Hunt List
8,540 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
78
|
CVE-2021-48012 |
8.8 | 0.0041 | NET NO AUTH LOW CX NO UI | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows | |
|
77
|
CVE-2026-112200 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RP | |
|
77
|
CVE-2026-60327 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60356 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60359 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
77
|
CVE-2026-60536 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
77
|
CVE-2026-60550 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-60559 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60699 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-61228 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-61230 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-62535 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
77
|
CVE-2026-62586 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (com | |
|
77
|
CVE-2026-62599 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite | |
|
77
|
CVE-2026-62620 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
77
|
CVE-2026-62628 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
77
|
CVE-2026-70996 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
77
|
CVE-2026-64645 |
8.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Next.js is a React framework for building full-stack web applications. In versio | |
|
75
|
CVE-2026-40776 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions. | |
|
75
|
CVE-2026-46791 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-35287 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
75
|
CVE-2026-60170 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
75
|
CVE-2026-60263 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-60320 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-60605 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle | |
|
75
|
CVE-2026-60622 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp | |
|
75
|
CVE-2026-60689 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
75
|
CVE-2026-60704 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
75
|
CVE-2026-61026 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (com | |
|
75
|
CVE-2026-61073 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of | |
|
75
|
CVE-2026-61085 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Inventory product of Oracle Peopl | |
|
75
|
CVE-2026-61086 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracl | |
|
75
|
CVE-2026-61087 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle People | |
|
75
|
CVE-2026-61088 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle P | |
|
75
|
CVE-2026-61157 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-61158 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-61172 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
75
|
CVE-2026-61232 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of | |
|
75
|
CVE-2026-61236 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of | |
|
75
|
CVE-2026-61309 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries pr | |
|
75
|
CVE-2026-62521 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon | |
|
75
|
CVE-2026-60391 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
75
|
CVE-2026-60590 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
75
|
CVE-2026-60850 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-60889 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-60906 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-60914 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-61007 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-85818 |
9.0 | 0.0041 | NET NO AUTH NO UI | Improper verification of cryptographic signature in Windows Schannel allows an u | |
|
57
|
CVE-2026-13834 |
8.3 | 0.0041 | NET NO AUTH | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15 |