www.securityfocus.org: An up-to-date, searchable security exploit information service that supplies descriptions, discussions, solutions, and exploit codes on a per vulnerability basis.
www.cert.org: Very complete, includes vendor responses to vulnerabilities, but holds back vulnerability information until vendors have had time to respond.