Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
netfilter: nft_tunnel: fix use-after-free on object destroy
Mariner
CBL-Mariner Releases
drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
Mariner
CBL-Mariner Releases
fuse: reject fuse_notify() pagecache ops on directories
Mariner
CBL-Mariner Releases
Bluetooth: serialize accept_q access
Mariner
CBL-Mariner Releases
drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
Mariner
CBL-Mariner Releases
Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
Mariner
CBL-Mariner Releases
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
Mariner
CBL-Mariner Releases
Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
Mariner
CBL-Mariner Releases
ipv6: sit: reload inner IPv6 header after GSO offloads
Mariner
CBL-Mariner Releases
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
Mariner
CBL-Mariner Releases
gpio: mvebu: fix NULL pointer dereference in suspend/resume
Mariner
CBL-Mariner Releases
thunderbolt: Clamp XDomain response data copy to allocation size
Mariner
CBL-Mariner Releases
Bluetooth: MGMT: validate advertising TLV before type checks
Mariner
CBL-Mariner Releases
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
Mariner
CBL-Mariner Releases
thunderbolt: Bound root directory content to block size
Mariner
CBL-Mariner Releases
ipv6: mcast: Fix use-after-free when processing MLD queries
Mariner
CBL-Mariner Releases
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
Mariner
CBL-Mariner Releases
ipc: limit next_id allocation to the valid ID range
Mariner
CBL-Mariner Releases
vsock/vmci: fix sk_ack_backlog leak on failed handshake
Mariner
CBL-Mariner Releases
thunderbolt: Reject zero-length property entries in validator
Mariner
CBL-Mariner Releases
sctp: purge outqueue on stale COOKIE-ECHO handling
Mariner
CBL-Mariner Releases
gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion
Mariner
CBL-Mariner Releases
thunderbolt: Limit XDomain response copy to actual frame size
Mariner
CBL-Mariner Releases
thunderbolt: Validate XDomain request packet size before type cast
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.