Lucene search
+L

5 matches found

NVD
NVD
added 2026/07/08 3:16 p.m.10 views

CVE-2026-15062

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...

9.6CVSS0.00285EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/08 2:32 p.m.7 views

CVE-2026-15062

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...

9.6CVSS6.2AI score0.00285EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/08 2:32 p.m.32 views

CVE-2026-15062

Snowflake Snowpark Python SDK (snowpark-python) before 1.53.0 is affected by SQL injection vulnerabilities allowing authenticated low-privilege users to perform SQL beyond their authorization. Exploitation vectors described include embedding SQL payloads in source database column names to escalat...

9.6CVSS6.2AI score0.00285EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/08 2:32 p.m.9 views

EUVD-2026-42282

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...

9.6CVSS6.2AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/08 2:32 p.m.59 views

CVE-2026-15062 SQL Injection in Snowflake Snowpark Python SDK

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK snowpark-python versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database...

9.6CVSS0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder