RE
Database
Redis
On CISA KEVExploited in the wild
71
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 41Medium 15Low 4
Watch
Add Redis to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-31228 | 6.5 | Oct 7 | Redis is an open source, in-memory database that persists on disk Affected: 2.2.5 before 6.2.16; 7.2.0 before 7.2.6; 7.4.0; 7.4.0; 7.4.0 |
| CVE-2023-28856 | 6.5 | Apr 18 | Redis is an open source, in-memory database that persists on disk Affected: before 6.0.19; 6.2.0 before 6.2.12; 7.0.0 before 7.0.11 |
| CVE-2023-25155 | 6.5 | Mar 2 | Redis is an in-memory database that persists on disk Affected: before 6.0.18; 6.2.0 before 6.2.11; 7.0.0 before 7.0.9 |
| CVE-2021-31294 | 5.9 | Jul 15 | Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command) Affected: before 6.2.0 |
| CVE-2023-28425 | 5.5 | Mar 20 | Redis is an in-memory database that persists on disk Affected: 7.0.8 before 7.0.10 |
| CVE-2022-36021 | 5.5 | Mar 1 | Redis is an in-memory database that persists on disk Affected: before 6.0.18; 6.2.0 before 6.2.11; 7.0.0 before 7.0.9 |
| CVE-2023-22458 | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk Affected: 6.2.0 before 6.2.9; 7.0.0 before 7.0.8 |
| CVE-2022-35977 | 5.5 | Jan 20 | Redis is an in-memory database that persists on disk Affected: 6.0.0 before 6.0.17; 6.2.0 before 6.2.9; 7.0.0 before 7.0.8 |
| CVE-2022-24736 | 5.5 | Apr 27 | Redis is an in-memory database that persists on disk Affected: before 6.2.7; 7.0; 7.0; 7.0 |
| CVE-2013-0180 | 5.5 | Nov 1 | Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds Affected: 2.6.0 |
| CVE-2013-0178 | 5.5 | Nov 1 | Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm Affected: before 2.6.0 |
| CVE-2021-3470 | 5.3 | Mar 31 | A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to… Affected: before 5.0.10; 6.0.0 before 6.0.9; 6.2.0; 6.2.0; 6.2.0 |
| CVE-2024-51741 | 4.4 | Jan 6 | Redis allows denial-of-service due to malformed ACL selectors Affected: >= 7.0.0, < 7.2.7; >= 7.4.0, < 7.4.2 |
| CVE-2024-31227 | 4.4 | Oct 7 | Redis is an open source, in-memory database that persists on disk Affected: 7.0.0 before 7.2.6; 7.4.0 |
| CVE-2021-32672 | 4.3 | Oct 4 | Redis is an open source, in-memory database that persists on disk Affected: 3.2.0 before 5.0.14; 6.0.0 before 6.0.16; 6.2.0 before 6.2.6 |
Showing 15