Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).
Mariner
Release Notes
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.
Mariner
Release Notes
Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients
Mariner
Release Notes
Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)
Mariner
Release Notes
Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service
Mariner
Release Notes
Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages
Mariner
Release Notes
Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)
Mariner
Release Notes
Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match
Mariner
Release Notes
Apache Thrift: c_glib `read_all` spins when the underlying read returns 0
Mariner
Release Notes
Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound
Mariner
Release Notes
Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM
Mariner
Release Notes
Apache HTTP Server: mod_vhost_alias stack overflow
Mariner
Release Notes
Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)
Mariner
Release Notes
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)
Mariner
Release Notes
Apache Thrift: C++ THttpTransport grows its line buffer without bound
Mariner
Release Notes
Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)
Mariner
Release Notes
Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame
Mariner
Release Notes
Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize
Mariner
Release Notes
Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound
Mariner
Release Notes
Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception
Mariner
Release Notes
Apache Thrift: Perl servers end `serve()` when serving one connection fails
Mariner
Release Notes
virtualenv bash and fish activation scripts execute commands embedded in paths
Mariner
Release Notes
virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
Mariner
Release Notes
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.