Skip to contentFirebirdsql Firebird vulnerabilities
- firebirdsql firebirdFirebird: Path Traversal + Arbitrary File Write Leads to Remote Code ExecutionCVE-2026-40342Fix available10.0 Critical
- firebirdsql firebirdFirebird: DoS via malicious slice descriptor in slice packetCVE-2026-35215Fix available7.5 High
- firebirdsql firebirdFirebird: DoS via `op_response` packet from clientCVE-2026-34232Fix available7.5 High
- firebirdsql firebirdFirebird has a buffer overflow when parsing corrupted slice packetsCVE-2026-33337Fix available7.5 High
- firebirdsql firebirdFirebird Null Pointer Dereference via CryptCallback causes DOSCVE-2026-28224Fix available8.2 High
- firebirdsql firebirdFirebird server hangs when using specific clumplet on batch creationCVE-2026-28214Fix available6.0 Medium
- firebirdsql firebirdFirebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data SegmentsCVE-2026-27890Fix available8.2 High
- firebirdsql firebirdFirebird has potential server crash via null pointer dereference when processing op_slice packetCVE-2026-28212Fix available7.5 High
- firebirdsql firebirdFirebird: Information leak vulnerability in firebird3 client when used with newer serverCVE-2025-65104Fix available7.9 High
- firebirdsql firebirdFirebird Non-Authorized Access to Encrypted Database Using Execute Statement on ExternalCVE-2025-24975Fix available7.1 High
- firebirdsql firebirdFirebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service VulnerabilityCVE-2025-54989Fix available5.3 Medium
- ninja team filebird, firebirdsql firebird +1 moreWordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerabilityCVE-2024-351665.3 Medium
- firebirdsql firebirdServer crash when using specific form of SET BIND statementCVE-2023-410387.5 High
- firebird foundation sql server, firebirdsql firebird, debian linux +2 moreAn authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7...CVE-2017-11509Fix available8.8 High
- firebirdsql firebirdInsufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2...CVE-2017-6369Fix available8.8 High
- firebirdsql firebirdFireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by...CVE-2016-15696.5 Medium
- firebirdsql firebird, canonical ubuntu linux, debian linux +1 more +3 moreThe xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote...CVE-2014-9323Fix available5.0 Medium
- firebirdsql firebirdStack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3...CVE-2013-2492Public exploitFix availableEPSS 42.2%6.8 Medium
- firebirdsql firebirdTraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated...CVE-2012-55293.5 Low
- firebirdsql firebirdsrc/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1...CVE-2009-2620Public exploit5.0 Medium
- firebirdsql firebirdStack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow...CVE-2008-046710.0 High
- firebirdsql firebirdInteger overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2...CVE-2008-0387Public exploitEPSS 45.9%7.8 High
- firebirdsql firebirdStack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2...CVE-2007-499210.0 High
- firebirdsql firebirdMultiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0...CVE-2007-524610.0 High
- firebirdsql firebirdMultiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870...CVE-2007-524510.0 High
- firebirdsql firebirdThe Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA...CVE-2007-46694.0 Medium
- firebirdsql firebirdUnspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to...CVE-2007-46685.0 Medium
- firebirdsql firebirdUnspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to...CVE-2007-46675.0 Medium
- firebirdsql firebirdUnspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP...CVE-2007-46665.0 Medium
- firebirdsql firebirdUnspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause...CVE-2007-46655.0 Medium
- firebirdsql firebirdUnspecified vulnerability in the (1) attach database and (2) create database functionality in...CVE-2007-46647.5 High
- firebirdsql firebirdInteger overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service...CVE-2007-35276.8 Medium
- firebirdsql firebirdMultiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial...CVE-2006-72147.8 High
- firebirdsql firebirdFirebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite...CVE-2006-72135.5 Medium
- firebirdsql firebirdMultiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and...CVE-2006-72126.8 Medium
- firebirdsql firebirdfb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows...CVE-2006-72114.9 Medium
- firebirdsql firebird, bakbone netvault +1 moreBuffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute...CVE-2007-3181Public exploitEPSS 13.2%10.0 High
- firebirdsql firebirdMultiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and...CVE-2007-26067.8 High
- firebirdsql firebirdFirebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid...CVE-2006-12414.6 Medium
- firebirdsql firebirdBuffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731...CVE-2006-1240Public exploit4.6 Medium
- mozilla, mozilla thunderbird, firebirdsql firebird +2 moreMozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to...CVE-2004-14492.6 Low
- firebirdsql firebird, mozilla firefox, mozilla +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify...CVE-2004-07797.5 High
- firebirdsql firebird, mozilla, netscape navigator +2 moreThe (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not...CVE-2004-07187.5 High
- borland software interbase, firebirdsql firebird, borland software interbase superserver +2 moreBuffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly...CVE-2004-2043Public exploitFix availableEPSS 11.9%5.0 Medium
- firebirdsql firebirdBuffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that...CVE-2003-0281Public exploit4.6 Medium
- borland software interbase, firebirdsql firebird +1 moreBuffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via...CVE-2003-01977.2 High
- borland software interbase, firebirdsql firebird +1 moreBackdoor account in Interbase database server allows remote attackers to overwrite arbitrary...CVE-2001-0008Public exploitEPSS 13.3%10.0 High