 | High | - | 19.04.2022 |
SB2021043022 SB2022041906 SB2022041922 and 2 more |
||
| #VU62021 - Improper input validation CVE-2022-25310 |
CWE-20 | High | 2.7.49, 2.10.31, 2.11.19, 2.12.12 | 08.04.2022 |
SB2022040808 SB2022040809 SB2022040820 and 30 more |
||
| #VU62020 - Heap-based Buffer Overflow CVE-2022-25309 |
CWE-122 | High | 2.7.49, 2.10.31, 2.11.19, 2.12.12 | 08.04.2022 |
SB2022040808 SB2022040809 SB2022040820 and 30 more |
||
| #VU62019 - Stack-based buffer overflow CVE-2022-25308 |
CWE-121 | High | 2.7.49, 2.10.31, 2.11.19, 2.12.12 | 08.04.2022 |
SB2022040808 SB2022040809 SB2022040820 and 30 more |
||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | 2.10.29, 2.11.17, 2.12.10, 2.13.1 | 31.03.2022 |
SB2022033109 SB2022040109 SB2022040110 and 78 more |
||
| #VU61672 - Heap-based Buffer Overflow CVE-2022-27666 |
CWE-122 | Low | - | 29.03.2022 |
SB2022032901 SB2022032902 SB2022033118 and 66 more |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 2.7.42, 2.10.22, 2.11.10, 2.12.3 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |
||
| #VU51741 - Improper Handling of Exceptional Conditions CVE-2021-28831 |
CWE-755 | Medium | 2.11.46, 2.13.28, 3.0.18, 4.0.10 | 26.03.2021 |
SB2021032622 SB2021032626 SB2021032627 and 25 more |
||
| #VU48587 - Allocation of Resources Without Limits or Throttling CVE-2020-8037 |
CWE-770 | Medium | 2.7.49, 2.10.31, 2.11.19, 2.12.12 | 04.11.2020 |
SB2020110433 SB2020112103 SB2021042704 and 12 more |
||
| #VU21949 - Out-of-bounds read CVE-2018-16301 |
CWE-125 | Low | 2.7.49, 2.10.31, 2.11.19, 2.12.12 | 21.10.2019 |
SB2019102102 SB2019102103 SB2019100318 and 23 more |
||
| #VU19572 - Improper input validation CVE-2019-1010204 |
CWE-20 | Low | - | 31.07.2019 |
SB2019022402 SB2020042840 SB2022032836 and 7 more |
||
| #VU18290 - Improper input validation CVE-2018-1000654 |
CWE-20 | Low | - | 17.04.2019 |
SB2018082017 SB2019060302 SB2019060502 and 6 more |
||
| #VU15935 - NULL Pointer Dereference CVE-2018-19211 |
CWE-476 | Low | - | 17.11.2018 |
SB2018111702 SB2018121002 SB2018121009 and 2 more |
||
| #VU12202 - Stack-based buffer overflow CVE-2017-16879 |
CWE-121 | High | - | 26.04.2018 |
SB2018041708 SB2017120121 SB2018012328 and 2 more |
||
| #VU7010 - Permissions, Privileges, and Access Controls CVE-2017-9525 |
CWE-264 | Low | 2.7.50, 2.10.32, 2.11.20, 2.12.13 | 12.06.2017 |
SB2017061204 SB2017061209 SB2022051133 and 5 more |
Showing elements 441 - 460 out of 483