Eu uso esses:

https://cve.mitre.org/ CVE - Common Vulnerabilities and Exposures (CVE)

https://www.cvedetails.com/ CVE security vulnerability database. Security vulnerabilities, exploits, references and more