CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

UBUNTU-CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

EasyApache 缓冲区错误漏洞

EasyApache is a powerful and easy-to-use tool from the Apache Foundation, built into WHM/cPanel, that can be used to update and configure the Apache web server. A security vulnerability exists in EasyApache that originates from a buffer overflow in PDOFirebird in EasyApache. An attacker can explo...

PT-2021-3510

Name of the Vulnerable Software and Affected Versions PHP versions 7.3.x through 7.3.28 PHP versions 7.4.x through 7.4.20 PHP versions 8.0.x through 8.0.7 Description The issue is related to insufficient input validation in the Firebird PDO driver extension. A malicious database server could caus...

CVE-2021-21704

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

USN-4822-1: Firebird vulnerability

It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code...

USN-4822-1 firebird2.5 vulnerability

It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code...

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

Design/Logic Flaw

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

CVE-2020-10552

Psyprax ≤3.2.1 has a credential-reuse vulnerability where the Firebird database is initialized with the default sysdba:masterke credentials, allowing any user to access and modify the database contents (including passwords) and to directly access local database files. This issue is documented acr...

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

Firebird Psyprax Security Vulnerability

Firebird is the Firebird Foundation's suite of open source cross-platform relational database management systems that provide multiple ANSI SQL-92 capabilities. A security vulnerability exists in Psyprax before 3.2.2, which stems from the ability to access the Firebird database after installation...

SQL Injection Vulnerability in Firebird Portal Management System

Suzhou Coolman Software Technology Co., Ltd. is a high-tech enterprise of portal software development, which is engaged in the research and development of local portal system in China. Firebird portal management system has a SQL injection vulnerability. Attackers can use the vulnerability to obta...

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

DLA-2129-1 firebird2.5 - security update

Bulletin has no description...

The vulnerability of the “Red Database” and Firebird database management systems, related to the lack of measures taken to protect SQL query structures, allows attackers to execute arbitrary code.

The vulnerability of the "Red Database" and Firebird database management systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by executing incorrectly formed SQL statements...

The vulnerability of the UDF subsystem of the “Red Database” and Firebird database management systems allows attackers to execute arbitrary code.

The vulnerability of the UDF subsystem in the “Red Database” and Firebird database management systems is related to errors during the execution of user-defined functions. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

SUSE SLED15 / SLES15 Security Update : libreoffice (SUSE-SU-2019:2003-1)

This update for libreoffice fixes the following issues : LibreOffice was updated to 6.2.5.2 fate327121. Security issue fixed : CVE-2018-16858: LibreOffice was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craf...