Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization
Mariner
Release Notes
Librsvg: use-after-free when xml includes have duplicated entities
Mariner
Release Notes
Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN
Mariner
Release Notes
SOAP: Unbounded Recursion in Server-Side cleanup_xml_node
Mariner
Release Notes
Cross-origin credential leak in HTTP stream wrapper redirects
Mariner
Release Notes
Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header
Mariner
Release Notes
Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write
Mariner
Release Notes
Integer overflow to buffer overflow in soap HTTP parsing
Mariner
Release Notes
TLS Hostname Verification Falls Back to CN After SAN Mismatch
Mariner
Release Notes
zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits
Mariner
Release Notes
Various packet overreads in mysqlnd_writeprotocol.c
Mariner
Release Notes
stringprep.map_table_b2() deviates from RFC 3454 Table B.2
Mariner
Release Notes
Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection
Mariner
Release Notes
OOB read / info leak in convert.* stream filters when line-break-chars contains NUL
Mariner
Release Notes
IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)
Mariner
Release Notes
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.
Mariner
Release Notes
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM
Mariner
Release Notes
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.
Mariner
CBL-Mariner Releases Release Notes
Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu
Mariner
Release Notes
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
Mariner
CBL-Mariner Releases Release Notes
Integer overflow causes an infinite loop in packet buffer growth in PgBouncer
Mariner
Release Notes
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Mariner
CBL-Mariner Releases Release Notes
NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer
Mariner
Release Notes
Conda: Entry-point path traversal in noarch:python install (arbitrary file write) - canonical Python implementation
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.