Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,533 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
ipv6: ndisc: fix NULL deref in accept_untracked_na()
Mariner
CBL-Mariner Releases
WCOW cache mount source selector resolves NTFS junctions outside of cache root
Mariner
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
Mariner
CBL-Mariner Releases
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.
Mariner
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Mariner
CBL-Mariner Releases
Helm Files.Lines Denial of Service via Empty Chart Files
Mariner
CBL-Mariner Releases
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
Mariner
CBL-Mariner Releases
iscsiuio control-socket authentication bypass in open-iscsi
Mariner
CBL-Mariner Releases
remote limited file-write as root via discovery in open-iscsi
Mariner
CBL-Mariner Releases
PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
Mariner
CBL-Mariner Releases
PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
Mariner
CBL-Mariner Releases
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Mariner
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for spec...
Cisco has released software updates that address this vulnerability.
xfs: resample the data fork mapping after cycling ILOCK
Mariner
CBL-Mariner Releases
PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS
Mariner
CBL-Mariner Releases
PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes
Mariner
CBL-Mariner Releases
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
Mariner
CBL-Mariner Releases
.NET Spoofing Vulnerability
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Release Notes Install KB5104034. Install KB5104032. Install KB5104033. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB509...
ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Release Notes Install KB5104034. Install KB5104032. Install KB5104033.
libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
Mariner
CBL-Mariner Releases
libssh2 Double-Free Heap Corruption via sftp_open()
Mariner
CBL-Mariner Releases
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
Mariner
CBL-Mariner Releases
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Mariner
LoongArch: Report dying CPU to RCU in stop_this_cpu()
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.