Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Packet of death with DNSCrypt
Mariner
CBL-Mariner Releases
Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
Mariner
CBL-Mariner Releases
Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
Mariner
CBL-Mariner Releases
Rsync < 3.4.3 Authorization Bypass via Hostname Resolution
Mariner
CBL-Mariner Releases
Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()
Mariner
CBL-Mariner Releases
Rsync < 3.4.3 Integer Overflow Information Disclosure
Mariner
CBL-Mariner Releases
Unbounded resend loop in BIND 9 resolver
Mariner
CBL-Mariner Releases
SIG(0) validation during query flood may lead to undefined behavior
Mariner
CBL-Mariner Releases
Invalid handling of CLASS != IN
Mariner
CBL-Mariner Releases
Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
Mariner
CBL-Mariner Releases
BIND 9 server memory exhaustion during GSS-API TKEY negotiation
Mariner
CBL-Mariner Releases
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Mariner
CBL-Mariner Releases
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Mariner
CBL-Mariner Releases
Windows DWM Core Library Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Azure SDK for Java Security Feature Bypass Vulnerability
The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted...
Release Notes
x86: shadow stacks: proper error handling for mmap lock
Mariner
gfs2: Prevent recursive memory reclaim
Mariner
x86-64: rename misleadingly named '__copy_user_nocache()' function
Mariner
scsi: imm: Fix use-after-free bug caused by unfinished delayed work
Mariner
ksmbd: require minimum ACE size in smb_check_perm_dacl()
Mariner
ksmbd: validate response sizes in ipc_validate_msg()
Mariner
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()
Mariner
ws: Uninitialized memory disclosure
Mariner
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.