Hunt List
12,918 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
76
|
CVE-2026-46866 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
76
|
CVE-2026-57688 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions. | |
|
68
|
CVE-2026-56001 |
8.8 | 0.0039 | NET LOW CX NO UI | A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an | |
|
68
|
CVE-2026-89435 |
8.8 | 0.0039 | NET LOW CX NO UI | The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Qu | |
|
67
|
CVE-2026-19754 |
8.6 | 0.0039 | NET LOW CX NO UI | Baserow versions 2.2.0 through 2.3.3 contain an SQL injection vulnerability in t | |
|
66
|
CVE-2026-60169 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
66
|
CVE-2026-60192 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
66
|
CVE-2026-60201 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60222 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60273 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60277 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60312 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60416 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
66
|
CVE-2026-60417 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60450 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60462 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60543 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60558 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60621 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
66
|
CVE-2026-60670 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Bu | |
|
66
|
CVE-2026-60756 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp | |
|
66
|
CVE-2026-60780 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
66
|
CVE-2026-60785 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (com | |
|
66
|
CVE-2026-60979 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (compon | |
|
66
|
CVE-2026-61074 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of | |
|
66
|
CVE-2026-61092 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
66
|
CVE-2026-61106 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supp | |
|
66
|
CVE-2026-61137 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon | |
|
66
|
CVE-2026-61163 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-61170 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
66
|
CVE-2026-61225 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Communications Converged Application Server product | |
|
66
|
CVE-2026-62547 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
66
|
CVE-2026-71239 |
8.1 | 0.0039 | NET LOW CX NO UI | DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, | |
|
66
|
CVE-2026-60742 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-60831 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-60992 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
66
|
CVE-2026-61229 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-61265 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD | |
|
66
|
CVE-2026-61293 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyper | |
|
66
|
CVE-2026-61307 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product | |
|
66
|
CVE-2026-62471 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-62501 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-62531 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-70675 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-70684 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
66
|
CVE-2026-70704 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite | |
|
66
|
CVE-2026-70744 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
66
|
CVE-2026-70749 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
66
|
CVE-2026-70795 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Applications Platform Engineering product of Oracle | |
|
66
|
CVE-2026-70814 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business |