Hunt List
13,415 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2023-54223 |
9.8 | 0.0045 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
79
|
CVE-2026-76932 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76933 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76936 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76937 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-82122 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB S | |
|
79
|
CVE-2026-86575 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects J | |
|
79
|
CVE-2026-86576 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP | |
|
79
|
CVE-2026-56067 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | |
|
79
|
CVE-2026-57702 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-67324 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> | |
|
79
|
CVE-2026-16626 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper restriction of XML external entity reference vulnerability (unauthentic | |
|
78
|
CVE-2026-89292 |
9.2 | 0.0045 | NET NO AUTH LOW CX NO UI | In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was po | |
|
77
|
CVE-2026-114102 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unau | |
|
77
|
CVE-2026-118694 |
8.7 | 0.0045 | NET NO AUTH LOW CX NO UI | python-markdown2 through 2.5.5 contains a denial of service vulnerability that a | |
|
77
|
CVE-2026-54407 |
8.6 | 0.0045 | NET NO AUTH LOW CX NO UI | A malicious actor with access to the network could exploit an Improper Access Co | |
|
76
|
CVE-2026-63567 |
8.2 | 0.0045 | NET NO AUTH LOW CX NO UI | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle | |
|
75
|
CVE-2026-99030 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: skbuff | |
|
75
|
CVE-2026-119290 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Zuke is a code-first, strongly typed build automation system for Deno. Prior to | |
|
75
|
CVE-2026-54737 |
7.3 | 0.0046 | NET NO AUTH LOW CX NO UI | @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preserva | |
|
75
|
CVE-2026-61611 |
7.5 | 0.0045 | NET NO AUTH LOW CX NO UI | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v | |
|
75
|
CVE-2026-40303 |
7.5 | 0.0045 | NET NO AUTH LOW CX NO UI | zrok is software for sharing web services, files, and network resources. Prior t | |
|
70
|
CVE-2026-52782 |
9.9 | 0.0045 | NET LOW CX NO UI | OpenProject is open-source, web-based project management software. Prior to 17.3 | |
|
70
|
CVE-2026-115889 |
9.9 | 0.0045 | NET LOW CX NO UI | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelif | |
|
68
|
CVE-2026-112407 |
8.8 | 0.0046 | NET LOW CX NO UI | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serve | |
|
68
|
CVE-2026-113239 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-92206 |
8.8 | 0.0046 | NET NO AUTH LOW CX | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu | |
|
68
|
CVE-2026-16760 |
8.8 | 0.0046 | NET NO AUTH LOW CX | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle | |
|
68
|
CVE-2023-22648 |
8.8 | 0.0045 | NET LOW CX NO UI | A Improper Privilege Management vulnerability in SUSE Rancher causes permission | |
|
68
|
CVE-2026-53915 |
8.8 | 0.0045 | NET NO AUTH LOW CX | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untru | |
|
68
|
CVE-2026-16418 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a r | |
|
68
|
CVE-2026-17935 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a | |
|
68
|
CVE-2026-113243 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Information leak in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113249 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.4 | |
|
68
|
CVE-2026-113320 |
8.8 | 0.0045 | NET NO AUTH LOW CX | UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.807 | |
|
67
|
CVE-2026-54202 |
8.5 | 0.0045 | NET LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vuln | |
|
67
|
CVE-2026-25654 |
8.7 | 0.0045 | NET LOW CX NO UI | A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3). Affe | |
|
67
|
CVE-2026-15810 |
8.7 | 0.0045 | NET NO AUTH LOW CX | A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior | |
|
66
|
CVE-2026-110675 |
8.1 | 0.0045 | NET LOW CX NO UI | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 | |
|
66
|
CVE-2026-110684 |
8.1 | 0.0045 | NET LOW CX NO UI | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retai | |
|
66
|
CVE-2026-98130 |
8.1 | 0.0045 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: fix a | |
|
65
|
CVE-2026-12581 |
7.7 | 0.0045 | NET NO AUTH LOW CX | EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unau | |
|
65
|
CVE-2026-62354 |
7.7 | 0.0045 | NET LOW CX NO UI | Authorization handling for Parameter Context validation requests in Apache NiFi | |
|
65
|
CVE-2026-96778 |
7.7 | 0.0045 | NET NO AUTH LOW CX | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() | |
|
65
|
CVE-2026-65219 |
7.4 | 0.0045 | NET NO AUTH NO UI | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request f | |
|
64
|
CVE-2026-47397 |
7.1 | 0.0046 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadat | |
|
64
|
CVE-2026-47682 |
7.1 | 0.0045 | NET LOW CX NO UI | CVAT is an open source interactive video and image annotation tool for computer | |
|
63
|
CVE-2026-46944 |
9.1 | 0.0045 | NET LOW CX NO UI | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (compone | |
|
58
|
CVE-2026-114140 |
8.8 | 0.0046 | NET LOW CX | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various oth | |
|
57
|
CVE-2026-54498 |
8.7 | 0.0045 | NET LOW CX | view_component is a framework for building reusable, testable, and encapsulated |