Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,533 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
Mariner
CBL-Mariner Releases
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
Mariner
CBL-Mariner Releases
BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
usb: gadget: f_midi: cancel pending IN work before freeing the midi object
Mariner
CBL-Mariner Releases
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown
Mariner
CBL-Mariner Releases
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Mariner
CBL-Mariner Releases
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
Mariner
CBL-Mariner Releases
gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
Mariner
CBL-Mariner Releases
btrfs: reject free space cache with more entries than pages
Mariner
CBL-Mariner Releases
mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n
Mariner
CBL-Mariner Releases
ipv4: fib: free fib_alias with kfree_rcu() on insert error path
Mariner
CBL-Mariner Releases
Bluetooth: qca: fix NVM tag length underflow in TLV parser
Mariner
CBL-Mariner Releases
wifi: mac80211: tear down new links on vif update error path
Mariner
CBL-Mariner Releases
xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
Mariner
CBL-Mariner Releases
nexthop: initialize extack in nh_res_bucket_migrate()
Mariner
CBL-Mariner Releases
xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert
Mariner
CBL-Mariner Releases
wifi: p54: validate RX frame length in p54_rx_eeprom_readback()
Mariner
CBL-Mariner Releases
ksmbd: validate compound request size before reading StructureSize2
Mariner
CBL-Mariner Releases
KVM: nVMX: Hide shadow VMCS right after VMCLEAR
Mariner
CBL-Mariner Releases
Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()
Mariner
CBL-Mariner Releases
sctp: don't free the ASCONF's own transport in DEL-IP processing
Mariner
CBL-Mariner Releases
KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
Mariner
CBL-Mariner Releases
posix-cpu-timers: Prevent UAF caused by non-leader exec() race
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.