Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2026/07/08 2:43 p.m.•11 views

CVE-2026-15067

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

8.8CVSS6.2AI score0.0053EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/07/08 2:43 p.m.•55 views

CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

8.8CVSS0.0053EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/08 2:43 p.m.•19 views

CVE-2026-15067 Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

8.8CVSS6.3AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/07/08 2:43 p.m.•17 views

EUVD-2026-42284

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

8.8CVSS6.2AI score0.0053EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•23 views

PT-2026-56460

Snowflake Terraform Provider versions prior to 2.18.0 contain several security vulnerabilities, including SQL injection via an unsanitized data source input could result in arbitrary SQL execution under the provider's privileged Snowflake session, potentially enabling sensitive data exfiltration...

8.8CVSS6.2AI score0.0053EPSS
SaveExploits0References2
PyPA
PyPA
•added 2025/06/24 8:15 a.m.•18 views

PYSEC-2025-51

Failure to Sanitize Special Elements into a Different Plane Special Element Injection vulnerability in Apache Airflow Providers Snowflake.This issue affects Apache Airflow Providers Snowflake: before 6.4.0.Sanitation of table and stage parameters were added...

9.8CVSS7AI score0.00662EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder