rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-6012 
SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter (aka the search section).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-16T20:00:00.000Z
CVE-2007-6013 
Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-19T21:00:00.000Z
CVE-2007-6014 
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t_dedupe parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-05T11:00:00.000Z
CVE-2007-6015 
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logons" option is enabled, allows remote attackers to execute arbitrary code via a GETDC mailslot request composed of a long GETDC string following an offset username in a SAMLOGON logon request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T21:00:00.000Z
CVE-2007-6016 
Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, allow remote attackers to execute arbitrary code via a long (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, or (19) _MonthText11 property value when executing the Save method. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-29T19:00:00.000Z
CVE-2007-6017 
The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows Server (BEWS) 11d 11.0.6235 and 11.0.7170, and 12.0 12.0.1364, exposes the unsafe Save method, which allows remote attackers to cause a denial of service (browser crash), or create or overwrite arbitrary files, via string values of the (1) _DOWText0, (2) _DOWText1, (3) _DOWText2, (4) _DOWText3, (5) _DOWText4, (6) _DOWText5, (7) _DOWText6, (8) _MonthText0, (9) _MonthText1, (10) _MonthText2, (11) _MonthText3, (12) _MonthText4, (13) _MonthText5, (14) _MonthText6, (15) _MonthText7, (16) _MonthText8, (17) _MonthText9, (18) _MonthText10, and (19) _MonthText11 properties. NOTE: the vendor states "Authenticated user involvement required," but authentication is not needed to attack a client machine that loads this control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-29T19:00:00.000Z
CVE-2007-6018 
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitrary e-mail messages via a modified numeric ID or (2) "purge" deleted emails via a crafted email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-11T02:00:00.000Z
CVE-2007-6019 
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-09T21:00:00.000Z
CVE-2007-6020 
Multiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in Autonomy (formerly Verity) KeyView 10.3.0.0, as used by IBM Lotus Notes, Symantec Mail Security, and activePDF DocConverter, allow remote attackers to execute arbitrary code via a long attribute value in a (1) DI, (2) FD, (3) FT, (4) JD, (5) JL, (6) LE, (7) OB, (8) OD, (9) OL, (10) PN, (11) PS, (12) PW, (13) RD, (14) QL, or (15) TS tag in a .fff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-10T18:00:00.000Z
CVE-2007-6021 
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-10-30T19:19:00.000Z
CVE-2007-6025 
Stack-based buffer overflow in driver_wext.c in wpa_supplicant 0.6.0 and earlier allows remote attackers to cause a denial of service (crash) via crafted TSF data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-19T22:00:00.000Z
CVE-2007-6026 
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count.  NOTE: this might be the same issue as CVE-2005-0944.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T00:00:00.000Z
CVE-2007-6027 
PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T01:00:00.000Z
CVE-2007-6028 
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long string in the (1) Text, (2) EditSelText, (3) EditText, and (4) CellFontName property values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T01:00:00.000Z
CVE-2007-6029 
Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-6030 
Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors.  NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-6031 
Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified vectors.  NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-6032 
SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL commands via the mode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-6033 
Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-6035 
SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T11:00:00.000Z
CVE-2007-6036 
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query, which causes a negative number to be used during memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T11:00:00.000Z
CVE-2007-6037 
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbitrary web script or HTML via the standalone parameter and other unspecified parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T11:00:00.000Z
CVE-2007-6038 
PHP remote file inclusion vulnerability in xajax_functions.php in the JUser (com_juser) 1.0.14 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T11:00:00.000Z
CVE-2007-6039 
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in (1) the domain parameter to the dgettext function, the message parameter to the (2) dcgettext or (3) gettext function, the msgid1 parameter to the (4) dngettext or (5) ngettext function, or (6) the classname parameter to the stream_wrapper_register function.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be demonstrated for code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T19:00:00.000Z
CVE-2007-6040 
The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service (degraded networking and logging) via a flood of TCP SYN packets, a related issue to CVE-1999-0116.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T19:00:00.000Z
CVE-2007-6041 
