Two primary resources for vulnerability disclosure are:

Bugtraq Mailing List- sign up | archives

Full Disclosure Mailing List – sign up | archives