rainbutterfly/cve_corpus huggingface dataset:
CVE-2012-2293 
Directory traversal vulnerability in EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allows remote authenticated users to upload files, and consequently execute arbitrary code, via a relative path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-06T11:00:00.000Z
CVE-2012-2294 
EMC RSA Archer SmartSuite Framework 4.x and RSA Archer GRC 5.x before 5.2SP1 allow remote attackers to conduct clickjacking attacks via a crafted web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-02-06T11:00:00.000Z
CVE-2012-2296 
The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x. 6.x-2.x before 6.x-2.2, and 7.x-2.x before 7.x-2.2 stores user profile data from Engage in session tables, which might allow remote attackers to obtain sensitive information by leveraging a separate vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2297 
Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the (1) creativecommons_user_message or (2) creativecommons_site_license_additional_text parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-26T21:00:00.000Z
CVE-2012-2298 
Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-14T22:00:00.000Z
CVE-2012-2299 
The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive information by reading from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-14T22:00:00.000Z
CVE-2012-2300 
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product classes permission to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-14T22:00:00.000Z
CVE-2012-2301 
The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-16T02:00:00.000Z
CVE-2012-2302 
Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2303 
The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtain sensitive information and possibly have other impacts via unspecified vectors to the (1) Spaces or (2) Spaces OG module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-18T18:00:00.000Z
CVE-2012-2304 
The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-14T22:00:00.000Z
CVE-2012-2305 
Cross-site request forgery (CSRF) vulnerability in the Node Gallery module for Drupal 6.x-3.1 and earlier allows remote attackers to hijack the authentication of certain users for requests that create node galleries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2306 
SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2307 
Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2308 
Cross-site scripting (XSS) vulnerability in the Taxonomy Grid : Catalog module for Drupal 6.x-1.6 and earlier allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2309 
Cross-site scripting (XSS) vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2310 
Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-25T21:00:00.000Z
CVE-2012-2311 
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-11T10:00:00.000Z
CVE-2012-2312 
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges.
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: JBoss AS 7
product: JBoss
Published: 2019-12-18T17:47:01.000Z
CVE-2012-2313 
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-13T10:00:00.000Z
CVE-2012-2314 
The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-03T00:00:00.000Z
CVE-2012-2315 
admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-09T21:00:00.000Z
CVE-2012-2316 
Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-09-09T21:00:00.000Z
CVE-2012-2317 
The Debian php_crypt_revamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty salt string, which might allow remote attackers to bypass authentication by leveraging an application that relies on the PHP crypt function to choose a salt for password hashing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-07T19:00:00.000Z
CVE-2012-2318 
msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service (application crash) by placing these characters in a text/plain message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-03T19:00:00.000Z
CVE-2012-2319 
Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009-4020.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-17T10:00:00.000Z
CVE-2012-2320 
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-18T22:00:00.000Z
CVE-2012-2321 
The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-18T22:00:00.000Z
CVE-2012-2322 
Integer overflow in the dhcpv6_get_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of service (infinite loop and crash) via an invalid length value in a DHCP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-18T22:00:00.000Z
CVE-2012-2324 
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the (1) user search or (2) Mail Log in the Admin Control Panel (ACP).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T18:00:00.000Z
CVE-2012-2325 
SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T18:00:00.000Z
CVE-2012-2326 
Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T18:00:00.000Z
CVE-2012-2327 
MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T18:00:00.000Z
CVE-2012-2328 
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-10T17:00:00.000Z
CVE-2012-2329 
Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-11T10:00:00.000Z
CVE-2012-2330 
The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive information (request header contents) and possibly spoof HTTP headers via a zero length string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T23:00:00.000Z
CVE-2012-2331 
Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter.  NOTE: this issue might be resultant from cross-site request forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T23:00:00.000Z
CVE-2012-2332 
SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter.  NOTE: this issue might be resultant from cross-site request forgery (CSRF).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-08-13T23:00:00.000Z
CVE-2012-2333 
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-14T22:00:00.000Z
CVE-2012-2334 
Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-06-19T20:00:00.000Z
CVE-2012-2335 
php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code by leveraging improper interaction between the PHP sapi/cgi/cgi_main.c component and a query string beginning with a +- sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-11T10:00:00.000Z
CVE-2012-2336 
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-11T10:00:00.000Z
CVE-2012-2337 
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-18T18:00:00.000Z
CVE-2012-2338 
SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-2339 
Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-2340 
The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" permission to modify the module settings via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-21T20:00:00.000Z
CVE-2012-2341 
Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-18T22:00:00.000Z
CVE-2012-2350 
pam_shield before 0.9.4: Default configuration does not perform protective action
Problem types: description: default configuration does not take any action
Affected products: vendor: pam-shield
product: pam-shield
Published: 2019-11-21T13:54:54.000Z
CVE-2012-2351 
The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-12T20:00:00.000Z
CVE-2012-2352 
The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives via vectors related to the (1) do_arc_manage, (2) do_arc_download, or (3) do_arc_delete functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-05-31T17:00:00.000Z
CVE-2012-2353 
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2354 
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2355 
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability requirements and add arbitrary questions to a quiz via the questions feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2356 
The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2357 
The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2358 
Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2359 
admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2360 
Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2361 
Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the name field (aka the service name) to admin/webservice/service.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2362 
Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted parameter to blog/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2363 
SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2364 
Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a "download all" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z
CVE-2012-2365 
Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnumber field to cohort/edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2012-07-21T01:00:00.000Z