Vulnerabilities in FirebirdSQL
12 resultsVexday analysis
O Firebird SQL apresenta um perfil de risco reduzido com 12 CVEs catalogadas, nenhuma sob exploração ativa conhecida e apenas 1 vulnerabilidade crítica. A ausência de publicações recentes (últimos 90 dias) indica estabilidade, embora a fraqueza dominante CWE-476 (Null Pointer Dereference) sugira problemas estruturais de validação que merecem atenção em processos de patching.
CVE-2026-28214MEDIUMFirebird server hangs when using specific clumplet on batch creationEPSS 1.1%CVE-2026-40342CRITICALFirebird: Path Traversal + Arbitrary File Write Leads to Remote Code ExecutionEPSS 0.7%CVE-2023-41038HIGHServer crash when using specific form of SET BIND statementEPSS 0.7%CVE-2025-54989MEDIUMFirebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service VulnerabilityEPSS 0.5%CVE-2026-33337HIGHFirebird has a buffer overflow when parsing corrupted slice packetsEPSS 0.5%CVE-2025-24975HIGHFirebird Non-Authorized Access to Encrypted Database Using Execute Statement on ExternalEPSS 0.5%CVE-2026-28212HIGHFirebird has potential server crash via null pointer dereference when processing op_slice packetEPSS 0.5%CVE-2026-34232HIGHFirebird: DoS via `op_response` packet from clientEPSS 0.5%CVE-2026-35215HIGHFirebird: DoS via malicious slice descriptor in slice packetEPSS 0.5%CVE-2026-28224HIGHFirebird Null Pointer Dereference via CryptCallback causes DOSEPSS 0.5%CVE-2026-27890HIGHFirebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data SegmentsEPSS 0.5%CVE-2025-65104HIGHFirebird: Information leak vulnerability in firebird3 client when used with newer serverEPSS 0.2%