İçeriğe atla
Noroxi

Snowflake kayıtları

snowflake üreticisine ait 38 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%89,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

38 kayıt
  • CVE-2026-13751
    38İzleyin

    Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load

    KritikCVSS 9,6İstismar yokEPSS %0

    snowflake · snowflake cli29 Haz 2026

  • CVE-2023-34231
    36İzleyin

    Snowflake Golang Driver vulnerable to Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %2

    snowflake · gosnowflake8 Haz 2023

  • CVE-2023-34232
    36İzleyin

    Snowflake NodeJS Driver vulnerable to Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %2

    snowflake · snowflake connector8 Haz 2023

  • CVE-2023-34233
    36İzleyin

    Snowflake Python Connector vulnerable to Command Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    snowflake · snowflake connector8 Haz 2023

  • CVE-2023-30535
    36İzleyin

    Snowflake JDBC vulnerable to command injection via SSO URL authentication

    YüksekCVSS 8,8İstismar yokEPSS %2

    snowflake · snowflake jdbc14 Nis 2023

  • CVE-2023-34230
    35İzleyin

    Snowflake Connector vulnerable to Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    snowflake · snowflake connector8 Haz 2023

  • CVE-2026-13749
    35İzleyin

    Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    snowflake · snowflake cli29 Haz 2026

  • CVE-2026-13744
    35İzleyin

    Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input

    YüksekCVSS 8,8İstismar yokEPSS %0

    snowflake · snowflake cli29 Haz 2026

  • CVE-2026-13752
    32İzleyin

    Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands

    YüksekCVSS 8,0İstismar yokEPSS %0

    snowflake · snowflake cli29 Haz 2026

  • CVE-2025-24789
    31İzleyin

    Snowflake JDBC allows an untrusted search path on Windows

    YüksekCVSS 7,8İstismar yokEPSS %0

    snowflake · snowflake jdbc29 Oca 2025

  • CVE-2024-28851
    31İzleyin

    Elevation of privilege in Snowflake Hive MetaStore Connector Helper script

    YüksekCVSS 7,8İstismar yokEPSS %0

    snowflake · snowflake hive metastore connector15 Mar 2024

  • CVE-2025-24794
    31İzleyin

    The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache

    YüksekCVSS 7,8İstismar yokEPSS %0

    snowflake · snowflake connector29 Oca 2025

  • CVE-2010-0798
    30İzleyin

    SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands vi

    YüksekCVSS 7,5İstismar yokEPSS %1

    typo3 · typo32 Mar 2010

  • CVE-2022-42965
    30İzleyin

    Exponential ReDoS in snowflake-connector-python leads to denial of service

    YüksekCVSS 7,5İstismar yokEPSS %1

    snowflake · snowflake connector9 Kas 2022

  • CVE-2023-51662
    30İzleyin

    Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

    YüksekCVSS 7,5İstismar yokEPSS %0

    snowflake · snowflake connector22 Ara 2023

  • CVE-2025-24793
    28İzleyin

    Snowflake Connector for Python has an SQL Injection in write_pandas

    YüksekCVSS 7,0İstismar yokEPSS %0

    snowflake · snowflake connector29 Oca 2025

  • CVE-2025-46328
    28İzleyin

    NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

    YüksekCVSS 7,0İstismar yokEPSS %0

    snowflake · snowflake connector28 Nis 2025

  • CVE-2025-46326
    28İzleyin

    Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file

    YüksekCVSS 7,0İstismar yokEPSS %0

    snowflake · snowflake connector28 Nis 2025

  • CVE-2025-46327
    28İzleyin

    Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

    YüksekCVSS 7,0İstismar yokEPSS %0

    snowflake · gosnowflake28 Nis 2025

  • CVE-2022-35918
    27İzleyin

    Streamlit directory traversal vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %2

    snowflake · streamlit1 Ağu 2022

  • CVE-2024-42474
    26İzleyin

    Streamlit Path Traversal Security Vulnerability on Windows

    OrtaCVSS 6,5İstismar yokEPSS %1

    snowflake · streamlit12 Ağu 2024

  • CVE-2026-13748
    25İzleyin

    Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction

    OrtaCVSS 6,3İstismar yokEPSS %0

    snowflake · snowflake cli29 Haz 2026

  • CVE-2023-27494
    24İzleyin

    Streamlit Cross-site Scripting vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    snowflake · streamlit16 Mar 2023

  • CVE-2024-43382
    23İzleyin

    Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encryp

    OrtaCVSS 5,9İstismar yokEPSS %0

    snowflake · snowflake jdbc30 Eki 2024

  • CVE-2024-49750
    22İzleyin

    Snowflake Connector for Python has sensitive data in logs

    OrtaCVSS 5,5İstismar yokEPSS %0

    snowflake · snowflake connector24 Eki 2024