Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Redis — Vulnerabilities & Security Advisories 53

All 53 CVE vulnerabilities found in Redis, with AI-generated Chinese analysis, references, and POCs.

Vendor: redis

CVE IDTitleCVSSSeverityPaused
CVE-2025-62507 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE CWE-20 8.8AIHighAI2025-11-04
CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution CWE-416 10.0 Critical2025-10-03
CVE-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts CWE-190 6.3 Medium2025-10-03
CVE-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user CWE-94 6.0 Medium2025-10-03
CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE CWE-190 7.0 High2025-10-03
CVE-2025-46686 Redis 安全漏洞 CWE-401 3.5 Low2025-07-23
CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling CWE-770 7.5 High2025-07-07
CVE-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE CWE-680 7.0 High2025-07-07
CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE CWE-20 4.7 Medium2025-05-29
CVE-2025-21605 Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client CWE-770 7.5 High2025-04-23
CVE-2024-51741 Redis allows denial-of-service due to malformed ACL selectors CWE-20 4.4 Medium2025-01-06
CVE-2024-46981 Redis' Lua library commands may lead to remote code execution CWE-416 7.0 High2025-01-06
CVE-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis CWE-20 7.0 High2024-10-07
CVE-2024-31228 Denial-of-service due to unbounded pattern matching in Redis CWE-674 5.5 Medium2024-10-07
CVE-2024-31227 Denial-of-service due to malformed ACL selectors in Redis CWE-20 4.4 Medium2024-10-07
CVE-2023-41056 Redis vulnerable to integer overflow in certain payloads CWE-762 8.1 High2024-01-10
CVE-2023-45145 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. CWE-668 3.6 Low2023-10-18
CVE-2023-41053 Redis SORT_RO may bypass ACL configuration CWE-269 3.3 Low2023-09-06
CVE-2022-24834 Heap overflow issue with the Lua cjson library used by Redis CWE-122 7.0 High2023-07-13
CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis CWE-122 7.4 High2023-07-11
CVE-2023-28856 `HINCRBYFLOAT` can be used to crash a redis-server process CWE-617 5.5 Medium2023-04-18
CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service CWE-77 5.5 Medium2023-03-20
CVE-2023-25155 Integer Overflow in several Redis commands can lead to denial of service. CWE-190 5.5 Medium2023-03-02
CVE-2022-36021 Redis string pattern matching can be abused to achieve Denial of Service CWE-407 5.5 Medium2023-03-01
CVE-2022-35977 Integer overflow in certain command arguments can drive Redis to OOM panic CWE-190 5.5 Medium2023-01-20
CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-service CWE-190 5.5 Medium2023-01-20
CVE-2022-3734 Redis on Windows dbghelp.dll uncontrolled search path CWE-426 6.3 Medium2022-10-28
CVE-2022-3647 Redis Crash Report debug.c sigsegvHandler denial of service CWE-404 3.1 Low2022-10-21
CVE-2022-35951 Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow CWE-190 7.0 High2022-09-23
CVE-2022-31144 Potential heap overflow in Redis CWE-122 7.0 High2022-07-19

All 53 known CVE vulnerabilities affecting Redis with full Chinese analysis, references, and POCs where available.