Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id
Mariner
Release Notes
Apache HTTP Server: mod_auth_digest reauthentication attack
Mariner
Release Notes
Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely
Mariner
Release Notes
Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
Mariner
Release Notes
Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op
Mariner
Release Notes
Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}
Mariner
Release Notes
Apache Thrift: Perl TLS client disables certificate verification by default
Mariner
Release Notes
Apache HTTP Server: mod_dav_fs namespace overflow
Mariner
Release Notes
Apache HTTP Server: mod_auth_digest one-time-nonce replay attack
Mariner
Release Notes
Apache HTTP Server: mod_xml2enc crash on charset conversion failure
Mariner
Release Notes
Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories
Mariner
Release Notes
Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
Mariner
Release Notes
HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata
Mariner
Release Notes
Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length
Mariner
Release Notes
Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit
Mariner
Release Notes
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
Mariner
Release Notes
Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)
Mariner
Release Notes
Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name
Mariner
Release Notes
Emacs: emacs: arbitrary code execution in flymake mode
Mariner
Release Notes
Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound
Mariner
Release Notes
GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.
Mariner
Release Notes
Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end
Mariner
Release Notes
Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements
Mariner
Release Notes
Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.