Known vulnerabilities in VMware Tanzu Application Service for VMs - page 7
Vendor:
Broadcom
Software:
VMware Tanzu Application Service for VMs
Software CPE:
cpe:2.3:a:broadcom:vmware_tanzu_application_service_for_vms:*:*:*:*:*:*:*:*
Website:
https://www.broadcom.com/
Total vulnerabilities:
483
Public exploits:
18
Known exploited (KEV):
6
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.0.14
2.11.58
2.13.40
5.0.13
5.0.12
2.13.39
2.11.57
5.0.11
2.11.56
2.13.38
2.11.55
2.13.37
5.0.10
5.0.9
5.0.8
2.13.36
2.11.54
2.13.35
2.11.53
5.0.7
5.0.6
2.13.34
2.11.52
5.0.5
2.13.33
2.11.51
2.11.50
5.0.4
2.13.32
4.0.11
4.0.12
3.0.20
5.0.3
2.13.31
2.11.49
5.0.2
2.13.30
2.11.48
5.0.1
3.0.19
2.13.29
2.11.47
4.0.9
4.0.10
4.0.8
5.0.0
3.0.18
2.13.28
2.11.46
3.0.17
2.13.27
2.11.45
3.0.16
2.13.26
2.11.44
4.0.6
3.0.15
2.13.25
2.11.43
4.0.5
3.0.14
2.13.24
2.11.42
4.0.4
3.0.13
2.13.23
2.11.41
2.13.22
2.11.40
4.0.3
3.0.12
4.0.2
3.0.11
2.13.21
2.11.39
4.0.1
3.0.10
4.0.0
2.13.20
2.11.38
3.0.9
2.13.19
2.11.37
2.13.18
2.12.25
2.11.36
3.0.8
2.11.35
3.0.7
2.13.17
2.12.24
3.0.6
2.13.16
2.12.23
2.11.34
3.0.5
2.13.15
2.12.22
2.11.33
3.0.4
2.13.14
2.12.21
2.11.32
3.0.3
2.13.13
2.12.20
2.11.31
3.0.2
2.13.12
2.11.30
3.0.1
2.13.11
2.12.19
2.11.29
2.11.28
2.13.10
2.12.18
2.11.27
3.0.0
2.13.9
2.12.17
2.11.26
2.7.53
2.13.8
2.12.16
2.11.23
2.10.35
2.12.15
2.13.7
2.11.22
2.10.34
2.7.52
2.13.6
2.12.14
2.11.21
2.10.33
2.7.51
2.13.5
2.12.13
2.11.20
2.10.32
2.7.50
2.13.4
2.13.3
2.12.12
2.11.19
2.10.31
2.7.49
2.13.2
2.12.11
2.11.18
2.10.30
2.13.1
2.12.10
2.11.17
2.10.29
2.12.9
2.11.16
2.10.28
2.7.48
2.13.0
2.12.8
2.11.15
2.10.27
2.7.47
2.12.7
2.11.14
2.10.26
2.7.46
2.12.6
2.11.13
2.10.25
2.9.31
2.8.31
2.7.45
2.6.23
2.12.5
2.11.12
2.10.24
2.9.30
2.8.30
2.7.44
2.11.11
2.12.4
2.10.23
2.7.43
2.6.22
2.9.29
2.8.29
2.10.22
2.12.3
2.11.10
2.7.42
2.12.2
2.11.9
2.10.21
2.7.41
2.12.1
2.10.20
2.11.8
2.9.28
2.7.40
2.12.0
2.11.7
2.10.19
2.9.27
2.7.39
2.11.6
2.10.18
2.9.26
2.7.38
2.11.5
2.10.17
2.9.25
2.7.37
2.11.4
2.10.16
2.9.24
2.7.36
2.11.3
2.10.15
2.9.23
2.7.35
2.11.2
2.10.14
2.9.22
2.8.28
2.7.34
2.11.1
2.10.13
2.9.21
2.8.27
2.7.33
2.8.26
2.7.32
2.10.12
2.9.20
2.11.0
2.10.11
2.7.31
2.9.19
2.8.25
2.10.10
2.9.18
2.8.24
2.7.30
2.10.9
2.9.17
2.8.23
2.7.29
2.7.28
2.8.22
2.10.8
2.10.7
2.10.6
2.10.5
2.10.4
2.9.16
2.9.15
2.9.14
2.9.13
2.9.12
2.9.0
2.8.21
2.8.20
2.8.19
2.8.18
2.8.4
2.7.27
2.7.26
2.7.25
2.7.24
2.6.21
2.6.20
2.6.19
2.6.18
2.6.17
2.6.16
2.6.15
2.6.14
2.6.13
2.6.12
2.6.11
2.6.10
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.21
2.5.20
2.5.19
2.5.18
2.5.17
2.5.16
2.5.15
2.5.14
2.5.13
2.5.12
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.16
2.4.15
2.4.14
2.4.13
2.4.12
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.18
2.3.17
2.3.16
2.3.15
2.3.14
2.3.13
2.3.12
2.3.11
2.3.10
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.10.3
2.10.2
2.10.1
2.9.11
2.9.10
2.9.9
2.8.17
2.8.16
2.8.15
2.7.23
2.7.22
2.7.21
2.10.0
2.9.8
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.2
2.9.1
2.8.14
2.8.13
2.8.12
2.8.11
2.8.10
2.8.9
2.8.8
2.8.7
2.8.6
2.8.5
2.8.3
2.8.2
2.8.1
2.8.0
2.7.20
2.7.19
2.7.18
2.7.17
2.7.16
2.7.15
2.7.12
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
Vulnerabilities (483)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81434 - Integer overflow CVE-2023-43787 |
CWE-190 | Low | 2.11.47, 2.11.48, 2.13.29, 2.13.30, 3.0.18, 3.0.19, 3.0.20, 4.0.10, 4.0.11, 4.0.12 | 03.10.2023 |
