PHP Security Center

Out-of-bounds read and write when traversing DOM contents

Type-confusion in HTML fragment parsing

Invalid NULL byte handling in Firebird prepared queries

NUL byte in mbstring encoding leads to out-of-bounds read

Use After Free in SOAP deduplication leads to remote code execution

XSS Vulnerability in PHP-FPM status page

Denial of Service via improper handling of signed characters in ctype functions

NULL pointer dereference in mb_regex_encoding

SOAP persistence leads to use-after-free

Incorrect variable dereference in SOAP decoding