FI
Vendor
FirebirdSQL
46
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40342 | FI firebird FirebirdSQL | 9.9 | Apr 17 | Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution |
| CVE-2026-35215 | FI firebird FirebirdSQL | 7.5 | Apr 17 | Firebird: DoS via malicious slice descriptor in slice packet |
| CVE-2026-34232 | FI firebird FirebirdSQL | 7.5 | Apr 17 | Firebird: DoS via `op_response` packet from client |
| CVE-2026-33337 | FI firebird FirebirdSQL | 7.5 | Apr 17 | Firebird has a buffer overflow when parsing corrupted slice packets |
| CVE-2026-28224 | FI firebird FirebirdSQL | 8.2 | Apr 17 | Firebird Null Pointer Dereference via CryptCallback causes DOS |
| CVE-2026-28214 | FI firebird FirebirdSQL | 6.5 | Apr 17 | Firebird server hangs when using specific clumplet on batch creation |
| CVE-2026-27890 | FI firebird FirebirdSQL | 8.2 | Apr 17 | Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments |
| CVE-2026-28212 | FI firebird FirebirdSQL | 7.5 | Apr 17 | Firebird has potential server crash via null pointer dereference when processing op_slice packet |
| CVE-2025-65104 | FI firebird FirebirdSQL | 7.5 | Apr 17 | Firebird: Information leak vulnerability in firebird3 client when used with newer server |
| CVE-2025-24975 | FI firebird FirebirdSQL | 8.8 | Aug 15 | Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External |
| CVE-2025-54989 | FI firebird FirebirdSQL | 7.5 | Aug 15 | Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability |
| CVE-2023-41038 | FI Firebird Firebirdsql | 7.5 | Mar 20 | Firebird is a relational database |
| CVE-2017-11509 | FI Firebird Firebirdsql | 8.8 | Mar 28 | An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement |
| CVE-2017-6369 | FI Firebird Firebirdsql | 8.8 | Mar 24 | Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from… |
| CVE-2016-1569 | FI Firebird Firebirdsql | 6.5 | Jan 13 | FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter |
| CVE-2014-9323 | FI Firebird Firebirdsql | – | Dec 16 | The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation… |
| CVE-2013-2492 | FI Firebird Firebirdsql | – | Mar 15 | Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a… |
| CVE-2012-5529 | FI Firebird Firebirdsql | – | Nov 20 | TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing… |
| CVE-2009-2620 | FI Firebird Firebirdsql | – | Jul 29 | src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of… |
| CVE-2008-0467 | FI Firebird Firebirdsql | – | Jan 29 | Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username |
| CVE-2008-0387 | FI Firebird Firebirdsql | – | Jan 29 | Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via… |
| CVE-2007-4992 | FI Firebird Firebirdsql | – | Oct 11 | Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port… |
| CVE-2007-5246 | FI Firebird Firebirdsql | – | Oct 6 | Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a… |
| CVE-2007-5245 | FI Firebird Firebirdsql | – | Oct 6 | Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long… |
| CVE-2007-4667 | FI Firebird Firebirdsql | – | Sep 4 | Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149 |
| CVE-2007-4669 | FI Firebird Firebirdsql | – | Sep 4 | The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148 |
| CVE-2007-4668 | FI Firebird Firebirdsql | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access,"… |
| CVE-2007-4664 | FI Firebird Firebirdsql | – | Sep 4 | Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and… |
| CVE-2007-4666 | FI Firebird Firebirdsql | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU… |
| CVE-2007-4665 | FI Firebird Firebirdsql | – | Sep 4 | Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple… |
| CVE-2007-3527 | FI Firebird Firebirdsql | – | Jul 3 | Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database operations with multi-byte character sets… |
| CVE-2006-7212 | FI Firebird Firebirdsql | – | Jun 29 | Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors |
| CVE-2006-7214 | FI Firebird Firebirdsql | – | Jun 29 | Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2)… |
| CVE-2006-7213 | FI Firebird Firebirdsql | – | Jun 29 | Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database |
| CVE-2006-7211 | FI Firebird Firebirdsql | – | Jun 29 | fb_lock_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blocked query processing) by locking… |
| CVE-2007-3181 | FI Firebird Firebirdsql | – | Jun 12 | Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect… |
| CVE-2007-2606 | FI Firebird Firebirdsql | – | May 11 | Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1)… |
| CVE-2006-1240 | FI Firebird Firebirdsql | – | Mar 15 | Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument |
| CVE-2006-1241 | FI Firebird Firebirdsql | – | Mar 15 | Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer… |
| CVE-2004-1449 | FI Firebird Firebirdsql | – | Dec 31 | Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload… |
| CVE-2004-0779 | FI Firebird Firebirdsql | – | Aug 18 | The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted… |
| CVE-2004-0718 | FI Firebird Firebirdsql | – | Jul 27 | The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that… |
| CVE-2004-2043 | FI Firebird Firebirdsql | – | May 1 | Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause… |
| CVE-2003-0281 | FI Firebird Firebirdsql | – | Jun 16 | Buffer overflow in Firebird 1.0.2 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows local users to execute arbitrary code via a… |
| CVE-2003-0197 | FI Firebird Firebirdsql | – | Apr 11 | Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK) |
| CVE-2001-0008 | FI Firebird Firebirdsql | – | Feb 12 | Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures |