Approved changes feed: RSS · Atom

cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*

part: a version: 0.7 update: *

VendorFirebirdsql (e2cdbc0c-bcfd-5df0-8ad2-4acd33406fc2)
ProductFirebird (32bc038a-9b8c-5852-9764-4cb6812b5d67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firebird3.0 purl2cpe 2026-06-01 10:12:49.805007
pkg:deb/ubuntu/firebird3.0 purl2cpe 2026-06-01 10:12:49.805009
pkg:github/firebirdsql/firebird purl2cpe 2026-06-01 10:12:49.805010
pkg:rpm/fedora/firebird purl2cpe 2026-06-01 10:12:49.805012
pkg:rpm/opensuse/firebird purl2cpe 2026-06-01 10:12:49.805013
pkg:sourceforge/firebird purl2cpe 2026-06-01 10:12:49.805015

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1449 vulnerable 2026-06-08 04:47:54.177335 Details available
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0779 vulnerable 2026-06-08 04:47:51.140521 Details available
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.
Published: 2004-08-14T04:00:00.000Z
Updated: 2024-08-08T00:31:46.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0718 vulnerable 2026-06-08 04:47:51.002920 Details available
The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Published: 2004-07-23T04:00:00.000Z
Updated: 2024-08-08T00:24:27.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.