Hunt List
8,568 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-83944 |
10.0 | 0.0044 | NET NO AUTH LOW CX NO UI | Improper access control in Azure Logic Apps allows an unauthorized attacker to e | |
|
80
|
CVE-2026-54133 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | jmespath.php allows users to use JMESPath, software for declaratively specifying | |
|
79
|
CVE-2026-63830 |
9.4 | 0.0044 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: | |
|
79
|
CVE-2026-92812 |
9.3 | 0.0044 | NET NO AUTH LOW CX NO UI | Decap CMS before 3.11.0 contains a path traversal vulnerability in the local pro | |
|
79
|
CVE-2021-48016 |
9.3 | 0.0044 | NET NO AUTH LOW CX NO UI | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMs | |
|
78
|
CVE-2026-7381 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-c | |
|
78
|
CVE-2026-16390 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Enterprise Policies component. This vulnerability was f | |
|
77
|
CVE-2026-40769 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – | |
|
76
|
CVE-2026-60544 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
76
|
CVE-2026-60796 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
76
|
CVE-2026-61302 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
76
|
CVE-2026-70743 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
76
|
CVE-2026-70870 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
76
|
CVE-2026-70909 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
76
|
CVE-2026-70952 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
76
|
CVE-2026-71024 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2025-66769 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attack | |
|
75
|
CVE-2026-49486 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_T | |
|
75
|
CVE-2026-113872 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | multer is a middleware for Node.js that handles multipart/form-data file uploads | |
|
74
|
CVE-2026-44161 |
7.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Fluentd collects events from various data sources and writes them to files, RDBM | |
|
74
|
CVE-2026-109997 |
7.2 | 0.0044 | NET NO AUTH LOW CX NO UI | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & A | |
|
68
|
CVE-2026-113194 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-113195 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 a | |
|
68
|
CVE-2026-113197 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113198 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113206 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113210 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-113213 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113214 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113215 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113236 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 a | |
|
68
|
CVE-2026-113240 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113242 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113244 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113245 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113247 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113248 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113293 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-113312 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113317 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.807 | |
|
68
|
CVE-2026-113323 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078. | |
|
68
|
CVE-2026-113331 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113334 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0 | |
|
68
|
CVE-2026-48704 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 un | |
|
68
|
CVE-2026-48720 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 un | |
|
67
|
CVE-2026-58378 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on product | |
|
66
|
CVE-2025-48090 |
8.1 | 0.0044 | NET NO AUTH NO UI | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPre | |
|
66
|
CVE-2026-118370 |
8.2 | 0.0044 | NET NO AUTH NO UI | libexpat through 2.9.0 contains a signed integer overflow vulnerability in store | |
|
66
|
CVE-2026-58283 |
8.1 | 0.0044 | NET NO AUTH NO UI | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
64
|
CVE-2026-55092 |
7.0 | 0.0044 | NET NO AUTH LOW CX | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifa |