Hunt List
13,050 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-40492 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | SAIL is a cross-platform library for loading and saving images with support for | |
|
80
|
CVE-2026-45083 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | The Goobi viewer is a web application that allows digitised material to be displ | |
|
78
|
CVE-2026-54209 |
8.9 | 0.0041 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox application handles password changes us | |
|
77
|
CVE-2026-115347 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerabilit | |
|
75
|
CVE-2026-34646 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2 | |
|
75
|
CVE-2026-96365 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Web | |
|
75
|
CVE-2026-79894 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI prot | |
|
75
|
CVE-2026-93855 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | The SendPress Newsletters plugin for WordPress is vulnerable to time-based SQL I | |
|
75
|
CVE-2026-119188 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | Forge (also called node-forge) is a native implementation of Transport Layer Sec | |
|
75
|
CVE-2026-119202 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | @hapi/content provides HTTP Content-* header parsing. From 3.0.6 until 6.0.3, Co | |
|
70
|
CVE-2026-46838 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46847 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46854 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
70
|
CVE-2026-46895 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
70
|
CVE-2026-46907 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle | |
|
70
|
CVE-2026-46908 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle | |
|
70
|
CVE-2026-46918 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Process Manufacturing Product Development product of | |
|
70
|
CVE-2026-46933 |
9.9 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su | |
|
69
|
CVE-2026-55518 |
9.6 | 0.0041 | NET LOW CX NO UI | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32. | |
|
68
|
CVE-2026-40316 |
8.8 | 0.0041 | NET NO AUTH LOW CX | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses | |
|
68
|
CVE-2026-35299 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
68
|
CVE-2026-35303 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
68
|
CVE-2026-35311 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
68
|
CVE-2026-35315 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-35317 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-35322 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-35325 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-46886 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
68
|
CVE-2026-46929 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite ( | |
|
68
|
CVE-2026-46931 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Busi | |
|
68
|
CVE-2026-46937 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component | |
|
68
|
CVE-2026-46940 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite ( | |
|
68
|
CVE-2026-46942 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Process Manufacturing Process Planning product of Or | |
|
68
|
CVE-2026-46947 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Busi | |
|
68
|
CVE-2026-46950 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Busi | |
|
68
|
CVE-2026-46951 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen | |
|
68
|
CVE-2026-46961 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Busin | |
|
68
|
CVE-2026-46962 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Busin | |
|
68
|
CVE-2026-46965 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Su | |
|
68
|
CVE-2026-46973 |
8.8 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Or | |
|
68
|
CVE-2026-61645 |
9.1 | 0.0041 | NET LOW CX NO UI | Docat is a tool for hosting versioned static documentation. In the affected impl | |
|
68
|
CVE-2026-113779 |
8.8 | 0.0041 | NET LOW CX NO UI | The pfSense REST API package is an unofficial, open-source REST and GraphQL API | |
|
64
|
CVE-2026-66398 |
9.4 | 0.0041 | NET LOW CX NO UI | phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the con | |
|
64
|
CVE-2026-54528 |
7.1 | 0.0041 | NET LOW CX NO UI | JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-gi | |
|
64
|
CVE-2026-54798 |
7.1 | 0.0041 | NET LOW CX NO UI | A vulnerability has been identified in CPCI85 Central Processing/Communication ( | |
|
64
|
CVE-2026-63184 |
7.1 | 0.0041 | NET NO AUTH LOW CX | Refitter is a tool for generating a C# REST API client using the Refit library. | |
|
62
|
CVE-2026-44543 |
8.7 | 0.0041 | NET LOW CX NO UI | Local Path Provisioner provides a way for the Kubernetes users to utilize the lo | |
|
55
|
CVE-2025-13016 |
7.5 | 0.0041 | NET NO AUTH | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vul | |
|
55
|
CVE-2026-42520 |
7.5 | 0.0041 | NET NO UI | Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanit | |
|
44
|
CVE-2026-104875 |
7.1 | 0.0041 | NET | Ente provides end-to-end encrypted cloud services and security tools. Prior to s |