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T19:00:00.000Z
CVE-2007-6042 
PHP remote file inclusion vulnerability in fehler.inc.php in SWSoft Confixx Professional 3.2.1 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T19:00:00.000Z
CVE-2007-6043 
The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as demonstrated by attacks on (1) forward security and (2) backward security, related to use of eight instances of the RC4 cipher, and possibly a related issue to CVE-2007-3898.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T19:00:00.000Z
CVE-2007-6044 
Multiple unspecified vulnerabilities in IBM WebSphere MQ 6.0 have unknown impact and remote attack vectors involving "memory corruption." NOTE: as of 20071116, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6045 
Unspecified vulnerability in (1) DB2WATCH and (2) DB2FREEZE in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6046 
Unspecified vulnerability in unspecified setuid programs in IBM DB2 UDB 9.1 before Fixpak 4 allows local users to have an unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6047 
Unspecified vulnerability in the DB2DART tool in IBM DB2 UDB 9.1 before Fixpak 4 allows attackers to execute arbitrary commands as the DB2 instance owner, related to invocation of TPUT by DB2DART.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6048 
IBM DB2 UDB 9.1 before Fixpak 4 uses incorrect permissions on ACLs for DB2NODES.CFG, which has unknown impact and attack vectors.  NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6049 
Unspecified vulnerability in the SSL LOAD GSKIT action in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, involving a call to dlopen when the effective uid is root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6050 
Unspecified vulnerability in DB2LICD in IBM DB2 UDB 9.1 before Fixpak 4 has unknown impact and attack vectors, related to creation of an "insecure directory."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6051 
IBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact.  NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6052 
IBM DB2 UDB 9.1 before Fixpak 4 does not properly perform vector aggregation, which might allow attackers to cause a denial of service (divide-by-zero error and DBMS crash), related to an "overflow." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6053 
IBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6054 
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the /screens URI, related to the url variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6055 
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter.  NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6056 
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the (1) Mehr and (2) SUPER parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6057 
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6058 
Multiple SQL injection vulnerabilities in index.php in ProfileCMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) codes action in the profile-codes module, (2) videos action in the video-codes module, or (3) games action in the arcade-games module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6059 
Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address yields a Java UnknownHostException error, which allows remote attackers to cause a denial of service (connection pool exhaustion) via a large number of requests, resulting in a SQLNestedException.  NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6060 
AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field's value is larger than the actual number of bytes in the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T20:00:00.000Z
CVE-2007-6061 
Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run.  NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T23:00:00.000Z
CVE-2007-6062 
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T23:00:00.000Z
CVE-2007-6063 
Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T00:00:00.000Z
CVE-2007-6067 
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-09T21:00:00.000Z
CVE-2007-6077 
The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks.  NOTE: this is due to an incomplete fix for CVE-2007-5380.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T21:00:00.000Z
CVE-2007-6078 
Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) nc_top.asp; (2) inc_bookmarks.asp, possibly involving a parameter passed from cp_main.asp; (3) inc_profile_functions.asp; or (4) inc_SUBSCRIPTIONS.asp; or the (5) Avatar_URL, (6) LINK1, or (7) LINK2 parameter to cp_main.asp in an EditIt action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T22:00:00.000Z
CVE-2007-6079 
Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xoopsOption[pagetype] parameter to the default URI for modules/news/.  NOTE: this can be leveraged by using legitimate product functionality to upload a file that contains the code, then including that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T22:00:00.000Z
CVE-2007-6080 
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary SQL commands via the bid parameter.  NOTE: it was later reported that 1.0.13 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T22:00:00.000Z
CVE-2007-6081 
AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-21T23:00:00.000Z
CVE-2007-6082 
Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6083 
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6084 
SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6085 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z