Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-vuuh-ke4a-93ar

Summary

Aliases

alias	CVE-2026-33337

Fixed_packages

url	pkg:deb/debian/firebird3.0@3.0.14.ds7-1
purl	pkg:deb/debian/firebird3.0@3.0.14.ds7-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.14.ds7-1

url	pkg:deb/debian/firebird3.0@3.0.14.ds7-1?distro=trixie
purl	pkg:deb/debian/firebird3.0@3.0.14.ds7-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.14.ds7-1%3Fdistro=trixie

url	pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1
purl	pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1

url	pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1?distro=trixie
purl	pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird4.0@4.0.7.3271.ds6-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2?distro=trixie

purl pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2%3Fdistro=trixie

url pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2

purl pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-31he-8cjm-6ueh

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.7.33374.ds4-2

url pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%252Bdeb12u1%3Fdistro=trixie

url pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%2Bdeb12u1

purl pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%2Bdeb12u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.11.33637.ds4-2%252Bdeb12u1

url pkg:deb/debian/firebird3.0@3.0.12.ds7-13%2Bdeb13u1?distro=trixie

purl pkg:deb/debian/firebird3.0@3.0.12.ds7-13%2Bdeb13u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.12.ds7-13%252Bdeb13u1%3Fdistro=trixie

url pkg:deb/debian/firebird3.0@3.0.12.ds7-13%2Bdeb13u1

purl pkg:deb/debian/firebird3.0@3.0.12.ds7-13%2Bdeb13u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1r6t-7fn8-3udg

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird3.0@3.0.12.ds7-13%252Bdeb13u1

url pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%2Bdeb13u1?distro=trixie

purl pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%2Bdeb13u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%252Bdeb13u1%3Fdistro=trixie

url pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%2Bdeb13u1

purl pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%2Bdeb13u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2zfe-p76n-c7dr

vulnerability	VCID-3r6p-gdev-bbcv

vulnerability	VCID-6ufp-qfaw-m3ht

vulnerability	VCID-73hj-f5ng-2bfz

vulnerability	VCID-km46-4ysp-1bbz

vulnerability	VCID-rsgd-4qcz-xfef

vulnerability	VCID-vuuh-ke4a-93ar

vulnerability	VCID-xhpv-x1yf-4kcp

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/firebird4.0@4.0.5.3140.ds6-17%252Bdeb13u1

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2026-33337

reference_id

reference_type

scores

value	0.00127
scoring_system	epss
scoring_elements	0.3154
published_at	2026-06-11T12:55:00Z

value	0.00127
scoring_system	epss
scoring_elements	0.31749
published_at	2026-06-13T12:55:00Z

value	0.00127
scoring_system	epss
scoring_elements	0.31731
published_at	2026-06-12T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2026-33337

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33337
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33337

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134332
reference_id	1134332
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134332

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134333
reference_id	1134333
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134333

reference_url

https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-89mq-229g-x47p

reference_id

GHSA-89mq-229g-x47p

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-17T19:21:08Z/

url

https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-89mq-229g-x47p

reference_url

https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14

reference_id

v3.0.14

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-17T19:21:08Z/

url

https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14

reference_url

https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7

reference_id

v4.0.7

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-17T19:21:08Z/

url

https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7

reference_url

https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4

reference_id

v5.0.4

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-17T19:21:08Z/

url

https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4

Weaknesses

cwe_id	120
name	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
description	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

cwe_id	502
name	Deserialization of Untrusted Data
description	The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Exploits

Severity_range_score 7.5 - 7.5

Exploitability 0.5

Weighted_severity 6.8

Risk_score 3.4

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vuuh-ke4a-93ar

Vulnerability Instance