Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Read with libsodium-encrypted Files
Mariner
CBL-Mariner Releases
Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`
Mariner
CBL-Mariner Releases
Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247
Mariner
CBL-Mariner Releases
Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type
Mariner
CBL-Mariner Releases
Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes
Mariner
CBL-Mariner Releases
Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime
Mariner
CBL-Mariner Releases
Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception
Mariner
CBL-Mariner Releases
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
Mariner
CBL-Mariner Releases
Nokogiri: Possible Use-After-Free in XInclude Processing
Mariner
CBL-Mariner Releases
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
Mariner
CBL-Mariner Releases
libslirp TCP URG OOB Read Information Leak
Mariner
CBL-Mariner Releases
WebOb: Location header normalization during redirect leads to open redirect
Mariner
CBL-Mariner Releases
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally.
Install KB5094125. Install KB5094126. Install KB5095051.
Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies
Mariner
CBL-Mariner Releases
Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation
Mariner
CBL-Mariner Releases
drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
Mariner
CBL-Mariner Releases
batman-adv: clear current gateway during teardown
Mariner
CBL-Mariner Releases
batman-adv: frag: disallow unicast fragment in fragment
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,
Mariner
CBL-Mariner Releases
In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.
Mariner
CBL-Mariner Releases
sctp: stream: fully roll back denied add-stream state
Mariner
CBL-Mariner Releases
sctp: diag: reject stale associations in dump_one path
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.