deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4076
Published: 2019-11-26
Description: OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/cve-2011-4076; https://bugs.launchpad.net/nova/+bug/868360; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4076
CVE: CVE-2019-15968
Published: 2019-11-26
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-ucdm-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-ucdm-xss
CVE: CVE-2019-15971
Published: 2019-11-26
Description: A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper validation of certain MP3 file types. An attacker could exploit this vulnerability by sending a crafted MP3 file through the targeted device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-345
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-esa-mp3-bypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-esa-mp3-bypass
CVE: CVE-2019-15972
Published: 2019-11-26
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-cucm-sql; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-cucm-sql
CVE: CVE-2019-15986
Published: 2019-11-26
Description: A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this vulnerability, an attacker would need valid administrator credentials. The vulnerability is due to improper input validation for certain CLI commands that are executed on a vulnerable system. An attacker could exploit this vulnerability by logging in to the system and sending crafted CLI commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system and elevate privileges to root.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-unity-exp-comm-inject; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-unity-exp-comm-inject
CVE: CVE-2019-15988
Published: 2019-11-26
Description: A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An attacker could exploit this vulnerability by crafting the URL in a particular way. A successful exploit could allow the attacker to bypass the URL reputation filters that are configured for the affected device, which could allow malicious URLs to pass through the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-esa-url-bypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-esa-url-bypass
CVE: CVE-2019-15990
Published: 2019-11-26
Description: A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-sbr-rv-infodis; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-sbr-rv-infodis
CVE: CVE-2019-15994
Published: 2019-11-26
Description: A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-stealth-xss; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-stealth-xss
CVE: CVE-2019-15995
Published: 2019-11-26
Description: A vulnerability in the web UI of Cisco DNA Spaces: Connector could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web UI does not properly validate user-supplied input. An attacker could exploit this vulnerability by entering malicious SQL statements in an affected field in the web UI. A successful exploit could allow the attacker to remove the SQL database, which would require the reinstallation of the Connector VM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-sqlinjection; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-sqlinjection
CVE: CVE-2019-15996
Published: 2019-11-26
Description: A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An attacker could exploit this vulnerability by leveraging the insufficient restrictions to modify sensitive files. A successful exploit could allow the attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-priv-esca; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-priv-esca
CVE: CVE-2019-15997
Published: 2019-11-26
Description: A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to perform a command injection attack and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command. An attacker could exploit this vulnerability by including malicious input during the execution of the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as root.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-cmd-injection; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-dna-cmd-injection
CVE: CVE-2019-15998
Published: 2019-11-26
Description: A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the NETCONF over SSH access control list (ACL). An attacker could exploit this vulnerability by connecting to an affected device using NETCONF over SSH. A successful exploit could allow the attacker to connect to the device on the NETCONF port. Valid credentials are required to access the device. This vulnerability does not affect connections to the default SSH process on the device.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-iosxr-ssh-bypass; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-iosxr-ssh-bypass
CVE: CVE-2019-16001
Published: 2019-11-26
Description: A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources loaded by the application at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. The malicious DLL file would execute when the vulnerable application is launched. A successful exploit could allow the attacker to execute arbitrary code on the target machine with the privileges of another user account.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-webex-teams-dll; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-webex-teams-dll
CVE: CVE-2019-16002
Published: 2019-11-26
Description: A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instance of vManage. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-vman-csrf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-vman-csrf
CVE: CVE-2019-19270
Published: 2019-11-26
Description: An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the appropriate field of a CRL entry (checking twice for subject, rather than once for subject and once for issuer) prevents some valid CRLs from being taken into account, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html; https://github.com/proftpd/proftpd/issues/859; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G/
CVE: CVE-2019-19271
Published: 2019-11-26
Description: An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable, used when checking a client certificate against CRL entries (installed by a system administrator), can cause some CRL entries to be ignored, and can allow clients whose certificates have been revoked to proceed with a connection to the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://github.com/proftpd/proftpd/issues/860; https://github.com/proftpd/proftpd/issues/860
CVE: CVE-2019-19272
Published: 2019-11-26
Description: An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/proftpd/proftpd/issues/858; https://github.com/proftpd/proftpd/issues/858
CVE: CVE-2011-4082
Published: 2019-11-26
Description: A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/security/cve/cve-2011-4082; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4082; https://security-tracker.debian.org/tracker/CVE-2011-4082
CVE: CVE-2011-4090
Published: 2019-11-26
Description: Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/security/cve/cve-2011-4090; https://seclists.org/oss-sec/2011/q4/176; https://security-tracker.debian.org/tracker/CVE-2011-4090
CVE: CVE-2011-4120
Published: 2019-11-26
Description: Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM configuration. A remote attacker could use this flaw to circumvent common authentication process and obtain access to the account in question by providing a NULL value (pressing Ctrl-D keyboard sequence) as the password string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://access.redhat.com/security/cve/cve-2011-4120; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4120; https://security-tracker.debian.org/tracker/CVE-2011-4120
CVE: CVE-2011-4121
Published: 2019-11-26
Description: The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: http://www.openwall.com/lists/oss-security/2013/07/01/1; https://access.redhat.com/security/cve/cve-2011-4121; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4121
CVE: CVE-2011-4350
Published: 2019-11-26
Description: Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://access.redhat.com/security/cve/cve-2011-4350; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350
CVE: CVE-2019-14890
Published: 2019-11-26
Description: A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config' when applying the Ansible Tower license.
