deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6498
Published: 2024-01-04
Description: The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 6.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3009228%40complianz-gdpr&new=3009228%40complianz-gdpr&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/01c1458d-3e38-4dbf-bb65-80465ea6d0ad?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3009228%40complianz-gdpr&new=3009228%40complianz-gdpr&sfp_email=&sfph_mail=
CVE: CVE-2023-6733
Published: 2024-01-04
Description: The WP-Members Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.8 via the wpmem_field shortcode. This makes it possible for authenticated attackers, with contributor access and above, to extract sensitive data including user emails, password hashes, usernames, and more.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3015224%40wp-members%2Ftrunk&old=2920897%40wp-members%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/46c61f38-553e-43b2-a666-b160db40e66d?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3015224%40wp-members%2Ftrunk&old=2920897%40wp-members%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2023-6738
Published: 2024-01-04
Description: The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pagelayer_header_code', 'pagelayer_body_open_code', and 'pagelayer_footer_code' meta fields in all versions up to, and including, 1.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This appears to be a reintroduction of a vulnerability patched in version 1.7.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://plugins.trac.wordpress.org/browser/pagelayer/trunk/main/post_metas.php#L527; https://plugins.trac.wordpress.org/changeset?old_path=/pagelayer/tags/1.7.8&old=3016486&new_path=/pagelayer/tags/1.7.9&new=3016486&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d14c8890-482c-4d43-a68f-0d04c4feca8f?source=cve
CVE: CVE-2023-29962
Published: 2024-01-04
Description: S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://gist.github.com/superjock1988/546df50f8251cb2c99adda[PII_REDACTED]; https://github.com/superjock1988/debug/blob/main/s-cms.md; https://gist.github.com/superjock1988/546df50f8251cb2c99adda[PII_REDACTED]
CVE: CVE-2022-43375
Published: 2024-01-04
Description: Rejected reason: This CVE ID was unused by the CNA.
CVE: CVE-2023-52322
Published: 2024-01-04
Description: ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://blog.spip.net/Mise-a-jour-de-maintenance-et-securite-sortie-de-SPIP-4-2-7-SPIP-4-1-13.html?lang=fr; https://git.spip.net/spip/spip/commit/e90f5344b8c[PII_REDACTED]3e778d38a35e42b7bcb; https://lists.debian.org/debian-lts-announce/2024/03/msg00014.html
CVE: CVE-2023-41784
Published: 2024-01-04
Description: 
Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro 


CVSS Score: 6.6 (MEDIUM)
CWE: CWE-269
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034444; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034444
CVE: CVE-2023-50082
Published: 2024-01-04
Description: Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive information via session leakage allows a user to avoid logging into the backend management platform.
CVSS Score: 7.5 (HIGH)
References: https://github.com/juraorab/cve/blob/master/CVE/README.md; https://github.com/juraorab/cve/issues/2; https://github.com/juraorab/cve/blob/master/CVE/README.md
CVE: CVE-2023-50630
Published: 2024-01-04
Description: Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/xiweicheng/tms/issues/19; https://github.com/xiweicheng/tms/issues/19
CVE: CVE-2022-2081
Published: 2024-01-04
Description: A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to reboot. The vulnerability is caused by a lack of flood control which eventually if exploited causes an internal stack overflow in the HCI Modbus TCP function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch; https://publisher.hitachienergy.com/preview?DocumentID=8DBD000111&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-3864
Published: 2024-01-04
Description: 
A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation.
An attacker could exploit the vulnerability by first gaining access to
the system with security privileges and attempt to update the IED
with a malicious update package. Successful exploitation of this
vulnerability will cause the IED to restart, causing a temporary Denial of Service.


CVSS Score: 4.5 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en&DocumentPartId=&Action=Launch; https://publisher.hitachienergy.com/preview?DocumentID=8DBD000146&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2023-6944
Published: 2024-01-04
Description: A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://access.redhat.com/errata/RHBA-2024:5869; https://access.redhat.com/security/cve/CVE-2023-6944; https://bugzilla.redhat.com/show_bug.cgi?id=2255204
CVE: CVE-2023-7044
Published: 2024-01-04
Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom ID in all versions up to, and including, 5.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Extensions/Wrapper_Link.php#L65; https://plugins.trac.wordpress.org/changeset/3013774/essential-addons-for-elementor-lite/trunk/includes/Extensions/Wrapper_Link.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/6e770e98-3c13-4e37-b51b-4c39bce2cb42?source=cve
CVE: CVE-2021-40367
Published: 2024-01-04
Description: A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation of user-supplied data when parsing DICOM files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15097)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797; https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797
CVE: CVE-2021-42028
Published: 2024-01-04
Description: A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation of user-supplied data when parsing BMP files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14860)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797; https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797
CVE: CVE-2021-45465
Published: 2024-01-04
Description: A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation of user-supplied data when parsing BMP files. This could result in a write-what-where condition and an attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15696)
CVSS Score: 7.8 (HIGH)
CWE: CWE-123
References: https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797; https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-688797
CVE: CVE-2023-6992
Published: 2024-01-04
Description: Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow.
A local attacker could exploit the problem during compression using a crafted malicious file potentially leading to denial of service of the software.
Patches: The issue has been patched in commit  8352d10 https://github.com/cloudflare/zlib/commit/8352d108c05db1bdc5ac3bdf834dad641694c13c . The upstream repository is not affected.

CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20, CWE-122, CWE-126, CWE-787
References: https://github.com/cloudflare/zlib; https://github.com/cloudflare/zlib/security/advisories/GHSA-vww9-j87r-4cqh; https://github.com/cloudflare/zlib
CVE: CVE-2023-49622
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the material_bill.php?action=itemRelation resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49624
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_bill.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49625
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submit.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49633
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' parameter of the buyer_detail_submit.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49639
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' parameter of the buyer_invoice_submit.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49658
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parameter of the party_submit.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49665
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' parameter of the submit_delivery_list.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-49666
Published: 2024-01-04
Description: Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' parameter of the submit_material_list.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/zimerman/; https://www.kashipara.com/; https://fluidattacks.com/advisories/zimerman/
CVE: CVE-2023-50743
Published: 2024-01-04
Description: Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/perahia/; https://www.kashipara.com/; https://fluidattacks.com/advisories/perahia/
CVE: CVE-2023-50752
Published: 2024-01-04
Description: Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/perahia/; https://www.kashipara.com/; https://fluidattacks.com/advisories/perahia/
CVE: CVE-2023-50753
Published: 2024-01-04
Description: Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/update_profile.php resource does not validate the characters received and they are sent unfiltered to the database. 


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/perahia/; https://www.kashipara.com/; https://fluidattacks.com/advisories/perahia/
CVE: CVE-2023-3726
Published: 2024-01-04
Description: OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79
References: https://fluidattacks.com/advisories/creed/; https://ocsinventory-ng.org/; https://fluidattacks.com/advisories/creed/
CVE: CVE-2023-50760
Published: 2024-01-04
Description: Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.


CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://fluidattacks.com/advisories/arrau/; https://www.kashipara.com/; https://fluidattacks.com/advisories/arrau/
CVE: CVE-2023-50862
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2023-50863
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2023-50864
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2023-50865
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2023-50866
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2023-50867
Published: 2024-01-04
Description: Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fluidattacks.com/advisories/evans/; https://www.kashipara.com/; https://fluidattacks.com/advisories/evans/
CVE: CVE-2024-21625
Published: 2024-01-04
Description: SideQuest is a place to get virtual reality applications for Oculus Quest. The SideQuest desktop application uses deep links with a custom protocol (`sidequest://`) to trigger actions in the application from its web contents. Because, prior to version 0.10.35, the deep link URLs were not sanitized properly in all cases, a one-click remote code execution can be achieved in cases when a device is connected, the user is presented with a malicious link and clicks it from within the application. As of version 0.10.35, the custom protocol links within the electron application are now being parsed and sanitized properly.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/SideQuestVR/SideQuest/security/advisories/GHSA-3v86-cf9q-x4x7; https://github.com/SideQuestVR/SideQuest/security/advisories/GHSA-3v86-cf9q-x4x7
CVE: CVE-2023-6551
Published: 2024-01-04
Description: As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. 


Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide content-type based on the file extension. 


The README has been updated to include these guidelines.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434, CWE-434
References: https://cert.pl/en/posts/2024/01/CVE-2023-6551; https://cert.pl/posts/2024/01/CVE-2023-6551; https://cert.pl/en/posts/2024/01/CVE-2023-6551
CVE: CVE-2023-6270
Published: 2024-01-04
Description: A flaw was found in the ATA over Ethernet (AoE) driver in the Linux kernel. The aoecmd_cfg_pkts() function improperly updates the refcnt on `struct net_device`, and a use-after-free can be triggered by racing between the free on the struct and the access through the `skbtxq` global queue. This could lead to a denial of service condition or potential code execution.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2023-6270; https://bugzilla.redhat.com/show_bug.cgi?id=2256786; https://access.redhat.com/security/cve/CVE-2023-6270
CVE: CVE-2023-51154
Published: 2024-01-04
Description: Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://gitee.com/blue_ty/cms/issues/I8O7IV; https://gitee.com/blue_ty/cms/issues/I8O7IV
CVE: CVE-2023-51812
Published: 2024-01-04
Description: Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://gitee.com/blue_ty/cms/issues/I8PG2A; https://gitee.com/blue_ty/cms/issues/I8PG2A
CVE: CVE-2023-5442
Published: 2024-01-04
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:  CVE-2023-6991. Reason: This candidate is a reservation duplicate of CVE-2023-6991. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-5619
Published: 2024-01-04
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6530. Reason: This candidate is a reservation duplicate of CVE-2023-6530. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.