TI-2026-29117 CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
Priority MEDIUM 44
Firebird is an open-source relational database management system.
Vulnerabilities
46 records
Priority HIGH 72
Firebird is an open-source relational database management system.
Priority HIGH 72
Firebird is an open-source relational database management system.
Priority HIGH 72
Firebird is an open-source relational database management system.
Priority HIGH 75
Firebird is an open-source relational database management system.
Priority LOW 29
Firebird is an open-source relational database management system.
TI-2026-22234 CVE-2026-27890
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments
Priority HIGH 75
Firebird is an open-source relational database management system.
TI-2026-22547 CVE-2026-28212
Firebird has potential server crash via null pointer dereference when processing op_slice packet
Priority HIGH 72
Firebird is an open-source relational database management system.
TI-2025-40256 CVE-2025-65104
Firebird: Information leak vulnerability in firebird3 client when used with newer server
Priority LOW 34
Firebird is an open-source relational database management system.
TI-2025-18655 CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
Priority LOW 39
Firebird is a relational database.
TI-2025-34695 CVE-2025-54989
Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
Priority LOW 34
Firebird is a relational database.
Priority MEDIUM 40
Firebird is a relational database.
TI-2017-08511 CVE-2017-11509 · GHSA-6pp2-h2x8-7cp5
SQL injection in Firebird SQL Server
Priority MEDIUM 47
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement.
TI-2017-04188 CVE-2017-6369 · GHSA-vf42-c4fw-rcm3
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before…
Priority MEDIUM 44
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from fbudf.so.
TI-2016-01430 CVE-2016-1569 · GHSA-qxj2-69f2-vjcr
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon…
Priority LOW 33
FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.
TI-2014-07561 CVE-2014-9323 · GHSA-2hhr-r74q-p8fq
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows…
Priority LOW 34
The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action…
TI-2013-02236 CVE-2013-2492 · GHSA-8xvr-8v4v-rm6j
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1…
Priority MEDIUM 58
Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote attackers to execute arbitrary code via a crafted packet to TCP port 3050, related…
TI-2012-04647 CVE-2012-5529 · GHSA-69fh-mhqq-m6vc
TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote…
Priority LOW 21
TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by preparing an empty dynamic SQL query.
TI-2009-02505 CVE-2009-2620 · GHSA-rp94-92gp-7q47
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6…
Priority LOW 34
src/remote/server.cpp in fbserver.exe in Firebird SQL 1.5 before 1.5.6, 2.0 before 2.0.6, 2.1 before 2.1.3, and 2.5 before 2.5 Beta 2 allows remote attackers to cause a denial of service (daemon crash) via a malformed op…
TI-2008-00442 CVE-2008-0467 · GHSA-v684-4fqq-vwgc
Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might…
Priority MEDIUM 52
Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via a long username.
TI-2008-00362 CVE-2008-0387 · GHSA-qg6p-6xqq-gh7c
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before…
Priority MEDIUM 64
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote attackers to execute arbitrary code via crafted (1) op_receive, (2) op_start, (3)…
TI-2007-04812 CVE-2007-4992 · GHSA-qfqw-7vp2-p8m5
Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird…
Priority MEDIUM 53
Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.
TI-2007-05051 CVE-2007-5246 · GHSA-f92g-3pmp-x3pm
Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI…
Priority MEDIUM 52
Multiple stack-based buffer overflows in Firebird LI 2.0.0.12748 and 2.0.1.12855, and WI 2.0.0.12748 and 2.0.1.12855, allow remote attackers to execute arbitrary code via (1) a long attach request on TCP port 3050 to the…
TI-2007-05050 CVE-2007-5245 · GHSA-56gm-wg67-34qm
Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI…
Priority MEDIUM 54
Multiple stack-based buffer overflows in Firebird LI 1.5.3.4870 and 1.5.4.4910, and WI 1.5.3.4870 and 1.5.4.4910, allow remote attackers to execute arbitrary code via (1) a long service attach request on TCP port 3050 to…
TI-2007-04521 CVE-2007-4669 · GHSA-953w-v856-4gqv
The Services API in Firebird before 2.0.2 allows remote authenticated users without…
Priority LOW 21
The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.