Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
rsync < 3.5.0 Arbitrary File Read via Symlink Following
Mariner
Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
Mariner
CBL-Mariner Releases
rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
Mariner
CBL-Mariner Releases
Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping
Mariner
Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Mariner
CBL-Mariner Releases
Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode
Mariner
Kata Containers: Config Path Annotation Arbitrary File Loading
Mariner
CBL-Mariner Releases
rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
Mariner
CBL-Mariner Releases
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
Mariner
CBL-Mariner Releases
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Symlink Race Condition Directory Traversal
Mariner
rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block
Mariner
Apache Portable Runtime Utility: apr-util XML stack recursion crash
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
Mariner
rsync < 3.5.0 Symlink Race Condition Information Disclosure
Mariner
sigstore-go fails to check signature timestamps against a signing key's validity period
Mariner
CBL-Mariner Releases
rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
Mariner
rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest
Mariner
Netavark: podman: netavark may resolve hostnames to unexpected hosts
Mariner
Grub2: grub allow access to encrypted device through cli once root device is unlocked via tpm
Mariner
USN-8658-2: Linux kernel (IBM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
USN-8661-2: Linux kernel (Low Latency) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - NVME drivers; - Ext4 file system; - SMB network file system; - IPv4 networking; - Network traffic ...
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.