Hunt List
13,093 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-14739 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL stat | |
|
79
|
CVE-2026-59506 |
9.3 | 0.0041 | NET NO AUTH LOW CX NO UI | : Missing Authentication for Critical Function vulnerability in Priority Portal | |
|
78
|
CVE-2026-34285 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
78
|
CVE-2026-34286 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
75
|
CVE-2026-70832 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
75
|
CVE-2026-70889 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70890 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70891 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70896 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70910 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
75
|
CVE-2026-70947 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo | |
|
75
|
CVE-2026-70985 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-70986 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-70987 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-71034 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-71043 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
75
|
CVE-2026-71061 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
75
|
CVE-2026-71107 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
75
|
CVE-2026-71142 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Communications Unified Inventory Management product | |
|
75
|
CVE-2026-71158 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73887 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73907 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73908 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73938 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2025-68320 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: lan966x: Fi | |
|
69
|
CVE-2026-13883 |
9.6 | 0.0041 | NET NO AUTH LOW CX | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
69
|
CVE-2026-73644 |
9.6 | 0.0041 | NET LOW CX NO UI | OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN | |
|
68
|
CVE-2026-13786 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13788 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 | |
|
68
|
CVE-2026-13815 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13898 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed | |
|
68
|
CVE-2026-13899 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13965 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remot | |
|
68
|
CVE-2026-14006 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a r | |
|
68
|
CVE-2026-14067 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 | |
|
68
|
CVE-2026-14086 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 a | |
|
68
|
CVE-2026-14149 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed | |
|
68
|
CVE-2026-14393 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14395 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remo | |
|
68
|
CVE-2026-14403 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14430 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
68
|
CVE-2026-14432 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-15107 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in IndexedDB in Google Chrome prior to 150.0.7871.115 allowed a r | |
|
68
|
CVE-2026-15116 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remot | |
|
68
|
CVE-2026-15118 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remot | |
|
68
|
CVE-2026-15126 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remot | |
|
68
|
CVE-2026-15133 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in InterestGroups in Google Chrome prior to 150.0.7871.115 allowe | |
|
68
|
CVE-2026-15902 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote | |
|
68
|
CVE-2026-15903 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allo | |
|
64
|
CVE-2026-40503 |
7.1 | 0.0041 | NET LOW CX NO UI | OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that |