Hunt List
12,910 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-8362 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when | |
|
80
|
CVE-2026-4370 |
10.0 | 0.0039 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from | |
|
80
|
CVE-2024-25182 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. | |
|
80
|
CVE-2024-27480 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. | |
|
79
|
CVE-2026-5387 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | The vulnerability, if exploited, could allow an unauthenticated miscreant to per | |
|
79
|
CVE-2026-39462 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | A vulnerability exists in SenseLive X3050’s web management interface in which pa | |
|
78
|
CVE-2026-115353 |
9.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include | |
|
76
|
CVE-2026-45711 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0 | |
|
75
|
CVE-2026-104596 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplem | |
|
75
|
CVE-2026-46265 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: F | |
|
70
|
CVE-2026-91250 |
9.9 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
70
|
CVE-2026-91251 |
9.9 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
70
|
CVE-2026-91232 |
9.9 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
70
|
CVE-2026-91222 |
9.9 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Business Process Management Suite product of Oracle | |
|
70
|
CVE-2026-54052 |
9.9 | 0.0039 | NET LOW CX NO UI | n8n-MCP is an MCP server that provides AI assistants access to n8n node document | |
|
69
|
CVE-2026-24303 |
9.6 | 0.0039 | NET LOW CX NO UI | Improper certificate validation in Microsoft Partner Center allows an unauthoriz | |
|
69
|
CVE-2026-113788 |
9.4 | 0.0039 | NET LOW CX NO UI | Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.3 | |
|
69
|
CVE-2026-55743 |
9.4 | 0.0039 | NET NO AUTH LOW CX | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agen | |
|
68
|
CVE-2026-35259 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
68
|
CVE-2026-101852 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
68
|
CVE-2026-101853 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
68
|
CVE-2026-101854 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
68
|
CVE-2026-83363 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod | |
|
68
|
CVE-2026-83403 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-87263 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
68
|
CVE-2026-87310 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
68
|
CVE-2026-87313 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
68
|
CVE-2026-87364 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com | |
|
68
|
CVE-2026-91259 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-91270 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
68
|
CVE-2026-91295 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
68
|
CVE-2026-91340 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
68
|
CVE-2026-91499 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the RDBMS component of Oracle Database Server. Supported versi | |
|
68
|
CVE-2026-91520 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
68
|
CVE-2026-91527 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems | |
|
68
|
CVE-2026-91532 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su | |
|
68
|
CVE-2026-91213 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Business Process Management Suite product of Oracle | |
|
68
|
CVE-2026-91215 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
68
|
CVE-2026-91223 |
8.8 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
68
|
CVE-2026-29047 |
8.8 | 0.0039 | NET LOW CX NO UI | GLPI is a free asset and IT management software package. From 10.0.0 to before 1 | |
|
68
|
CVE-2026-113190 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113191 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 al | |
|
66
|
CVE-2026-22166 |
8.1 | 0.0039 | NET LOW CX NO UI | A web page that contains unusual WebGPU content loaded into the GPU GLES render | |
|
66
|
CVE-2026-101665 |
8.1 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
65
|
CVE-2026-20185 |
7.7 | 0.0039 | NET LOW CX NO UI | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of&nb | |
|
65
|
CVE-2026-54329 |
7.7 | 0.0039 | NET LOW CX NO UI | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the Accessori | |
|
64
|
CVE-2026-59805 |
7.1 | 0.0039 | NET LOW CX NO UI | Gumroad before 2026.07.06.2 contains a broken access control vulnerability in th | |
|
59
|
CVE-2026-75828 |
9.3 | 0.0039 | NET LOW CX | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the d | |
|
57
|
CVE-2026-116239 |
8.5 | 0.0039 | NET NO UI | In server mode pgAdmin 4 keeps an account per authentication source, so the same | |
|
39
|
CVE-2026-8727 |
7.1 | 0.0039 | NET | The Crawler extension passes the X-T3Crawler-Meta response header from crawled U |