SB2023100341 SB2023100346 SB2023100347 and 42 more |
||
| #VU81433 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-43786 |
CWE-835 | Low | 2.11.47, 2.11.48, 2.13.29, 2.13.30, 3.0.18, 3.0.19, 3.0.20, 4.0.10, 4.0.11, 4.0.12 | 03.10.2023 |
SB2023100341 SB2023100346 SB2023100347 and 43 more |
||
| #VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-38633 |
CWE-22 | Medium | 3.0.15, 4.0.6 | 28.07.2023 |
SB2023072832 SB2023072902 SB2023080153 and 13 more |
||
| #VU78577 - Out-of-bounds read CVE-2022-2127 |
CWE-125 | Medium | 3.0.15, 4.0.6 | 24.07.2023 |
SB2023072430 SB2023072432 SB2023072433 and 34 more |
||
| #VU78576 - Exposure of sensitive information to an unauthorized actor CVE-2023-34968 |
CWE-200 | Low | 3.0.15, 4.0.6 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 27 more |
||
| #VU78575 - Type confusion CVE-2023-34967 |
CWE-843 | Medium | 3.0.15, 4.0.6 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 32 more |
||
| #VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-34966 |
CWE-835 | Medium | 3.0.15, 4.0.6 | 24.07.2023 |
SB2023072431 SB2023072432 SB2023072437 and 35 more |
||
| #VU78573 - Security Features CVE-2023-3347 |
CWE-254 | Medium | 3.0.15, 4.0.6 | 24.07.2023 |
SB2023072431 SB2023072437 SB2023073157 and 16 more |
||
| #VU78288 - NULL Pointer Dereference CVE-2023-3316 |
CWE-476 | Medium | 2.11.44, 2.13.26, 3.0.16, 4.0.8 | 16.07.2023 |
SB2023071613 SB2023071619 SB2023081007 and 17 more |
||
| #VU78287 - Memory corruption CVE-2023-26966 |
CWE-119 | High | 2.11.44, 2.13.26, 3.0.16, 4.0.8 | 16.07.2023 |
SB2023071613 SB2023071619 SB2023081007 and 14 more |
||
| #VU78286 - Heap-based Buffer Overflow CVE-2023-26965 |
CWE-122 | High | 2.11.44, 2.13.26, 3.0.16, 4.0.8 | 16.07.2023 |
SB2023071613 SB2023071619 SB2023081007 and 16 more |
||
| #VU78285 - Memory corruption CVE-2023-25433 |
CWE-119 | Medium | 2.11.44, 2.13.26, 3.0.16, 4.0.8 | 16.07.2023 |
SB2023071613 SB2023071619 SB2023081007 and 17 more |
||
| #VU77803 - Incorrect Regular Expression CVE-2023-36617 |
CWE-185 | Medium | 2.11.44, 2.13.26, 3.0.16, 4.0.8 | 29.06.2023 |
SB2023062931 SB2023071289 SB2023101967 and 13 more |
||
| #VU76078 - NULL Pointer Dereference CVE-2018-10196 |
CWE-476 | Low | 2.11.42, 2.13.24, 3.0.14, 4.0.5 | 12.05.2023 |
SB2018053024 SB2023051223 SB2023080280 and 4 more |
||
| #VU75604 - Improper Certificate Validation CVE-2023-31484 |
CWE-295 | Medium | 3.0.14, 4.0.5 | 01.05.2023 |
SB2023050116 SB2023052927 SB2023060526 and 39 more |
||
| #VU75388 - Out-of-bounds read CVE-2023-1255 |
CWE-125 | Low | - | 20.04.2023 |
SB2023042039 SB2023053044 SB2023061445 and 25 more |
||
| #VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program CVE-2023-2603 |
CWE-98 | High | 2.11.42, 2.13.24, 3.0.14, 4.0.5 | 01.03.2023 |
SB2023030118 SB2023060126 SB2023061452 and 87 more |
||
| #VU53290 - Heap-based Buffer Overflow CVE-2020-18032 |
CWE-122 | Medium | 2.11.42, 2.13.24, 3.0.14, 4.0.5 | 16.05.2021 |
SB2021051606 SB2021051607 SB2021070605 and 10 more |
||
| #VU28538 - Resource exhaustion CVE-2020-11080 |
CWE-400 | Medium | 2.11.42, 2.13.24, 3.0.14, 4.0.5 | 03.06.2020 |
SB2020060305 SB2020060607 SB2020060703 and 42 more |
||
| #VU18637 - NULL Pointer Dereference CVE-2019-11023 |
CWE-476 | Low | 2.11.42, 2.13.24, 3.0.14, 4.0.5 | 29.05.2019 |
SB2019052907 SB2019053006 SB2019052214 and 9 more |
Showing elements 121 - 140 out of 483