Ilija Tovilo

SQL injection in pdo_firebird via NUL bytes in quoted strings

DoS attack via DOMNode::C14N()

NULL pointer dereference in SOAP apache:Map decoder with missing <value>

SoapServer session-persisted object use-after-free via SOAP header fault

Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()

Out-of-bounds read in urldecode() on NetBSD

Use-After-Free in SOAP using Apache map

Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding