CVE-2025-67261

CVE-2025-67261 - Inyección SQL ciega basada en contenido en Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 es vulnerable a la inyección SQL ciega basada en contenido. La vulnerabilidad existe en la función Search de la página Orders. La función "Search" de la página...

TencentOS Server 4: php (TSSA-2026:0342)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0342 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the client library of the Firebird database management system allows a perpetrator to cause information leakage.

The vulnerability of the client library of the Firebird database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to cause a data leak...

The vulnerability of the Firebird database management system, related to incorrect restrictions on path names to the catalog, allows attackers to execute arbitrary code.

The vulnerability of the Firebird database management system is related to incorrect restrictions on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OESA-2026-2421 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

ROS-20260515-73-0004

A vulnerability in the Firebird database management system is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260515-73-0008

A vulnerability in the xdrdatum function of the Firebird database management system is related to a flaw in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260515-73-0007

A vulnerability in the Firebird database management system is related to incorrect processing of a syntactically incorrect structure. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260515-73-0005

A vulnerability in the opcryptkeycallback function of the Firebird database management system is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the xdr_datum function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the xdrdatum function in the Firebird database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Firebird database management system, related to the execution of operations outside the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Firebird database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Firebird database management system, related to the improper processing of syntactically incorrect structures, allows attackers to cause service failures.

The vulnerability of the Firebird database management system is related to the improper processing of syntactically incorrect structures. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the SDL_info function in the Firebird database management system allows a hacker to induce a service failure.

The vulnerability of the SDLinfo function in the Firebird database management system is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the op_crypt_key_callback function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the opcryptkeycallback function in the Firebird database management system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the sdl_desc function in the Firebird database management system allows a hacker to cause a service failure.

The vulnerability of the sdldesc function in the Firebird database management system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SUSE CVE-2026-27890

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCTspecificdata segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the Array class's grow...

SUSE CVE-2026-28224

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when the server receives an opcryptkeycallback packet without prior authentication, the portservercryptcallback handler is not initialized, resulting in a null pointer dereference and...

SUSE CVE-2026-34232

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdrstatusvector function does not handle the iscargcstring type when decoding an opresponse packet, causing a server crash when one is encountered in the status vector. An...

CVE-2026-40342

A flaw was found in Firebird, an open-source relational database management system. An authenticated user with CREATE FUNCTION privileges can exploit a path traversal vulnerability in the external engine plugin loader. This allows an attacker to use a crafted engine name to load an arbitrary shar...

CVE-2026-35215

A flaw was found in Firebird. In the sdldesc function, a division by zero vulnerability exists due to improper validation of the length of a decoded SDL descriptor from a slice packet. An unauthenticated attacker can exploit this by sending a specially crafted slice packet, leading to a server...