Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
rsync < 3.5.0 Path Traversal via Symlink Module Root
Mariner
ClamAV PESpin File Format Processing Integer Overflow Vulnerability
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
Mariner
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
Mariner
CBL-Mariner Releases
ClamAV PDF File Format Processing Memory Corruption Vulnerability
Mariner
CBL-Mariner Releases
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
Mariner
CBL-Mariner Releases
ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
Mariner
CBL-Mariner Releases
ClamAV GPT File Format Processing Memory Corruption Vulnerability
Mariner
CBL-Mariner Releases
rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error
Mariner
ClamAV XAR File Format Processing Memory Corruption Vulnerability
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Command Injection via Multiple Code Paths
Mariner
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
Mariner
CBL-Mariner Releases
rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
Mariner
CBL-Mariner Releases
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.
Mariner
CBL-Mariner Releases
net/sched: taprio: extend minimum interval restriction to entire cycle too
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync
Mariner
rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
Mariner
rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
Mariner
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
Mariner
CBL-Mariner Releases
rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
Mariner
Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Path Traversal Write Escape via --relative Mode
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.