Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Where can I get email or rss notifications (push), of currently new discovered security vulnerabilities in any kind of software.

Ideally the service should be free and it shoul allow me to subscribe to specific topics ideally in a tree-like structure like: web-applications => blogs/cms => wordpress => wordpress plugins => plugin foobar

Thank you very much!

share|improve this question

closed as not constructive by mgorven, Ward, Shane Madden, mdpc, Zoredache Dec 26 '12 at 7:38

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Welcome to Serverfault! Might I also recommend Information Security, a site for Information Security folk. This question, unfortunately, is a bad fit for our format and will be off-ropic for any StackExchange site. – Scott Pack Dec 26 '12 at 2:35
Thanks very much Scott! Didnt know the site you linked. Maybe someone can move my question over there (at least at stackoverflow moving is somehow possible)? – Markus Dec 26 '12 at 2:39

The lists over at all have RSS feeds and are free to use. Both the Bugtraq and Full Disclosure lists are pretty high-volume and hold the latest information about discovered vulnerabilities.

share|improve this answer

The two biggest lists that I know of are:

The DHS at NIST has the National Vulnerability Database "feeds" and an email list. I do not know what level of detail are in the emails but the feeds have everything.

Mitre Org has a Common Vulnerabilities and Exposures List(CVE) with updates by email.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.