Exposure of Redis
Databases79
exposure score
62,913
sites use
1
exploited
2
critical
CVEs
59 resultsCVE-2022-0543CRITICALIt was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escapeEPSS 99.4%KEVCVE-2025-49844CRITICALRedis Lua Use-After-Free may lead to remote code executionEPSS 82.6%CVE-2023-36824HIGHHeap overflow in COMMAND GETKEYS and ACL evaluation in RedisEPSS 77.4%CVE-2023-22458MEDIUMInteger overflow in multiple Redis commands can lead to denial-of-serviceEPSS 72.0%CVE-2022-36021MEDIUMRedis string pattern matching can be abused to achieve Denial of ServiceEPSS 59.8%CVE-2023-28425MEDIUMSpecially crafted MSETNX command can lead to denial-of-serviceEPSS 58.5%CVE-2022-24834HIGHHeap overflow issue with the Lua cjson library used by RedisEPSS 41.4%CVE-2021-32761HIGHInteger overflow issues with *BIT commands on 32-bit systemsEPSS 30.1%CVE-2019-10192HIGHA heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.xEPSS 25.6%CVE-2019-10193HIGHA stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.EPSS 23.3%CVE-2021-32626HIGHLua scripts can overflow the heap-based Lua stack in RedisEPSS 16.2%CVE-2021-32675HIGHDoS vulnerability in RedisEPSS 16.1%CVE-2016-8339MEDIUMA buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulneEPSS 14.8%CVE-2022-35977MEDIUMInteger overflow in certain command arguments can drive Redis to OOM panicEPSS 14.0%CVE-2021-32628HIGHVulnerability in handling large ziplistsEPSS 13.5%CVE-2024-46981HIGHRedis' Lua library commands may lead to remote code executionEPSS 8.2%CVE-2025-62507HIGHRedis: Bug in XACKDEL may lead to stack overflow and potential RCEEPSS 7.5%CVE-2025-32023HIGHRedis allows out of bounds writes in hyperloglog commands leading to RCEEPSS 6.5%CVE-2021-21309MEDIUMInteger overflow on 32-bit systemsEPSS 4.8%CVE-2024-31449HIGHLua library commands may lead to stack overflow and RCE in RedisEPSS 4.5%