Vulnerabilities > Redislabs > Redisgraph

DATE CVE VULNERABILITY TITLE RISK
2023-11-16 CVE-2023-47003 NULL Pointer Dereference vulnerability in Redislabs Redisgraph 2.12.10
An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBlock_ItemIsDeleted.
network
low complexity
redislabs CWE-476
critical
9.8
2023-11-06 CVE-2023-47004 Out-of-bounds Write vulnerability in Redislabs Redisgraph
Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.
network
low complexity
redislabs CWE-787
8.8
2020-12-23 CVE-2020-35668 NULL Pointer Dereference vulnerability in Redislabs Redisgraph
RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced.
network
low complexity
redislabs CWE-476
5.0