Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Release Notes
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Release Notes
Global Buffer Overflow in GNU gzip
Mariner
CBL-Mariner Releases
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
Mariner
NGINX ngx_http_charset_module vulnerability
Mariner
CBL-Mariner Releases
HAProxy - Integer Overflow in FCGI Demux Record Length Field
Mariner
CBL-Mariner Releases
HAProxy - NULL Pointer Dereference in hpack_dht_insert Function
Mariner
CBL-Mariner Releases
Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling
Mariner
CBL-Mariner Releases
opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response
Mariner
CBL-Mariner Releases
jqlang jq JSON jq_test.c run_jq_tests assertion
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
Microsoft Entra ID Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.
concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
Mariner
CBL-Mariner Releases
concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
Mariner
CBL-Mariner Releases
radvdump's Route Information Option Parser has a Stack Buffer Overflow
Mariner
CBL-Mariner Releases
Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Read with Text Properties
Mariner
CBL-Mariner Releases
Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Read in Text Property Count
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Write in Spell File Prefix Dump
Mariner
CBL-Mariner Releases
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Write in Spell File Word Count
Mariner
CBL-Mariner Releases
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.