Lucene search
K

5 matches found

PyPA
PyPA
added 2025/01/29 9:15 p.m.6 views

PYSEC-2025-26

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the...

7CVSS7.8AI score0.00189EPSS
Exploits1References2Affected Software1
Snyk
Snyk
added 2025/01/29 8:49 p.m.1 views

Incorrect Default Permissions

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Default Permissions when using EXTERNALBROWSER or USERNAMEPASSWORDMFA authentication methods with temporary credential caching enabled, allowing the attacker to...

5.5CVSS6.9AI score0.00141EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.4 views

Snowflake Connector for Python 代码问题漏洞

Snowflake Connector for Python is an open source interface from Snowflake Computing. It is used to develop Python applications that can connect to Snowflake and perform all standard operations. A code issue vulnerability exists in Snowflake Connector for Python versions prior to 3.13.1, which ste...

7.8CVSS9AI score0.0013EPSS
Exploits0References2
PyPA
PyPA
added 2023/06/08 9:15 p.m.4 views

PYSEC-2023-88

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-onSSO browser URL authentication. In order to exploit the...

8.8CVSS8.1AI score0.00292EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/08 8:22 p.m.8 views

CVE-2023-34233 Snowflake Python Connector vulnerable to Command Injection

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-onSSO browser URL authentication. In order to exploit the...

7.3CVSS7.7AI score0.00292EPSS
Exploits1References3
Rows per page
Query Builder