Hunt List
12,863 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
79
|
CVE-2026-70673 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
79
|
CVE-2026-70998 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
79
|
CVE-2026-71065 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2026-40797 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
78
|
CVE-2026-62232 |
9.1 | 0.0035 | NET NO AUTH LOW CX NO UI | Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in t | |
|
77
|
CVE-2026-76641 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows att | |
|
76
|
CVE-2026-60284 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
76
|
CVE-2026-60428 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
76
|
CVE-2026-60615 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle | |
|
76
|
CVE-2026-60668 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle | |
|
76
|
CVE-2026-60674 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
76
|
CVE-2026-60810 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Supply Chain Trading Connector product of Oracle E-B | |
|
76
|
CVE-2026-61089 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle Peopl | |
|
76
|
CVE-2026-61038 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
76
|
CVE-2026-61054 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
76
|
CVE-2026-70702 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (compone | |
|
76
|
CVE-2026-70773 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business | |
|
76
|
CVE-2026-70852 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (comp | |
|
76
|
CVE-2026-70887 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
76
|
CVE-2026-70897 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
76
|
CVE-2026-71130 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp | |
|
76
|
CVE-2026-71159 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-44375 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library | |
|
75
|
CVE-2026-19448 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerab | |
|
75
|
CVE-2026-104189 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for N | |
|
68
|
CVE-2026-13035 |
8.8 | 0.0035 | NET NO AUTH LOW CX | Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allo | |
|
68
|
CVE-2026-14108 |
8.8 | 0.0035 | NET NO AUTH LOW CX | Use after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remot | |
|
68
|
CVE-2026-76298 |
8.8 | 0.0035 | NET LOW CX NO UI | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold | |
|
68
|
CVE-2026-114621 |
8.8 | 0.0035 | NET LOW CX NO UI | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and | |
|
67
|
CVE-2026-18359 |
8.5 | 0.0035 | NET LOW CX NO UI | Server-side request forgery in the METS and IIIF import URI handling in Scripta | |
|
67
|
CVE-2023-54348 |
8.7 | 0.0035 | NET LOW CX NO UI | ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated | |
|
67
|
CVE-2026-62455 |
8.3 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
66
|
CVE-2026-44260 |
8.1 | 0.0035 | NET LOW CX NO UI | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag | |
|
66
|
CVE-2026-48060 |
8.1 | 0.0035 | NET NO AUTH LOW CX | Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to | |
|
66
|
CVE-2026-87309 |
8.1 | 0.0035 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
66
|
CVE-2026-92287 |
8.1 | 0.0035 | NET NO AUTH LOW CX | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and Py | |
|
65
|
CVE-2026-46987 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
65
|
CVE-2026-60586 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
65
|
CVE-2026-60683 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Process Manufacturing Regulatory Management product | |
|
65
|
CVE-2026-60690 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
64
|
CVE-2026-35210 |
7.1 | 0.0035 | NET LOW CX NO UI | OpenCTI is an open source platform for managing cyber threat intelligence knowle | |
|
64
|
CVE-2026-114042 |
7.1 | 0.0035 | NET NO AUTH LOW CX | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel th | |
|
64
|
CVE-2026-114046 |
7.1 | 0.0035 | NET NO AUTH LOW CX | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard | |
|
64
|
CVE-2026-114665 |
7.1 | 0.0035 | NET LOW CX NO UI | Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /depl | |
|
57
|
CVE-2026-54320 |
8.4 | 0.0035 | NET NO UI | Daytona is a secure and elastic infrastructure runtime for AI-generated code exe | |
|
56
|
CVE-2026-46796 |
8.0 | 0.0035 | NET LOW CX | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
56
|
CVE-2026-60652 |
8.0 | 0.0035 | NET LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
56
|
CVE-2026-60807 |
8.0 | 0.0035 | NET LOW CX | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite | |
|
55
|
CVE-2026-45145 |
7.5 | 0.0035 | NET NO UI | Chamilo LMS is an open-source learning management system. Prior to 2.0.1, `publi | |
|
54
|
CVE-2026-116237 |
9.3 | 0.0035 | NET LOW CX | A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unkno |