Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,565All CVEsplus 18,890 rejected
- 386Last 24 hours3,012 in the last 7 days
- 17,098Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 4 | 1 | 0 | 0 | 5 | 51 |
| 2025 | 1 | 6 | 4 | 2 | 0 | 13 | 46 |
| 2024 | 0 | 2 | 2 | 0 | 0 | 4 | 33 |
| 2023 | 0 | 2 | 6 | 2 | 0 | 10 | 29 |
| 2022 | 0 | 2 | 0 | 2 | 0 | 4 | 19 |
| 2021 | 0 | 12 | 2 | 0 | 0 | 14 | 15 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2019 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2018 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2017 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
| 2016 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-81934 | Redis TLS pending-data list use-after-freeRedis · Redis | High7.5 |
| CVE-2026-66373 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same…Redis · Redis | High7.5 |
| CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code executionredis · redis | High7.7 |
| CVE-2026-23631 | redis-server Lua use-after-free may allow remote code executionredis · redis | Medium6.1 |
| CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code executionredis · redis | High7.7 |
| CVE-2025-62507 | Redis: Bug in XACKDEL may lead to stack overflow and potential RCEredis · redis | High7.7 |
| CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code executionredis · redis | Critical10.0 |
| CVE-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scriptsredis · redis | Medium6.3 |
| CVE-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different userredis · redis | Medium6.0 |
| CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCEredis · redis | High7.0 |
| CVE-2025-46686 | Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user. This occurs because the server…Redis · Redis | Low3.5 |
| CVE-2025-48367 | Redis DoS Vulnerability due to bad connection error handlingredis · redis | High7.5 |
| CVE-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCEredis · redis | High7.0 |
| CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCEredis · redis | Medium4.7 |
| CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientredis · redis | High7.5 |
| CVE-2025-29923 | go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishmentredis · go-redis | Low3.7 |
| CVE-2024-51741 | Redis allows denial-of-service due to malformed ACL selectorsredis · redis | Medium4.4 |
| CVE-2024-46981 | Redis' Lua library commands may lead to remote code executionredis · redis | High7.0 |
| CVE-2024-31449 | Lua library commands may lead to stack overflow and RCE in Redisredis · redis | High7.0 |
| CVE-2024-31228 | Denial-of-service due to unbounded pattern matching in Redisredis · redis | Medium5.5 |
| CVE-2024-31227 | Denial-of-service due to malformed ACL selectors in Redisredis · redis | Medium4.4 |
| CVE-2023-41056 | Redis vulnerable to integer overflow in certain payloadsredis · redis | High8.1 |
| CVE-2023-45145 | Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.redis · redis | Low3.6 |
| CVE-2023-41053 | Redis SORT_RO may bypass ACL configurationredis · redis | Low3.3 |
| CVE-2022-24834 | Heap overflow issue with the Lua cjson library used by Redisredis · redis | High7.0 |
| CVE-2023-36824 | Heap overflow in COMMAND GETKEYS and ACL evaluation in Redisredis · redis | High7.4 |
| CVE-2023-28856 | `HINCRBYFLOAT` can be used to crash a redis-server processredis · redis | Medium5.5 |
| CVE-2023-28425 | Specially crafted MSETNX command can lead to denial-of-serviceredis · redis | Medium5.5 |
| CVE-2023-25155 | Integer Overflow in several Redis commands can lead to denial of service.redis · redis | Medium5.5 |
| CVE-2022-36021 | Redis string pattern matching can be abused to achieve Denial of Serviceredis · redis | Medium5.5 |
| CVE-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panicredis · redis | Medium5.5 |
| CVE-2023-22458 | Integer overflow in multiple Redis commands can lead to denial-of-serviceredis · redis | Medium5.5 |
| CVE-2022-35951 | Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflowredis · redis | High7.0 |
| CVE-2022-31144 | Potential heap overflow in Redisredis · redis | High7.0 |
| CVE-2022-24736 | A Malformed Lua script can crash Redisredis · redis | Low3.3 |
| CVE-2022-24735 | Lua scripts can be manipulated to overcome ACL rules in Redisredis · redis | Low3.9 |
| CVE-2021-41099 | Integer overflow issue with strings in Redisredis · redis | High7.5 |
| CVE-2021-32762 | Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platformsredis · redis | High7.5 |
| CVE-2021-32687 | Integer overflow issue with intsets in Redisredis · redis | High7.5 |
| CVE-2021-32675 | DoS vulnerability in Redisredis · redis | High7.5 |
| CVE-2021-32672 | Vulnerability in Lua Debugger in Redisredis · redis | Medium5.3 |
| CVE-2021-32627 | Integer overflow issue with Streams in Redisredis · redis | High7.5 |
| CVE-2021-32628 | Vulnerability in handling large ziplistsredis · redis | High7.5 |
| CVE-2021-32626 | Lua scripts can overflow the heap-based Lua stack in Redisredis · redis | High7.5 |
| CVE-2021-32765 | Integer Overflow to Buffer Overflow in Hiredisredis · hiredis | High8.8 |
| CVE-2021-32761 | Integer overflow issues with *BIT commands on 32-bit systemsredis · redis | High7.5 |
| CVE-2021-32625 | Redis vulnerability in STRALGO LCS on 32-bit systemsredis · redis | High7.5 |
| CVE-2021-29478 | Vulnerability in the COPY command for large intsetsredis · redis | High7.5 |
| CVE-2021-29477 | Vulnerability in the STRALGO LCS commandredis · redis | High7.5 |
| CVE-2021-21309 | Integer overflow on 32-bit systemsredis · redis | Medium5.4 |