Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape
Mariner
Release Notes
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
Mariner
Release Notes
RabbitMQ: Consecutive topic wildcards cause combinatorial routing work
Mariner
Release Notes
Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources
Mariner
CBL-Mariner Releases Release Notes
drm/amdkfd: Don't call mmput from MMU notifier callback
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
rxrpc: Fix bug due to prealloc collision
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
iio: common: st_sensors: Fix use of uninitialize device structs
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
rxrpc: Fix recv-recv race of completed call
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
Integer overflow causes an infinite loop in message buffer growth in PgBouncer
Mariner
Release Notes
Infinite loop on empty option name in startup options parameter in PgBouncer
Mariner
Release Notes
Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer
Mariner
Release Notes
Blind VXLAN injection into encrypted overlay networks from cluster peer
Mariner
Release Notes
libX11 XkbGetMap Reply Heap-based Buffer Overflow
Mariner
Release Notes
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
Mariner
Release Notes
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
Mariner
Release Notes
OpenSSL pinning bypass
Mariner
Release Notes
HTTP/2 server push UAF
Mariner
Release Notes
OpenLDAP SASL authentication bypass
Mariner
Release Notes
Negotiate ambient user conn reuse
Mariner
Release Notes
Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
Mariner
Release Notes
Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser
Mariner
Release Notes
Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser
Mariner
Release Notes
Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
Mariner
Release Notes
Out-of-bounds read in libX11's byte-oriented codeset parser
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.