[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBV-I02QIjH-2yl7hq79WTdtNuKN56anHMtmH7GSOVNo":3,"g5a-family:redhat\u002Fgluster_storage_server_for_on-premise":109,"g5a-ex:redhat\u002Fgluster_storage_server_for_on-premise@*":110},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":67,"seoMetadata":87,"meta":106},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"redhat","gluster_storage_server_for_on-premise",2,7,5,"2014-09-25",[14,17],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},"2.0",4,{"version":18,"cve_count":19,"kev_count":19,"has_kev":4},"2.1",3,"Gluster Storage Server For On-premise by Redhat is a technology product with 2 tracked versions and 7 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},{"version":18,"cve_count":19,"kev_count":19,"has_kev":4},[25,33,38,42,49,57,62],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":32},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":37},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",0.99998,{"cveId":39,"description":40,"publishedDate":12,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":41},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.",0.9994,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":30,"severity":47,"isKev":4,"epssScore":48},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",8.8,"High",0.69021,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":30,"severity":54,"isKev":55,"epssScore":56},"CVE-2012-0037","Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document.","2012-06-17",6.5,"Medium",false,0.13534,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":53,"cvssVersion":30,"severity":54,"isKev":4,"epssScore":61},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",0.06696,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":55,"epssScore":66},"CVE-2012-4406","OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.","2012-10-22",0.06571,[68,73,77,81,85],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","2022-03-28","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","Apply updates per vendor instructions.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"severity":31,"isKev":4,"epssScore":37,"cisaVulnName":74,"cisaDateAdded":75,"cisaShortDescription":76,"cisaRequiredAction":72},"PHP-CGI Query String Parameter Vulnerability","2022-03-25","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":53,"severity":54,"isKev":4,"epssScore":61,"cisaVulnName":78,"cisaDateAdded":79,"cisaShortDescription":80,"cisaRequiredAction":72},"Mozilla Firefox Information Disclosure Vulnerability","2022-03-03","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":72},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":39,"description":40,"publishedDate":12,"cvssScore":29,"severity":31,"isKev":4,"epssScore":41,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":86,"cisaRequiredAction":72},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Gluster Storage Server For On-premise by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Gluster Storage Server For On-premise by Redhat covering 2 versions with 7 tracked vulnerabilities including 3 critical and 1 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gluster Storage Server For On-premise vulnerabilities, Gluster Storage Server For On-premise security, Gluster Storage Server For On-premise CVE, Redhat Gluster Storage Server For On-premise, Gluster Storage Server For On-premise threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Gluster Storage Server For On-premise KEV, Gluster Storage Server For On-premise exploited vulnerabilities",{"@context":92,"@type":93,"name":94,"description":89,"url":95,"manufacturer":96,"applicationCategory":100,"softwareVersion":101,"mainEntity":102},"https:\u002F\u002Fschema.org","SoftwareApplication","Gluster Storage Server For On-premise","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fgluster_storage_server_for_on-premise",{"@type":97,"name":98,"url":99},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","2 versions tracked",{"@type":103,"name":104,"description":105,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Gluster Storage Server For On-premise Security Vulnerabilities","Security vulnerabilities affecting Gluster Storage Server For On-premise by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":107,"apiVersion":108},"2026-10-28T20:46:51.594Z","3.0",[],{"rows":111,"total":11,"capped":55,"failed":132},[112,116,120,124,128],{"cveId":43,"name":69,"severity":47,"cvss":46,"added":70,"epss":48,"published":113,"ranges":114,"checked":4,"hits":115,"covers":55},"2013-06-26T03:19:10.793",[15],[],{"cveId":34,"name":74,"severity":31,"cvss":29,"added":75,"epss":37,"published":117,"ranges":118,"checked":4,"hits":119,"covers":55},"2012-05-11T10:15:48.043",[15],[],{"cveId":58,"name":78,"severity":54,"cvss":53,"added":79,"epss":61,"published":121,"ranges":122,"checked":4,"hits":123,"covers":55},"2013-05-16T11:45:30.877",[18],[],{"cveId":26,"name":82,"severity":31,"cvss":29,"added":83,"epss":32,"published":125,"ranges":126,"checked":4,"hits":127,"covers":55},"2014-09-24T18:48:04.477",[18],[],{"cveId":39,"name":82,"severity":31,"cvss":29,"added":83,"epss":41,"published":129,"ranges":130,"checked":4,"hits":131,"covers":55},"2014-09-25T01:55:04.367",[18],[],0]