rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-3939 
Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web server, as demonstrated by reading a TELNET credentials file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-31T17:00:00.000Z
CVE-2015-3940 
Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3942 
Multiple cross-site scripting (XSS) vulnerabilities in the web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3943 
Advantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information about e-mail project accounts via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-3946 
Cross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-3947 
SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-3948 
Cross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-15T02:00:00.000Z
CVE-2015-3949 
Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by reading the HTML source code of the mail-configuration page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-13T18:00:00.000Z
CVE-2015-3950 
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-05T10:00:00.000Z
CVE-2015-3951 
RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-13T18:00:00.000Z
CVE-2015-3952 
Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
Problem types: cwe_id: CWE-312
description: Cleartext storage of sensitive information CWE-312
Affected products: vendor: Hospira
product: Plum A+ Infusion System
vendor: Hospira
product: Plum A+3 Infusion System
vendor: Hospira
product: Symbiq Infusion System
Published: 2019-03-25T15:42:39.000Z
CVE-2015-3953 
Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
Problem types: cwe_id: CWE-259
description: Use of hard-coded password CWE-259
Affected products: vendor: Hospira
product: Plum A+ Infusion System
vendor: Hospira
product: Plum A+3 Infusion System
vendor: Hospira
product: Symbiq Infusion System
Published: 2019-03-25T16:02:25.000Z
CVE-2015-3954 
Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
Problem types: cwe_id: CWE-285
description: Improper authorization CWE-285
Affected products: vendor: Hospira
product: Plum A+ Infusion System
vendor: Hospira
product: Plum A+3 Infusion System
vendor: Hospira
product: Symbiq Infusion System
Published: 2019-03-25T16:12:01.000Z
CVE-2015-3955 
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T19:10:00.000Z
CVE-2015-3956 
Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
Problem types: cwe_id: CWE-345
description: Insufficient verification of data authenticity CWE-345
Affected products: vendor: Hospira
product: Plum A+ Infusion System
vendor: Hospira
product: Plum A+3 Infusion System
vendor: Hospira
product: Symbiq Infusion System
Published: 2019-03-25T17:44:44.000Z
CVE-2015-3957 
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T19:10:00.000Z
CVE-2015-3958 
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manual reboot) via a flood of TCP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-06T19:10:00.000Z
CVE-2015-3959 
The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches has a hardcoded serial-console password for a privileged account, which might allow physically proximate attackers to obtain access by establishing a console session to a nonstandard installation on which this account is enabled, and leveraging knowledge of this password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3960 
The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by leveraging knowledge of a private key from another installation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3961 
The web-server component in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches allows remote authenticated users to cause a denial of service (memory corruption and reboot) via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3962 
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-18T22:00:00.000Z
CVE-2015-3963 
Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before 6.7.1.1, 6.8.x before 6.8.3, 6.9.x before 6.9.4.4, and 7.x before 7 ipnet_coreip 1.2.2.0, as used on Schneider Electric SAGE RTU devices before J2 and other devices, does not properly generate TCP initial sequence number (ISN) values, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T01:00:00.000Z
CVE-2015-3964 
SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T16:00:00.000Z
CVE-2015-3965 
Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.
Problem types: description: Other
Affected products: vendor: Hospira
product: Symbiq Infusion System
Published: 2019-03-23T19:23:49.000Z
CVE-2015-3966 
The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-30T14:00:00.000Z
CVE-2015-3967 
Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attackers to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3968 
The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3969 
Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection information via a request to UDP port (1) 1234 or (2) 1235.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3970 
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3971 
The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3972 
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3973 
Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-28T10:00:00.000Z
CVE-2015-3974 
EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-28T01:00:00.000Z
CVE-2015-3976 GE Multilink Cross-site Scripting
Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: GE
product: Multilink ML800/1200/1600/2400
default_status: unaffected
vendor: GE
product: ML810/3000/3100 series switch
default_status: unaffected
Credits: lang: en
value: Eireann Leverett of IOActive
Published: 2017-08-28T15:00:00.000Z
CVE-2015-3977 
Buffer overflow in Schneider Electric IMT25 Magnetic Flow DTM before 1.500.004 for the HART Protocol allows remote authenticated users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HART reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-15T02:00:00.000Z
CVE-2015-3978 
SAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and passwords via the DataVault, aka SAP Security Note 2094830.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T20:00:00.000Z
CVE-2015-3979 
Unspecified vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T20:00:00.000Z
CVE-2015-3980 
SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T20:00:00.000Z
CVE-2015-3981 
SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T20:00:00.000Z
CVE-2015-3982 
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-02T14:00:00.000Z
CVE-2015-3983 
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.  NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-14T14:00:00.000Z
CVE-2015-3986 
Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to hijack the authentication of administrators for requests that conduct directory traversal attacks via the tcp_box_path parameter in the checkout_editor_settings page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-14T14:00:00.000Z
CVE-2015-3987 
Multiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2) Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-14T14:00:00.000Z
CVE-2015-3988 
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-19T18:00:00.000Z
CVE-2015-3989 
Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T18:00:00.000Z
CVE-2015-3990 
The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands via vectors related to configuration.
Problem types: description: Other
Affected products: vendor: n/a
product: n/a
Published: 2015-05-20T18:00:00.000Z
CVE-2015-3991 
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T20:00:00.000Z
CVE-2015-3993 
Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions and execute an UPDATE statement by referencing a table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-13T14:00:00.000Z
CVE-2015-3994 
The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-3995 
SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-29T15:00:00.000Z
CVE-2015-3996 
The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used in the ownCloud iOS Library, disables verification of a server hostname against the domain name in the subject's Common Name (CN) of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-27T16:00:00.000Z
CVE-2015-3998 
Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-17T14:00:00.000Z
CVE-2015-3999 
Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-20T18:00:00.000Z
CVE-2015-4000 
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-21T00:00:00.000Z
CVE-2015-4001 
Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-07T23:00:00.000Z
CVE-2015-4002 
drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-07T23:00:00.000Z
CVE-2015-4003 
The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-07T23:00:00.000Z
CVE-2015-4004 
The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-07T23:00:00.000Z
CVE-2015-4010 
Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the iframe_url parameter in an Update Page action in the conformconf page to wp-admin/options-general.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-09T14:00:00.000Z
CVE-2015-4016 
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-20T18:00:00.000Z
CVE-2015-4017 
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-25T18:00:00.000Z
CVE-2015-4018 
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the link_ids[] parameter in an Update action in the syndication.php page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-21T20:00:00.000Z
CVE-2015-4020 
RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that is suffixed with the original domain name, aka a "DNS hijack attack." NOTE: this vulnerability exists because to an incomplete fix for CVE-2015-3900.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-25T17:00:00.000Z