Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
Mariner
Release Notes
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
Mariner
Release Notes
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
Mariner
Release Notes
Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Mariner
Release Notes
Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default
Mariner
Release Notes
Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process
Mariner
Release Notes
Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)
Mariner
Release Notes
Apache Thrift: C++ WebSocket server transport does not read a full request length
Mariner
Release Notes
Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back
Mariner
Release Notes
Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
Mariner
Release Notes
Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection
Mariner
Release Notes
Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path
Mariner
Release Notes
Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up
Mariner
Release Notes
Apache HTTP Server: mod_dav_fs property database read access
Mariner
Release Notes
Apache HTTP Server: mod_heartmonitor denial of service
Mariner
Release Notes
Apache HTTP Server: mod_auth_digest DoS attack
Mariner
Release Notes
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language)
Mariner
Release Notes
Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
Mariner
Release Notes
Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript
Mariner
Release Notes
Apache HTTP Server: mod_proxy_ftp PASV address handling
Mariner
Release Notes
Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)
Mariner
Release Notes
Apache HTTP Server: mod_userdir information disclosure
Mariner
Release Notes
Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound
Mariner
Release Notes
Apache HTTP Server: mod_dav shared lock overflow
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.