Hunt List
13,844 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2025-11708 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fix | |
|
80
|
CVE-2026-47056 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60217 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60358 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
80
|
CVE-2026-60360 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-60379 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60389 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60644 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-61241 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-70880 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
80
|
CVE-2026-91216 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46857 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
80
|
CVE-2026-46859 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
80
|
CVE-2026-35290 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46876 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46924 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46982 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl | |
|
79
|
CVE-2026-61740 |
9.3 | 0.0051 | NET NO AUTH LOW CX NO UI | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4 | |
|
79
|
CVE-2026-93866 |
9.2 | 0.0051 | NET NO AUTH LOW CX NO UI | An integer overflow vulnerability in the WebSocket connection handling used by W | |
|
78
|
CVE-2026-7821 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0. | |
|
78
|
CVE-2026-55954 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple all | |
|
78
|
CVE-2026-64392 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use | |
|
78
|
CVE-2026-67183 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthent | |
|
78
|
CVE-2026-74892 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in | |
|
78
|
CVE-2026-118689 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in Ovt | |
|
78
|
CVE-2025-34457 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit | |
|
77
|
CVE-2026-111280 |
8.3 | 0.0051 | NET NO AUTH LOW CX NO UI | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7Micro | |
|
77
|
CVE-2026-17485 |
8.2 | 0.0051 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of | |
|
75
|
CVE-2026-54427 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote | |
|
75
|
CVE-2026-78066 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple | |
|
75
|
CVE-2026-79704 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | An out-of-bounds read vulnerability exists in the streaming RPC client of Apache | |
|
75
|
CVE-2026-63501 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | ag-psd is a JavaScript library for reading and writing Photoshop Document files. | |
|
75
|
CVE-2026-34020 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache O | |
|
75
|
CVE-2026-107630 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin | |
|
68
|
CVE-2026-113280 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2024-9121 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allow | |
|
68
|
CVE-2026-5287 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote | |
|
68
|
CVE-2026-92191 |
8.8 | 0.0051 | NET LOW CX NO UI | Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execu | |
|
68
|
CVE-2026-55723 |
8.7 | 0.0051 | NET LOW CX NO UI | When NGINX Ingress Controller is configured with Custom Resource Definitions (CR | |
|
68
|
CVE-2026-109428 |
8.7 | 0.0051 | NET NO AUTH LOW CX | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability | |
|
67
|
CVE-2026-115642 |
8.3 | 0.0051 | NET LOW CX NO UI | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-T | |
|
65
|
CVE-2026-22356 |
7.5 | 0.0051 | NET NO AUTH | 1 PoC | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP |
|
64
|
CVE-2026-59510 |
7.1 | 0.0051 | NET LOW CX NO UI | AIL Framework contains a path traversal vulnerability in its PDF object handling | |
|
64
|
CVE-2026-65316 |
7.1 | 0.0051 | NET LOW CX NO UI | XXL-Job version 2.4.2 contains an insecure direct object reference vulnerability | |
|
60
|
CVE-2026-5959 |
7.5 | 0.0051 | NET LOW CX NO UI | A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL | |
|
59
|
CVE-2026-74031 |
7.0 | 0.0051 | NET LOW CX NO UI | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the de | |
|
55
|
CVE-2026-50379 |
7.5 | 0.0051 | NET NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
55
|
CVE-2026-56648 |
7.5 | 0.0051 | NET NO UI | Time-of-check time-of-use (toctou) race condition in Windows Network File System | |
|
55
|
CVE-2026-58531 |
7.5 | 0.0051 | NET NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
55
|
CVE-2026-69804 |
7.5 | 0.0051 | NET NO UI | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint |