Hunt List
8,540 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-14739 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL stat | |
|
79
|
CVE-2026-59506 |
9.3 | 0.0041 | NET NO AUTH LOW CX NO UI | : Missing Authentication for Critical Function vulnerability in Priority Portal | |
|
78
|
CVE-2026-34285 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
78
|
CVE-2026-34286 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
75
|
CVE-2026-62550 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-62552 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-62554 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-70696 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (compone | |
|
75
|
CVE-2026-70752 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
75
|
CVE-2026-70772 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Su | |
|
75
|
CVE-2026-70777 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite | |
|
75
|
CVE-2026-70799 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SDP Number Portability product of Oracle E-Business | |
|
75
|
CVE-2026-70810 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (compon | |
|
75
|
CVE-2026-70822 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
75
|
CVE-2026-70832 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
75
|
CVE-2026-70889 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70890 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70891 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70896 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
75
|
CVE-2026-70910 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
75
|
CVE-2026-70947 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo | |
|
75
|
CVE-2026-70985 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-70986 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-70987 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-71034 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-71043 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
75
|
CVE-2026-71061 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
75
|
CVE-2026-71107 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
75
|
CVE-2026-71142 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Communications Unified Inventory Management product | |
|
75
|
CVE-2026-71158 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73887 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73907 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73908 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73938 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2025-68320 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: lan966x: Fi | |
|
69
|
CVE-2026-13883 |
9.6 | 0.0041 | NET NO AUTH LOW CX | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13786 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13788 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 | |
|
68
|
CVE-2026-13815 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13898 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed | |
|
68
|
CVE-2026-13899 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
68
|
CVE-2026-13965 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remot | |
|
68
|
CVE-2026-14006 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a r | |
|
68
|
CVE-2026-14067 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 | |
|
68
|
CVE-2026-14086 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 a | |
|
68
|
CVE-2026-14149 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed | |
|
68
|
CVE-2026-14393 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14395 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remo | |
|
68
|
CVE-2026-14403 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14430 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote |