For those who are used to looking for information about vulnerabilities, you will know CVEDetails, for the others, it is a site referencing all the known vulnerabilities on the products monitored by the American organization MITRE.
Note that this means that if a software/hardware/operating system is not monitored by the MITRE, its vulnerabilities will not be referenced. This is also the case for vendors who do not communicate on their vulnerabilities (IBM on its mainframe, SAP on Hybris...).
https://www.cvedetails.com/
CVEDetails allowed to make rankings, statistics, to have the history of all the products... and this for free.
Example :