Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
X25519 x86_64 assembly final reduction leaves non-canonical field element
Mariner
Wildcard DNS SAN bypasses CA name-constraint checks
Mariner
Partial-chain verification accepts untrusted intermediate as trust anchor
Mariner
Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list
Mariner
Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage
Mariner
X.509 name constraint bypass via Subject CN treated as a DNS name
Mariner
PKCS7_verify signer confusion allows forged signatures to be accepted
Mariner
ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
Mariner
HMAC zero-length tag forgery in EVP_DigestVerifyFinal
Mariner
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData
Mariner
Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info
Mariner
wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer
Mariner
PKCS#12 MAC verification uses attacker-controlled comparison length
Mariner
X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()
Mariner
TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify
Mariner
AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse
Mariner
Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption
Mariner
Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)
Mariner
Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation
Mariner
CRL critical extension bypass in ParseCRL_Extensions
Mariner
iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined
Mariner
Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption
Mariner
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Microsoft Exchange Online Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.