Hunt List
8,658 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-91665 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
80
|
CVE-2026-108771 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Missing authentication for in-house broadcast and polymorphic deserialization vu | |
|
80
|
CVE-2026-8402 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-4321 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-13020 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal | |
|
80
|
CVE-2026-8307 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-5955 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-8297 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-1617 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-2395 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2026-64691 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | A buffer overflow was addressed with improved size validation. This issue is fix | |
|
80
|
CVE-2026-4978 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an SQL command ('SQL injecti | |
|
80
|
CVE-2025-55787 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerabili | |
|
78
|
CVE-2026-16359 |
9.1 | 0.0047 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerabil | |
|
77
|
CVE-2026-55768 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | GoAccess is a real-time web log analyzer and interactive viewer that runs in a t | |
|
77
|
CVE-2026-15803 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | In Eclipse RDF4J, several XML parser entry points do not fully restrict XML Exte | |
|
77
|
CVE-2026-32689 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in phoenixfra | |
|
77
|
CVE-2018-25439 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /inclu | |
|
76
|
CVE-2026-111756 |
8.2 | 0.0047 | NET NO AUTH LOW CX NO UI | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically f | |
|
75
|
CVE-2026-44974 |
7.7 | 0.0047 | NET NO AUTH LOW CX NO UI | @hapi/content provided HTTP Content-* headers parsing. Prior to 6.0.2, Content.d | |
|
75
|
CVE-2026-11806 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected | |
|
75
|
CVE-2026-48812 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | FreeScout is a free help desk and shared inbox built with PHP's Laravel framewor | |
|
75
|
CVE-2026-76288 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unau | |
|
75
|
CVE-2026-63088 |
7.7 | 0.0047 | NET NO AUTH LOW CX NO UI | stoatchat before 0.14.0 contains a server-side request forgery (SSRF) vulnerabil | |
|
75
|
CVE-2026-24175 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where an attacker could | |
|
75
|
CVE-2026-51604 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3. | |
|
75
|
CVE-2026-51605 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3. | |
|
75
|
CVE-2026-47018 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
75
|
CVE-2026-47057 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Java SE (component: Scripting). Supported versions that | |
|
75
|
CVE-2026-60180 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
75
|
CVE-2026-60252 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-60301 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-60314 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
75
|
CVE-2026-60382 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
75
|
CVE-2026-60425 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-60436 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
75
|
CVE-2026-70908 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-70927 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
75
|
CVE-2026-73882 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-53587 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | libgit2 is a portable C implementation of the Git core methods provided as a lin | |
|
75
|
CVE-2026-41565 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four A | |
|
75
|
CVE-2026-14899 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | The code to parse MIME headers for display when forwarding a message (if the set | |
|
68
|
CVE-2026-103693 |
9.0 | 0.0047 | NET NO AUTH NO UI | The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plu | |
|
68
|
CVE-2026-78376 |
8.8 | 0.0047 | NET NO AUTH LOW CX | A flaw was found in WebKitGTK. Processing malicious web content can cause a use- | |
|
68
|
CVE-2026-113148 |
8.8 | 0.0047 | NET NO AUTH LOW CX | Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113217 |
8.8 | 0.0047 | NET NO AUTH LOW CX | Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8 | |
|
66
|
CVE-2026-57818 |
8.1 | 0.0047 | NET NO AUTH NO UI | A race condition in JCacheCodeDataProvider allows an attacker to redeem a single | |
|
66
|
CVE-2026-4773 |
8.1 | 0.0047 | NET NO AUTH LOW CX | Improper validation of specified type of input vulnerability in Magarsus Consult | |
|
65
|
CVE-2026-118205 |
7.4 | 0.0047 | NET NO AUTH NO UI | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugi | |
|
64
|
CVE-2026-115354 |
7.1 | 0.0047 | NET NO AUTH LOW CX | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Inclu |