FirebirdSQL

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

FirebirdSQL records in CISA KEV

No FirebirdSQL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Firebird 46 records HIGH

Records

46 records

TI-2026-22559 CVE-2026-28224

Firebird Null Pointer Dereference via CryptCallback causes DOS

HIGH 75

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00465 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-476

TI-2026-22234 CVE-2026-27890

Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments

HIGH 75

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00465 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-119

TI-2026-27368 CVE-2026-35215

Firebird: DoS via malicious slice descriptor in slice packet

HIGH 72

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00466 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-369

TI-2026-26527 CVE-2026-34232

Firebird: DoS via `op_response` packet from client

HIGH 72

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00466 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-228

TI-2026-25747 CVE-2026-33337

Firebird has a buffer overflow when parsing corrupted slice packets

HIGH 72

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-120

TI-2026-22547 CVE-2026-28212

Firebird has potential server crash via null pointer dereference when processing op_slice packet

HIGH 72

Firebird is an open-source relational database management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-476

TI-2008-00362 CVE-2008-0387 · GHSA-qg6p-6xqq-gh7c

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before…

MEDIUM 64

Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3)…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.45873 Published 2008-01-29 No fix listed CWE-189

TI-2013-02236 CVE-2013-2492 · GHSA-8xvr-8v4v-rm6j

Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1…

MEDIUM 58

Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.42166 Published 2013-03-15 No fix listed CWE-119

TI-2001-00008 CVE-2001-0008 · GHSA-mc6r-254j-5wx6

Backdoor account in Interbase database server allows remote attackers to overwrite…

MEDIUM 58

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13307 Published 2001-05-07 No fix listed

TI-2007-03078 CVE-2007-3181 · GHSA-c2r6-w3hh-33v8

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to…

MEDIUM 57

Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count value in a p_cnct structure in a connect (0x01) request to port 3050/tcp, related…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13206 Published 2007-06-12 No fix listed

TI-2007-05050 CVE-2007-5245 · GHSA-56gm-wg67-34qm

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI…

MEDIUM 54

Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08876 Published 2007-10-06 No fix listed CWE-119

TI-2007-04812 CVE-2007-4992 · GHSA-qfqw-7vp2-p8m5

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird…

MEDIUM 53

Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07691 Published 2007-10-11 No fix listed CWE-119

TI-2008-00442 CVE-2008-0467 · GHSA-v684-4fqq-vwgc

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might…

MEDIUM 52

Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06438 Published 2008-01-29 No fix listed CWE-119

TI-2007-05051 CVE-2007-5246 · GHSA-f92g-3pmp-x3pm

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI…

MEDIUM 52

Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06643 Published 2007-10-06 No fix listed CWE-119

TI-2017-08511 CVE-2017-11509 · GHSA-6pp2-h2x8-7cp5

SQL injection in Firebird SQL Server

MEDIUM 47

An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06148 Published 2018-03-28 Will not fix CWE-89

TI-2026-29117 CVE-2026-40342

Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

MEDIUM 44

Firebird is an open-source relational database management system.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00692 Published 2026-04-17 Fixed in 3.0.14, 4.0.7 +1 CWE-22

TI-2017-04188 CVE-2017-6369 · GHSA-vf42-c4fw-rcm3

Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before…

MEDIUM 44

Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03301 Published 2017-03-24 No fix listed CWE-862

TI-2023-21664 CVE-2023-41038

Server crash when using specific form of SET BIND statement

MEDIUM 40

Firebird is a relational database.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2024-03-20 Fixed in 4.0.4.2981 CWE-770

TI-2025-18655 CVE-2025-24975

Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

LOW 39

Firebird is a relational database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0059 Published 2025-08-15 Fixed in 6.0.0.609, 5.0.2.1610 +1 CWE-754

TI-2007-02518 CVE-2007-2606 · GHSA-v52h-q97r-4w5h

Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption…

LOW 38

Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01788 Published 2007-05-11 No fix listed

TI-2007-04516 CVE-2007-4664 · GHSA-hrp4-6cpf-rhjm

Unspecified vulnerability in the (1) attach database and (2) create database…

LOW 37

Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01882 Published 2007-09-04 No fix listed CWE-119

TI-2006-06955 CVE-2006-7214 · GHSA-wq9r-532w-7f74

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause…

LOW 37

Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending many remote protocol versions; and (2) cause a denial of service (connection dro…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01619 Published 2007-06-29 No fix listed

TI-2004-01916 CVE-2004-2043 · GHSA-grgp-hrrx-jxvp

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and…

LOW 37

Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long da…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.11873 Published 2005-05-10 No fix listed

TI-2004-00717 CVE-2004-0779 · GHSA-2hwp-jrpr-6f78

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly…

LOW 37

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote atta…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02109 Published 2004-08-14 No fix listed

TI-2004-00659 CVE-2004-0718 · GHSA-7wc5-rw74-x5q6

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers…

LOW 36

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitate…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01746 Published 2004-07-23 No fix listed

Open these records in search →

Critical	7
High	19
Medium	18
Low	2
No CVSS	0