Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
Mariner
usb: typec: ucsi: validate connector number in ucsi_notify_common()
Mariner
usb: gadget: f_ecm: Fix net_device lifecycle with device_move
Mariner
usb: gadget: f_rndis: Fix net_device lifecycle with device_move
Mariner
ALSA: ctxfi: Check the error for index mapping
Mariner
usb: gadget: f_eem: Fix net_device lifecycle with device_move
Mariner
usb: gadget: f_subset: Fix net_device lifecycle with device_move
Mariner
net-imap vulnerable to STARTTLS stripping via invalid response timing
Mariner
net-imap: Denial of service via high iteration count for `SCRAM-*` authentication
Mariner
net-imap: Command Injection via unvalidated Symbol inputs
Mariner
net-imap: Command Injection via "raw" arguments to multiple commands
Mariner
An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Mariner
Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.
Mariner
usb: gadget: f_ncm: Fix net_device lifecycle with device_move
Mariner
i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
Mariner
media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
Mariner
most: core: fix leak on early registration failure
Mariner
PostgreSQL server undersizes allocations, via integer wraparound
Mariner
CBL-Mariner Releases
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Mariner
CBL-Mariner Releases
Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.
Release Notes
NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
Mariner
CBL-Mariner Releases
NGINX ngx_http_rewrite_module vulnerability
Mariner
CBL-Mariner Releases
NGINX ngx_http_charset_module vulnerability
Mariner
CBL-Mariner Releases
NGINX ngx_http_ssl_module vulnerability
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.