Vulnerability index

Browse CVEs

43 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Redis HIGH 8.8
CVE-2022-31144

Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with he…

Fix: 7.0.4+
Fix from $1,950 2022-07-19
Redis HIGH 7.5
CVE-2022-33105

Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.

Patch available
Fix from $1,950 2022-06-23
Redis HIGH 7.8
CVE-2022-24735

Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Re…

Fix: 6.2.7+
Fix from $1,950 2022-04-27
Redis MEDIUM 5.5
CVE-2022-24736

Redis is an in-memory database that persists on disk. Prior to versions 6.2.7 and 7.0.0, an attacker attempting to load a specially crafted Lua scrip…

Fix: 6.2.7+
Fix from $1,600 2022-04-27
Redis CRITICAL 10.0
CVE-2022-0543 KEVEPSS 99%

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which c…

Patch available
Fix from $2,300 2022-02-18
Hiredis HIGH 8.8
CVE-2021-32765

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided malicio…

Fix: 1.0.1+
Fix from $1,950 2021-10-04
Redis HIGH 8.8
CVE-2021-32762

Redis is an open source, in-memory database that persists on disk. The redis-cli command line tool and redis-sentinel service may be vulnerable to in…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 7.5
CVE-2021-41099

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the underlying string library can be used to corrupt th…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 8.8
CVE-2021-32626EPSS 16%

Redis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause th…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 7.5
CVE-2021-32627

Redis is an open source, in-memory database that persists on disk. In affected versions an integer overflow bug in Redis can be exploited to corrupt …

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 7.5
CVE-2021-32628EPSS 14%

Redis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redi…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 7.5
CVE-2021-32675EPSS 17%

Redis is an open source, in-memory database that persists on disk. When parsing an incoming Redis Standard Protocol (RESP) request, Redis allocates m…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04
Redis HIGH 7.5
CVE-2021-32687

Redis is an open source, in-memory database that persists on disk. An integer overflow bug affecting all versions of Redis can be exploited to corrup…

Fix: 5.0.14 / 6.0.16+
Fix from $1,950 2021-10-04