Hunt List
8,537 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-40492 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | SAIL is a cross-platform library for loading and saving images with support for | |
|
80
|
CVE-2026-45083 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | The Goobi viewer is a web application that allows digitised material to be displ | |
|
80
|
CVE-2025-65358 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vu | |
|
80
|
CVE-2026-112862 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants D | |
|
80
|
CVE-2026-112853 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallel | |
|
80
|
CVE-2026-112857 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo a | |
|
80
|
CVE-2026-115968 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Memb | |
|
80
|
CVE-2026-119526 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows O | |
|
80
|
CVE-2026-39738 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp | |
|
79
|
CVE-2026-47172 |
9.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Quest Bot is an opensource modern Discord Bot built for moderation, utilities an | |
|
78
|
CVE-2026-54209 |
8.9 | 0.0041 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox application handles password changes us | |
|
78
|
CVE-2026-68586 |
9.2 | 0.0041 | NET NO AUTH LOW CX NO UI | SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc | |
|
78
|
CVE-2026-63158 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnera | |
|
78
|
CVE-2026-47171 |
8.8 | 0.0041 | NET NO AUTH LOW CX NO UI | Quest Bot is an opensource modern Discord Bot built for moderation, utilities an | |
|
77
|
CVE-2015-20123 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vu | |
|
77
|
CVE-2015-20125 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vu | |
|
77
|
CVE-2026-43760 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | An access issue was addressed with improved access restrictions. This issue is f | |
|
77
|
CVE-2026-115347 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerabilit | |
|
77
|
CVE-2026-44232 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | DSSRF is a Node.js library that provides a wide range of utilities and advanced | |
|
77
|
CVE-2026-85612 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery v | |
|
77
|
CVE-2026-116741 |
8.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in | |
|
77
|
CVE-2026-63637 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuo | |
|
76
|
CVE-2014-125136 |
8.2 | 0.0041 | NET NO AUTH LOW CX NO UI | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engin | |
|
76
|
CVE-2026-47046 |
8.2 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the RDBMS component of Oracle Database Server. Supported versi | |
|
76
|
CVE-2026-91252 |
8.2 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Servic | |
|
75
|
CVE-2026-111805 |
7.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool vi | |
|
75
|
CVE-2026-111808 |
7.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool vi | |
|
75
|
CVE-2026-34646 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2 | |
|
75
|
CVE-2026-96365 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Web | |
|
75
|
CVE-2026-79894 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI prot | |
|
75
|
CVE-2026-93855 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL I | |
|
75
|
CVE-2026-119188 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Forge (also called node-forge) is a native implementation of Transport Layer Sec | |
|
75
|
CVE-2026-119202 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | @hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Co | |
|
75
|
CVE-2026-28929 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | A logic issue was addressed with improved checks. This issue is fixed in iOS 18. | |
|
75
|
CVE-2026-54059 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bi | |
|
75
|
CVE-2026-57486 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | pupnp is an SDK for development of UPnP device and control point applications. P | |
|
75
|
CVE-2026-57487 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | pupnp is an SDK for development of UPnP device and control point applications. P | |
|
75
|
CVE-2026-0828 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versi | |
|
75
|
CVE-2026-91542 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-91552 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
74
|
CVE-2026-120114 |
7.2 | 0.0041 | NET NO AUTH LOW CX NO UI | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordP | |
|
68
|
CVE-2026-40316 |
8.8 | 0.0041 | NET NO AUTH LOW CX | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses | |
|
67
|
CVE-2026-27928 |
8.7 | 0.0041 | NET NO AUTH NO UI | Improper input validation in Windows Hello allows an unauthorized attacker to by | |
|
66
|
CVE-2026-47423 |
8.2 | 0.0041 | NET NO AUTH LOW CX | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG | |
|
66
|
CVE-2026-101771 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
66
|
CVE-2026-101772 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
64
|
CVE-2026-63184 |
7.1 | 0.0041 | NET NO AUTH LOW CX | Refitter is a tool for generating a C# REST API client using the Refit library. | |
|
64
|
CVE-2026-115580 |
7.1 | 0.0041 | NET NO AUTH LOW CX | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an att | |
|
64
|
CVE-2026-115585 |
7.1 | 0.0041 | NET NO AUTH LOW CX | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an inc | |
|
55
|
CVE-2025-13016 |
7.5 | 0.0041 | NET NO AUTH | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vul |