Known vulnerabilities in firebird-server
Vendor:
SUSE
Software:
firebird-server
Software CPE:
cpe:2.3:o:suse:firebird-server:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126558 - Incorrect Calculation CVE-2025-65104 |
CWE-682 | Low | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126557 - NULL Pointer Dereference CVE-2026-28212 |
CWE-476 | Medium | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126556 - Integer overflow CVE-2026-28214 |
CWE-190 | Low | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126555 - Out-of-bounds write CVE-2026-27890 |
CWE-787 | High | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126554 - NULL Pointer Dereference CVE-2026-28224 |
CWE-476 | High | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-40342 |
CWE-22 | Medium | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126552 - Buffer overflow CVE-2026-33337 |
CWE-120 | Medium | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126551 - Improper input validation CVE-2026-34232 |
CWE-20 | Medium | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 |
||
| #VU126550 - Improper input validation CVE-2026-35215 |
CWE-20 | Medium | 3.0.14.33856-150200.3.9.1 | 20.04.2026 |
SB2026042076 SB2026061956 SB2026070123 |
||
| #VU114438 - NULL Pointer Dereference CVE-2025-54989 |
CWE-476 | Medium | 3.0.4.33054-150200.3.3.1 | 26.08.2025 |
SB2025082645 SB2025082749 SB2025090383 and 5 more |
||
| #VU37356 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2017-11509 |
CWE-89 | High | 3.0.4.33054-150200.3.6.1 | 28.03.2018 |
SB2018032829 SB20250908117 |