Hunt List
8,547 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
78
|
CVE-2026-46784 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
78
|
CVE-2026-60267 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
78
|
CVE-2026-60326 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
78
|
CVE-2026-60438 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com | |
|
78
|
CVE-2026-60567 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
78
|
CVE-2026-60606 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product | |
|
78
|
CVE-2026-60649 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
78
|
CVE-2026-61059 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracl | |
|
78
|
CVE-2026-61153 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-61156 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search Platform Services product of | |
|
78
|
CVE-2026-61171 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
78
|
CVE-2026-61184 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
78
|
CVE-2026-61197 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
78
|
CVE-2026-61238 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product | |
|
78
|
CVE-2026-61244 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product o | |
|
78
|
CVE-2026-60737 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middle | |
|
78
|
CVE-2026-61008 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
78
|
CVE-2026-62610 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
78
|
CVE-2026-70668 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
78
|
CVE-2026-70741 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
78
|
CVE-2026-70862 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
78
|
CVE-2026-70872 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
78
|
CVE-2026-70978 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-71014 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-71015 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-71026 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-71036 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
78
|
CVE-2026-73865 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
78
|
CVE-2026-73866 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
78
|
CVE-2026-73916 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
78
|
CVE-2026-73917 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
78
|
CVE-2026-73922 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
78
|
CVE-2026-73924 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
76
|
CVE-2026-117610 |
8.2 | 0.0043 | NET NO AUTH LOW CX NO UI | libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in exte | |
|
75
|
CVE-2026-1989 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Authorization bypass through User-Controlled key vulnerability in PAVO Financial | |
|
75
|
CVE-2026-16384 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Information disclosure due to uninitialized memory in the Graphics: WebGPU compo | |
|
75
|
CVE-2026-16385 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Information disclosure due to uninitialized memory in the Graphics: WebGPU compo | |
|
75
|
CVE-2026-16386 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Information disclosure due to uninitialized memory in the Graphics: WebGPU compo | |
|
75
|
CVE-2026-16400 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Information disclosure in the DOM: Security component. This vulnerability was fi | |
|
75
|
CVE-2026-119197 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decodi | |
|
75
|
CVE-2026-119196 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT ST | |
|
69
|
CVE-2026-13781 |
9.6 | 0.0043 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150 | |
|
68
|
CVE-2026-113187 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote a | |
|
68
|
CVE-2026-113188 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113256 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113257 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113282 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowe | |
|
68
|
CVE-2026-113285 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113344 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113264 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 |