CVE-2016-8929
published 2017-02-01CVE-2016-8929: IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view…
PriorityP434medium5.4CVSS 3.0
AVNACLPRLUINSUCNILAL
EPSS
0.88%
55.0th percentile
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm | kenexa_lms | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| ibm_corporation | kenexa_lms_on_cloud | — | — |
| virustotal | yara | >= 0 < 3.4.0+dfsg-2ubuntu0.1~esm1 | 3.4.0+dfsg-2ubuntu0.1~esm1 |
| virustotal | yara | >= 0 < 3.7.1-1ubuntu2+esm1 | 3.7.1-1ubuntu2+esm1 |
| virustotal | yara | >= 0 < 3.9.0-1ubuntu0.1~esm1 | 3.9.0-1ubuntu0.1~esm1 |
CVSS provenance
nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
yara vulnerabilities
osv·2026-03-09·CVSS 7.5
CVE-2016-10211 yara vulnerabilities
yara vulnerabilities
Kamil Frankowicz discovered that a number of YARA's functions
generated memory exceptions when processing specially crafted
rules or files. A remote attacker could possibly use these
issues to cause YARA to crash, resulting in a denial of
service. These issues only affected Ubuntu 16.04 LTS.
(CVE-2016-10211, CVE-2017-5923, CVE-2017-5924, CVE-2017-8294,
CVE-2017-8929, CVE-2017-9304, CVE-2017-9438, CVE-2017-9465)
Jurriaan Bremer discovered that YARA's yr_object_array_set_limit()
function could result in a heap buffer overflow when scanning
specially crafted .NET files. A remote attacker could possibly use
this issue to cause YARA to crash, resulting in a denial of service.
This issue only affected Ubuntu 16.04 LTS. (CVE-2017-11328)
It was discovered that YARA's yr_exe
GHSA
GHSA-p83f-8vjf-254c: IBM Kenexa LMS on Cloud is vulnerable to SQL injection
ghsa_unreviewed·2022-05-17
CVE-2016-8929 [MEDIUM] CWE-89 GHSA-p83f-8vjf-254c: IBM Kenexa LMS on Cloud is vulnerable to SQL injection
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2017-02-01
Published