CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-30535 – Snowflake JDBC vulnerable to command injection via SSO URL authentication
https://notcve.org/view.php?id=CVE-2023-30535
Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. • https://community.snowflake.com/s/article/JDBC-Driver-Release-Notes https://github.com/snowflakedb/snowflake-jdbc/security/advisories/GHSA-4g3j-c4wg-6j7x • CWE-20: Improper Input Validation CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-42965 – Exponential ReDoS in snowflake-connector-python leads to denial of service
https://notcve.org/view.php?id=CVE-2022-42965
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method Se puede activar un ReDoS exponencial (Denegación de Servicio de Expresión Regular) en el paquete PyPI snowflake-connector-python, cuando un atacante puede proporcionar entradas arbitrarias al método get_file_transfer_type no documentado. • https://research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185 • CWE-1333: Inefficient Regular Expression Complexity •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2010-0798
https://notcve.org/view.php?id=CVE-2010-0798
SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión T3BLOG v0.6.2 y anteriores para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores sin especificar. • http://secunia.com/advisories/38388 http://typo3.org/extensions/repository/view/t3blog/0.8.0 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002 http://www.securityfocus.com/bid/38030 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2010-0797
https://notcve.org/view.php?id=CVE-2010-0797
Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión T3BLOG v0.6.2 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias arbitrarias de comandos web o HTML a través de vectores sin especificar. • http://secunia.com/advisories/38388 http://typo3.org/extensions/repository/view/t3blog/0.8.0 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-002 http://www.securityfocus.com/bid/38030 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •