I use the NVD feed directly: https://nvd.nist.gov/feeds/xml/cve/misc/nvd-rss-analyzed.xml https://nvd.nist.gov/feeds/xml/cve/misc/nvd-rss-analyzed.xml then fi

I use the NVD feed directly: https://nvd.nist.gov/feeds/xml/cve/misc/nvd-rss-analyzed.xml https://nvd.nist.gov/feeds/xml/cve/misc/nvd-rss-analyzed.xml then filter out stuff I am not interested in using the filtering features of my RSS feed reader, but the feed is so comprehensive with all sorts of reports on obscure commercial packages I've never even heard about, and with relatively poor metadata about the packages (so you can't just filter out "anything having to do with Windows since I don't use Windows").