Approved changes feed: RSS · Atom

cpe:2.3:a:bilin_software_and_informatics_consultancy_inc.:humanist_digital_human_resources:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBilin Software And Informatics Consultancy Inc. (09bfc7d8-44c1-5a9f-a9c9-ca1680fce6a1)
ProductHumanist Digital Human Resources (0858b49a-b322-57d2-98ce-fe0c25b96001)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14219 vulnerable 2026-09-16 04:33:12.510080 URL Redirection in Bilin Software's HUMANIST Digital Human Resources
MEDIUM (5.4)
URL redirection to untrusted site ('open redirect') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Published: 2026-08-04T08:33:44.045Z
Updated: 2026-08-04T13:12:55.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14175 vulnerable 2026-09-16 04:33:12.493233 Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources
CRITICAL (9.8)
Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Published: 2026-08-04T08:23:47.950Z
Updated: 2026-08-04T13:46:16.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14194 vulnerable 2026-09-16 04:33:12.419658 Path Traversal Allows Arbitrary File Download in Bilin Software's HUMANIST Digital Human Resources
MEDIUM (6.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Published: 2026-08-04T08:28:49.030Z
Updated: 2026-08-04T13:13:51.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14838 vulnerable 2026-09-16 04:33:12.073967 Session Token Exposure in URL Leading to Account Takeover in Bilin Software's HUMANIST Digital Human Resources
HIGH (7.4)
Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Published: 2026-08-04T08:42:27.327Z
Updated: 2026-08-04T13:09:50.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14465 vulnerable 2026-09-16 04:33:11.879317 Session Fixation in Bilin Software's HUMANIST Digital Human Resources
MEDIUM (6.5)
Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
Published: 2026-08-04T08:58:53.768Z
Updated: 2026-08-04T13:03:45.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14202 vulnerable 2026-09-16 04:33:11.822144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14804 vulnerable 2026-09-16 04:33:11.642814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14192 vulnerable 2026-09-16 04:33:11.574029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15721 vulnerable 2026-09-16 04:33:06.341919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.