Firebirdsql vulnerabilities

Products

• Firebird 47

Newest

• firebirdsql firebird Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution CVE-2026-40342 Fix available 10.0 CriticalApril 17, 2026
• firebirdsql firebird Firebird: DoS via malicious slice descriptor in slice packet CVE-2026-35215 Fix available 7.5 HighApril 17, 2026
• firebirdsql firebird Firebird: DoS via `op_response` packet from client CVE-2026-34232 Fix available 7.5 HighApril 17, 2026
• firebirdsql firebird Firebird has a buffer overflow when parsing corrupted slice packets CVE-2026-33337 Fix available 7.5 HighApril 17, 2026
• firebirdsql firebird Firebird Null Pointer Dereference via CryptCallback causes DOS CVE-2026-28224 Fix available 8.2 HighApril 17, 2026
• firebirdsql firebird Firebird server hangs when using specific clumplet on batch creation CVE-2026-28214 Fix available 6.0 MediumApril 17, 2026
• firebirdsql firebird Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments CVE-2026-27890 Fix available 8.2 HighApril 17, 2026
• firebirdsql firebird Firebird has potential server crash via null pointer dereference when processing op_slice packet CVE-2026-28212 Fix available 7.5 HighApril 17, 2026
• firebirdsql firebird Firebird: Information leak vulnerability in firebird3 client when used with newer server CVE-2025-65104 Fix available 7.9 HighApril 17, 2026
• firebirdsql firebird Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External CVE-2025-24975 Fix available 7.1 HighAugust 15, 2025
• firebirdsql firebird Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability CVE-2025-54989 Fix available 5.3 MediumAugust 15, 2025
• ninja team filebird, firebirdsql firebird +1 more WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability CVE-2024-35166 5.3 MediumMay 13, 2024
• firebirdsql firebird Server crash when using specific form of SET BIND statement CVE-2023-41038 7.5 HighMarch 20, 2024
• firebird foundation sql server, firebirdsql firebird, debian linux +2 more An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7... CVE-2017-11509 Fix available 8.8 HighMarch 28, 2018
• firebirdsql firebird Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2... CVE-2017-6369 Fix available 8.8 HighMarch 24, 2017
• firebirdsql firebird FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by... CVE-2016-1569 6.5 MediumJanuary 13, 2016
• firebirdsql firebird, canonical ubuntu linux, debian linux +1 more +3 more The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote... CVE-2014-9323 Fix available 5.0 MediumDecember 16, 2014
• firebirdsql firebird Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3... CVE-2013-2492 Public exploitFix available EPSS 42.2% 6.8 MediumMarch 15, 2013
• firebirdsql firebird TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated... CVE-2012-5529 3.5 LowNovember 20, 2012
• firebirdsql firebird src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1... CVE-2009-2620 Public exploit 5.0 MediumJuly 29, 2009
• firebirdsql firebird Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow... CVE-2008-0467 10.0 HighJanuary 29, 2008
• firebirdsql firebird Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2... CVE-2008-0387 Public exploit EPSS 45.9% 7.8 HighJanuary 29, 2008
• firebirdsql firebird Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2... CVE-2007-4992 10.0 HighOctober 11, 2007
• firebirdsql firebird Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0... CVE-2007-5246 10.0 HighOctober 6, 2007
• firebirdsql firebird Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870... CVE-2007-5245 10.0 HighOctober 6, 2007
• firebirdsql firebird The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA... CVE-2007-4669 4.0 MediumSeptember 4, 2007
• firebirdsql firebird Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to... CVE-2007-4668 5.0 MediumSeptember 4, 2007
• firebirdsql firebird Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to... CVE-2007-4667 5.0 MediumSeptember 4, 2007
• firebirdsql firebird Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP... CVE-2007-4666 5.0 MediumSeptember 4, 2007
• firebirdsql firebird Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause... CVE-2007-4665 5.0 MediumSeptember 4, 2007
• firebirdsql firebird Unspecified vulnerability in the (1) attach database and (2) create database functionality in... CVE-2007-4664 7.5 HighSeptember 4, 2007
• firebirdsql firebird Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service... CVE-2007-3527 6.8 MediumJuly 3, 2007
• firebirdsql firebird Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial... CVE-2006-7214 7.8 HighJune 29, 2007
• firebirdsql firebird Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite... CVE-2006-7213 5.5 MediumJune 29, 2007
• firebirdsql firebird Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and... CVE-2006-7212 6.8 MediumJune 29, 2007
• firebirdsql firebird fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows... CVE-2006-7211 4.9 MediumJune 29, 2007
• firebirdsql firebird, bakbone netvault +1 more Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute... CVE-2007-3181 Public exploit EPSS 13.2% 10.0 HighJune 12, 2007
• firebirdsql firebird Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and... CVE-2007-2606 7.8 HighMay 11, 2007
• firebirdsql firebird Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid... CVE-2006-1241 4.6 MediumMarch 15, 2006
• firebirdsql firebird Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731... CVE-2006-1240 Public exploit 4.6 MediumMarch 15, 2006
• mozilla, mozilla thunderbird, firebirdsql firebird +2 more Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to... CVE-2004-1449 2.6 LowDecember 31, 2004
• firebirdsql firebird, mozilla firefox, mozilla +2 more The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify... CVE-2004-0779 7.5 HighAugust 14, 2004
• firebirdsql firebird, mozilla, netscape navigator +2 more The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not... CVE-2004-0718 7.5 HighJuly 23, 2004
• borland software interbase, firebirdsql firebird, borland software interbase superserver +2 more Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly... CVE-2004-2043 Public exploitFix available EPSS 11.9% 5.0 MediumMay 1, 2004
• firebirdsql firebird Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that... CVE-2003-0281 Public exploit 4.6 MediumMay 14, 2003
• borland software interbase, firebirdsql firebird +1 more Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via... CVE-2003-0197 7.2 HighApril 8, 2003
• borland software interbase, firebirdsql firebird +1 more Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary... CVE-2001-0008 Public exploit EPSS 13.3% 10.0 HighFebruary 12, 2001