Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)
Mariner
Release Notes
Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)
Mariner
Release Notes
Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec
Mariner
Release Notes
Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation
Mariner
Release Notes
Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)
Mariner
Release Notes
Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception
Mariner
Release Notes
Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)
Mariner
Release Notes
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
Mariner
Release Notes
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser
Mariner
Release Notes
Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error
Mariner
Release Notes
Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route
Mariner
Release Notes
RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking
Mariner
Release Notes
Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound
Mariner
Release Notes
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow
Mariner
Release Notes
Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound
Mariner
Release Notes
Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length
Mariner
Release Notes
Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
Mariner
Release Notes
Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service
Mariner
Release Notes
Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard
Mariner
Release Notes
Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`
Mariner
Release Notes
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Mariner
Release Notes
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Mariner
Release Notes
Gcc: libstdc++ integer overflow in `new` operator
Mariner
Release Notes
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.