deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28971
Published: 2021-03-22
Description: In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d88d05a9e0b6d9356e97129d4ff9942d765f46ea; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html; https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE: CVE-2021-28972
Published: 2021-03-22
Description: In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/
CVE: CVE-2020-9206
Published: 2021-03-22
Description: The eUDC660 product has a resource management vulnerability. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the device, as a result, the key file can be obtained and data can be decrypted, affecting confidentiality, integrity, and availability of the device.
CVSS Score: 6.7 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-resourcemanagement-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-resourcemanagement-en
CVE: CVE-2020-9212
Published: 2021-03-22
Description: There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information leak.
CVSS Score: 6.5 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-informationleak-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-informationleak-en
CVE: CVE-2020-9213
Published: 2021-03-22
Description: There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module, NIP6300, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500, Secospace USG6600 and SG9500.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-02-dos-en
CVE: CVE-2021-22309
Published: 2021-03-22
Description: There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions V500R001C30SPC200, V500R001C60SPC500,V500R005C00SPC200;USG9520 versions V500R005C00;USG9560 versions V500R005C00;USG9580 versions V500R005C00.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-en
CVE: CVE-2021-25265
Published: 2021-03-22
Description: A malicious website could execute code remotely in Sophos Connect Client before version 2.1.
CVSS Score: 8.8 (HIGH)
References: https://community.sophos.com/b/security-blog; https://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265; https://community.sophos.com/b/security-blog
CVE: CVE-2021-26578
Published: 2021-03-22
Description: A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The vulnerability could be remotely exploited with SQL injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04097en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04097en_us
CVE: CVE-2021-22310
Published: 2021-03-22
Description: There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en
CVE: CVE-2021-22311
Published: 2021-03-22
Description: There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include: ManageOne versions 8.0.0, 8.0.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-276
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en
CVE: CVE-2021-22320
Published: 2021-03-22
Description: There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en
CVE: CVE-2021-22314
Published: 2021-03-22
Description: There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.
CVSS Score: 7.8 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210218-01-privilege-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210218-01-privilege-en
CVE: CVE-2021-22321
Published: 2021-03-22
Description: There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en
CVE: CVE-2021-25917
Published: 2021-03-22
Description: In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25917; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-25918
Published: 2021-03-22
Description: In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25918; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-25919
Published: 2021-03-22
Description: In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25919; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-25920
Published: 2021-03-22
Description: In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads to a malicious user able to read and send sensitive messages on behalf of the victim user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-178, CWE-178
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25920; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-25921
Published: 2021-03-22
Description: In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly in the `Allergies` section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25921; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-25922
Published: 2021-03-22
Description: In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly. An attacker could trick a user to click on a malicious url and execute malicious code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25922; https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f
CVE: CVE-2021-21341
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-502, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-2p3x-qw9c-25hh; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21342
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-502, CWE-918, CWE-918
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-hvv8-336g-rx3m; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21343
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-73, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-74cv-f58x-f9wf; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21344
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-59jw-jqf4-3wq3; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21345
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-94, CWE-502, CWE-78
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21346
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434, CWE-502, CWE-434, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-4hrm-m67v-5cxr; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21347
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-434, CWE-502, CWE-434, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-qpfq-ph7r-qv6f; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21348
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-502, CWE-400
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-56p8-3fh9-4cvq; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21349
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-502, CWE-918, CWE-918
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-f6hm-88x3-mfjv; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21350
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-43gc-mjxg-gvrq; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21351
Published: 2021-03-23
Description: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-502
References: http://x-stream.github.io/changes.html#1.4.16; https://github.com/x-stream/xstream/security/advisories/GHSA-hrcp-8f3q-4w2c; https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E
CVE: CVE-2021-21338
Published: 2021-03-23
Description: TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp; https://packagist.org/packages/typo3/cms-core; https://typo3.org/security/advisory/typo3-core-sa-2021-001
CVE: CVE-2021-21339
Published: 2021-03-23
Description: TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 user session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-312
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch; https://packagist.org/packages/typo3/cms-core; https://typo3.org/security/advisory/typo3-core-sa-2021-006