Hunt List
8,661 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-35307 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-35308 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46803 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-35304 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46845 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46884 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
80
|
CVE-2026-46887 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
80
|
CVE-2026-46889 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
80
|
CVE-2026-16184 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to b | |
|
80
|
CVE-2026-76474 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-46778 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
80
|
CVE-2026-46781 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
80
|
CVE-2026-35309 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46766 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46799 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46813 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46860 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
80
|
CVE-2026-46881 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46882 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46883 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46902 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
80
|
CVE-2026-46904 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-91214 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91233 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91234 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91235 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91236 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-86384 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
79
|
CVE-2026-32661 |
9.3 | 0.0047 | NET NO AUTH LOW CX NO UI | Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and G | |
|
78
|
CVE-2026-44126 |
9.2 | 0.0047 | NET NO AUTH LOW CX NO UI | SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untr | |
|
77
|
CVE-2026-56238 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | Capgo before 12.128.2 contains an information disclosure vulnerability in the Su | |
|
77
|
CVE-2026-114141 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml | |
|
77
|
CVE-2026-114143 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.par | |
|
77
|
CVE-2026-102558 |
8.6 | 0.0047 | NET NO AUTH LOW CX NO UI | A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), So | |
|
76
|
CVE-2026-33946 |
8.2 | 0.0047 | NET NO AUTH LOW CX NO UI | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and cli | |
|
75
|
CVE-2026-56852 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A norm.Iter can enter an infinite loop when handling input containing invalid UT | |
|
75
|
CVE-2026-120194 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_qu | |
|
75
|
CVE-2026-10852 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty ar | |
|
75
|
CVE-2026-44025 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Fluentd collects events from various data sources and writes them to files, RDBM | |
|
75
|
CVE-2026-101679 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
75
|
CVE-2026-115721 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vys | |
|
75
|
CVE-2026-58011 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the | |
|
74
|
CVE-2026-0264 |
7.2 | 0.0047 | NET NO AUTH LOW CX NO UI | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo | |
|
69
|
CVE-2026-46856 |
9.6 | 0.0047 | NET NO AUTH LOW CX | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
69
|
CVE-2026-59891 |
9.6 | 0.0047 | NET NO AUTH LOW CX | sigstore-js provides JavaScript libraries for interacting with Sigstore services | |
|
68
|
CVE-2026-50191 |
8.8 | 0.0047 | NET NO AUTH LOW CX | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4g | |
|
68
|
CVE-2026-115895 |
8.8 | 0.0047 | NET NO AUTH LOW CX | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
66
|
CVE-2026-96228 |
8.1 | 0.0047 | NET NO AUTH NO UI | SSL Wireless SMS Notification for WordPress is vulnerable to Authentication Bypa | |
|
65
|
CVE-2026-42011 |
7.4 | 0.0047 | NET NO AUTH NO UI | A flaw was found in gnutls. This vulnerability occurs because permitted name con | |
|
55
|
CVE-2026-114422 |
7.5 | 0.0047 | NET NO AUTH | The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the cla |