{"items":[{"id":"CVE-2026-40342","published":"2026-04-17T19:22:46.644Z","updated":"2026-04-22T13:56:49.927Z","title":"Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution","severity":"CRITICAL","score":10,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00692,"kevAdded":null},{"id":"CVE-2026-35215","published":"2026-04-17T18:59:23.663Z","updated":"2026-04-20T15:40:39.510Z","title":"Firebird: DoS via malicious slice descriptor in slice packet","severity":"HIGH","score":7.5,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2026-34232","published":"2026-04-17T18:52:11.693Z","updated":"2026-04-20T13:46:08.507Z","title":"Firebird: DoS via `op_response` packet from client","severity":"HIGH","score":7.5,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2026-33337","published":"2026-04-17T18:48:47.953Z","updated":"2026-04-17T19:21:17.132Z","title":"Firebird has a buffer overflow when parsing corrupted slice packets","severity":"HIGH","score":7.5,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2026-28224","published":"2026-04-17T18:38:58.138Z","updated":"2026-04-17T19:31:38.952Z","title":"Firebird Null Pointer Dereference via CryptCallback causes DOS","severity":"HIGH","score":8.2,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2026-28214","published":"2026-04-17T18:35:46.974Z","updated":"2026-04-20T13:46:08.635Z","title":"Firebird server hangs when using specific clumplet on batch creation","severity":"MEDIUM","score":6,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.01133,"kevAdded":null},{"id":"CVE-2026-27890","published":"2026-04-17T18:14:29.433Z","updated":"2026-04-17T18:50:22.134Z","title":"Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments","severity":"HIGH","score":8.2,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2026-28212","published":"2026-04-17T18:05:25.854Z","updated":"2026-04-20T13:46:08.904Z","title":"Firebird has potential server crash via null pointer dereference when processing op_slice packet","severity":"HIGH","score":7.5,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2025-65104","published":"2026-04-17T17:47:42.109Z","updated":"2026-04-17T18:25:11.941Z","title":"Firebird: Information leak vulnerability in firebird3 client when used with newer server","severity":"HIGH","score":7.9,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2025-24975","published":"2025-08-15T15:11:29.986Z","updated":"2025-08-20T19:50:53.827Z","title":"Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External","severity":"HIGH","score":7.1,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.0059,"kevAdded":null},{"id":"CVE-2025-54989","published":"2025-08-15T15:04:19.097Z","updated":"2025-11-03T18:13:39.162Z","title":"Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.0068,"kevAdded":null},{"id":"CVE-2023-41038","published":"2024-03-20T14:22:50.484Z","updated":"2024-08-13T16:44:27.739Z","title":"Server crash when using specific form of SET BIND statement","severity":"HIGH","score":7.5,"vendor":"FirebirdSQL","product":"firebird","kev":false,"epss":0.00658,"kevAdded":null}]}