Hunt List
8,537 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-35546 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This | |
|
80
|
CVE-2026-39873 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2026-43694 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2026-43710 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2026-43748 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | An out-of-bounds write issue was addressed with improved bounds checking. This i | |
|
80
|
CVE-2026-43764 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | An integer overflow was addressed with improved input validation. This issue is | |
|
80
|
CVE-2026-43773 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | An out-of-bounds read was addressed with improved bounds checking. This issue is | |
|
80
|
CVE-2026-43793 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | An issue existed in the handling of environment variables. This issue was addres | |
|
80
|
CVE-2026-64694 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | An integer overflow was addressed with improved input validation. This issue is | |
|
80
|
CVE-2026-64697 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2026-64698 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2026-64704 |
9.8 | 0.0059 | NET NO AUTH LOW CX NO UI | A type confusion issue was addressed with improved memory handling. This issue i | |
|
80
|
CVE-2024-42360 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user in | |
|
80
|
CVE-2026-116512 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | The Project Manager – AI Powered Project Management, Task Management, Kanban Boa | |
|
80
|
CVE-2025-62025 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch | |
|
79
|
CVE-2026-69703 |
9.3 | 0.0059 | NET NO AUTH LOW CX NO UI | Atlas-Livre contains an improper access control vulnerability in the admin contr | |
|
79
|
CVE-2026-59873 |
9.2 | 0.0058 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, nod | |
|
79
|
CVE-2026-111643 |
9.3 | 0.0058 | NET NO AUTH LOW CX NO UI | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerabilit | |
|
78
|
CVE-2026-34191 |
9.1 | 0.0059 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
78
|
CVE-2026-53779 |
8.7 | 0.0059 | NET NO AUTH LOW CX NO UI | WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows | |
|
78
|
CVE-2026-53434 |
9.1 | 0.0059 | NET NO AUTH LOW CX NO UI | Detection of Error Condition Without Action vulnerability in Apache Tomcat when | |
|
78
|
CVE-2026-97555 |
8.8 | 0.0058 | NET NO AUTH LOW CX | 1 PoC | In the Linux kernel, the following vulnerability has been resolved: smb: client |
|
78
|
CVE-2026-47138 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | Parse Server is an open source backend that can be deployed to any infrastructur | |
|
78
|
CVE-2026-55574 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | vLLM is a high-throughput and memory-efficient inference and serving engine for | |
|
78
|
CVE-2026-63252 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fai | |
|
78
|
CVE-2026-56770 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vec | |
|
78
|
CVE-2026-65052 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input | |
|
77
|
CVE-2026-58177 |
8.3 | 0.0059 | NET NO AUTH LOW CX NO UI | The Apache Traffic Server Cripts framework has out-of-bounds writes, path traver | |
|
77
|
CVE-2026-5423 |
8.2 | 0.0059 | NET NO AUTH LOW CX NO UI | @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity o | |
|
75
|
CVE-2026-19654 |
7.5 | 0.0059 | NET NO AUTH LOW CX NO UI | A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the op | |
|
75
|
CVE-2026-59869 |
7.5 | 0.0059 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and fro | |
|
75
|
CVE-2026-43101 |
7.5 | 0.0059 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: | |
|
75
|
CVE-2026-32210 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an | |
|
75
|
CVE-2026-40006 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Memory Allocation with Excessive Size Value, Allocation of Resources Without Lim | |
|
75
|
CVE-2026-82987 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | There exists a screen capture endpoint in vCast media streaming service in ViewS | |
|
75
|
CVE-2026-33258 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | By publishing and querying a crafted zone an attacker can cause allocation of la | |
|
75
|
CVE-2026-52192 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
|
75
|
CVE-2026-27779 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values | |
|
75
|
CVE-2026-68005 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a d | |
|
75
|
CVE-2026-65442 |
7.2 | 0.0058 | NET NO AUTH LOW CX NO UI | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versio | |
|
75
|
CVE-2023-25957 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All ve | |
|
68
|
CVE-2026-85890 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker t | |
|
68
|
CVE-2026-85897 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor | |
|
68
|
CVE-2026-96198 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor | |
|
68
|
CVE-2026-96199 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor | |
|
68
|
CVE-2026-96203 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke | |
|
68
|
CVE-2026-70098 |
8.8 | 0.0058 | NET NO AUTH LOW CX | Missing authorization in Visual Studio Code allows an unauthorized attacker to e | |
|
68
|
CVE-2026-85268 |
8.7 | 0.0058 | NET NO AUTH LOW CX | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Googl | |
|
66
|
CVE-2026-89848 |
8.1 | 0.0059 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x | |
|
65
|
CVE-2026-96222 |
7.4 | 0.0059 | NET NO AUTH NO UI | Improper certificate validation in Active Directory Federation Services (AD FS) |