CVSS Score: 8.4 (HIGH)
CWE: CWE-312, CWE-312
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14890; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14890
CVE: CVE-2019-14857
Published: 2019-11-26
Description: A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with trailing slashes similar to CVE-2019-3877 in mod_auth_mellon.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14857; https://github.com/zmartzone/mod_auth_openidc/commit/5c15dfb08106c2451c2c44ce7ace6813c216ba75; https://github.com/zmartzone/mod_auth_openidc/commit/ce37080c6aea30aabae8b4a9b4eea7808445cc8e
CVE: CVE-2019-14853
Published: 2019-11-26
Description: An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-391, CWE-755
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14853; https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3; https://seclists.org/bugtraq/2019/Dec/33
CVE: CVE-2015-6495
Published: 2019-11-26
Description: There is Sensitive Information in Cloudera Manager before 5.4.6 Diagnostic Support Bundles.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_alalsdfkl4320_lfsk30f__l2k3jfsw34__39; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_alalsdfkl4320_lfsk30f__l2k3jfsw34__39
CVE: CVE-2015-7831
Published: 2019-11-26
Description: In Cloudera Hue, there is privilege escalation by a read-only user when CDH 5.x brefore 5.4.9 is used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_gd2_r25_2v; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_gd2_r25_2v
CVE: CVE-2016-3131
Published: 2019-11-26
Description: Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_120; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_120
CVE: CVE-2016-3192
Published: 2019-11-26
Description: Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_134; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_134
CVE: CVE-2016-4572
Published: 2019-11-26
Description: In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#id_nd4_xkr_1cb; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#id_nd4_xkr_1cb
CVE: CVE-2016-5724
Published: 2019-11-26
Description: Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb-166; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb-166
CVE: CVE-2016-6353
Published: 2019-11-26
Description: Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_165; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_165
CVE: CVE-2019-14856
Published: 2019-11-26
Description: ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html; https://access.redhat.com/errata/RHSA-2020:0756
CVE: CVE-2015-4457
Published: 2019-11-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_c1c_zbn_js; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_c1c_zbn_js
CVE: CVE-2015-9537
Published: 2019-11-26
Description: The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2015-9537-nextgen.html; https://github.com/cybersecurityworks/Disclosed/issues/1; https://wordpress.org/plugins/nextgen-gallery/#developers
CVE: CVE-2015-9538
Published: 2019-11-26
Description: The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html; https://github.com/cybersecurityworks/Disclosed/issues/2
CVE: CVE-2015-9539
Published: 2019-11-26
Description: The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2015-9539-fastsecure.html; https://github.com/amansaini/fast-secure-contact-form; https://github.com/cybersecurityworks/Disclosed/issues/4
CVE: CVE-2018-17860
Published: 2019-11-26
Description: Cloudera CDH has Insecure Permissions because ALL cannot be revoked.This affects 5.x through 5.15.1 and 6.x through 6.0.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-276
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_vp4_q2x_thb; https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hadoop; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#concept_vp4_q2x_thb