Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,536 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
sched/deadline: Fix warning in migrate_enable for boosted tasks
Mariner
Denial of service via exponential certificate policy tree growth in path validation
Mariner
CBL-Mariner Releases
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Mariner
CBL-Mariner Releases
epmd permanent DoS via EMFILE on accept(2) in erts
Mariner
CBL-Mariner Releases
In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Mariner
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
Mariner
CBL-Mariner Releases
KVM: arm64: Disassociate vcpus from redistributor region on teardown
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
netfilter: ebtables: module names must be null-terminated
Mariner
CBL-Mariner Releases
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
https://nvd.nist.gov/vuln/detail/CVE-2025-37795
kernel
SUNRPC: lock against ->sock changing during sysfs read
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Stack Exhaustion In Tensorflow Serving
Mariner
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
smb: client: fix query directory replay double-free
Mariner
CBL-Mariner Releases
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Mariner
PDO::quote() may return unquoted string
Mariner
i2c: core: fix adapter deregistration race
Mariner
CBL-Mariner Releases
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Mariner
CBL-Mariner Releases
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Mariner
yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code.
Mariner
crypto: drbg - Fix returning success on failure in CTR_DRBG
Mariner
CBL-Mariner Releases
Bluetooth: HCI: Remove HCI_AMP support
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Stack overflow in phar with circular symlinks
Mariner
CBL-Mariner Releases
x86/bugs: Enable IBPB flush on BPF JIT allocation
Mariner
CBL-Mariner Releases
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.