Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
xmldom: XML injection through unvalidated DocumentType serialization
Mariner
xmldom: XML node injection through unvalidated comment serialization
Mariner
Apache Thrift: TSSLTransportFactory.java hostname verification
Mariner
Apache Thrift: Node.js web_server.js multi-vulnerability
Mariner
Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern
Mariner
Gnutls: gnutls: security bypass due to incorrect name constraint handling
Mariner
CVE-2026-4892
Mariner
Integer overflow in simdjson
Mariner
wrong reuse of SMB connection
Mariner
wifi: rtw89: fix potential zero beacon interval in beacon tracking
Mariner
CBL-Mariner Releases
hfs: Replace BUG_ON with error handling for CNID count checks
Mariner
CBL-Mariner Releases
wifi: rtw89: pci: validate sequence number of TX release report
Mariner
most: core: fix resource leak in most_register_interface error paths
Mariner
net: cpsw_new: Fix potential unregister of netdev that has not been registered yet
Mariner
ksmbd: fix signededness bug in smb_direct_prepare_negotiation()
Mariner
srcu: Use irq_work to start GP in tiny SRCU
Mariner
ALSA: mixer: oss: Add card disconnect checkpoints
Mariner
ASoC: qcom: q6asm: drop DSP responses for closed data streams
Mariner
Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash
Mariner
wifi: rtw89: pci: validate release report content before using for RTL8922DE
Mariner
CBL-Mariner Releases
media: vidtv: fix pass-by-value structs causing MSAN warnings
Mariner
CBL-Mariner Releases
f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
Mariner
CBL-Mariner Releases
ksmbd: use check_add_overflow() to prevent u16 DACL size overflow
Mariner
CBL-Mariner Releases
usb: gadget: f_hid: move list and spinlock inits from bind to alloc
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.