rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4704 
libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted .ogg file, related to the vorbis_floor0_decode function.  NOTE: this might overlap CVE-2011-0480.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-22T21:00:00.000Z
CVE-2010-4705 
Integer overflow in the vorbis_residue_decode_internal function in libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types.  NOTE: this might overlap CVE-2011-0480.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-22T21:00:00.000Z
CVE-2010-4706 
The pam_sm_close_session function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not properly handle a failure to determine a certain target uid, which might allow local users to delete unintended files by executing a program that relies on the pam_xauth PAM check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-24T18:00:00.000Z
CVE-2010-4707 
The check_acl function in pam_xauth.c in the pam_xauth module in Linux-PAM (aka pam) 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service (resource consumption) via a special file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-24T18:00:00.000Z
CVE-2010-4708 
The pam_env module in Linux-PAM (aka pam) 1.1.2 and earlier reads the .pam_environment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pam_env PAM check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-24T18:00:00.000Z
CVE-2010-4709 
Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a MODBUS response packet with a crafted length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T15:00:00.000Z
CVE-2010-4710 
Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a similar issue to CVE-2010-4569 and CVE-2010-4570.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-28T20:29:00.000Z
CVE-2010-4711 
Double free vulnerability in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4712 
Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Content-Type header containing (1) multiple items separated by ; (semicolon) characters or (2) crafted string data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4713 
Integer signedness error in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a signed integer value in the Content-Type header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4714 
Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post Office Agent, (2) gwmta.exe in the Message Transfer Agent, (3) gwia.exe in the Internet Agent, (4) the WebAccess Agent, or (5) the Monitor Agent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4715 
Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read arbitrary files via unspecified vectors.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4716 
Cross-site scripting (XSS) vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4717 
Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long (1) LIST or (2) LSUB command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-31T19:00:00.000Z
CVE-2010-4718 
Multiple cross-site scripting (XSS) vulnerabilities in the Lyftenbloggie (com_lyftenbloggie) component 1.1.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) tag and (2) category parameters to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-01T22:00:00.000Z
CVE-2010-4719 
Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-01T22:00:00.000Z
CVE-2010-4720 
SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the view item page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-01T22:00:00.000Z
CVE-2010-4721 
SQL injection vulnerability in news.php in Immo Makler allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-01T22:00:00.000Z
CVE-2010-4722 
Unspecified vulnerability in the fetch plugin in Smarty before 3.0.2 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4723 
Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4724 
Multiple unspecified vulnerabilities in the parser implementation in Smarty before 3.0.0 RC3 have unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4725 
Smarty before 3.0.0 RC3 does not properly handle an on value of the asp_tags option in the php.ini file, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4726 
Unspecified vulnerability in the math plugin in Smarty before 3.0.0 RC1 has unknown impact and remote attack vectors.  NOTE: this might overlap CVE-2009-1669.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4727 
Smarty before 3.0.0 beta 7 does not properly handle the <?php and ?> tags, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-03T16:00:00.000Z
CVE-2010-4728 
Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-08T21:00:00.000Z
CVE-2010-4729 
Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery (CSRF) attacks via multiple form submissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-08T21:00:00.000Z
CVE-2010-4730 
Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-14T23:00:00.000Z
CVE-2010-4731 
Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a full pathname in the file parameter, a different vulnerability than CVE-2009-4463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-14T23:00:00.000Z
CVE-2010-4732 
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page's GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-14T23:00:00.000Z
CVE-2010-4733 
WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a different vulnerability than CVE-2009-4463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-14T23:00:00.000Z
CVE-2010-4734 
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Email parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4735 
SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote attackers to execute arbitrary SQL commands via the d parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4736 
SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECO_ID parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4737 
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4738 
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4739 
SQL injection vulnerability in the Maian Media Silver (com_maianmedia) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a music action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4740 
Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-16T01:00:00.000Z
CVE-2010-4741 
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a session on TCP port 54321.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T17:00:00.000Z
CVE-2010-4742 
Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFileName property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T17:00:00.000Z
CVE-2010-4743 
Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T18:00:00.000Z
CVE-2010-4744 
Multiple unspecified vulnerabilities in abcm2ps before 5.9.13 have unknown impact and attack vectors, a different issue than CVE-2010-3441.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-18T18:00:00.000Z
CVE-2010-4745 
Cross-site scripting (XSS) vulnerability in nav.html in PHPXref before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-21T18:00:00.000Z
CVE-2010-4746 
Multiple memory leaks in the normalization functionality in 389 Directory Server before 1.2.7.5 allow remote attackers to cause a denial of service (memory consumption) via "badly behaved applications," related to (1) Slapi_Attr mishandling in the DN normalization code and (2) pointer mishandling in the syntax normalization code, a different issue than CVE-2011-0019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-02-23T18:00:00.000Z
CVE-2010-4747 
Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pluginurl parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4748 
Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4749 
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4750 
Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4751 
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the id parameter in an edituser action, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4752 
SQL injection vulnerability in LightNEasy.php in LightNEasy 3.2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter, a different vector than CVE-2008-6593, CVE-2010-3484, and CVE-2010-3485.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4753 
Cross-site scripting (XSS) vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-01T21:00:00.000Z
CVE-2010-4754 
The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-02T19:00:00.000Z
CVE-2010-4755 
The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-02T19:00:00.000Z
CVE-2010-4756 
The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-02T19:00:00.000Z
CVE-2010-4757 
Cross-site scripting (XSS) vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews_title parameter, a different vector than CVE-2008-6208.  NOTE: some of these details are obtained from third party information.  NOTE: this might be the same as CVE-2009-4083.1 or CVE-2011-0457.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-15T17:00:00.000Z
CVE-2010-4758 
installer.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4759 
Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service (daemon hang) via a fulltext search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4760 
Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4761 
The customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the (1) responsible, (2) owner, (3) accounted time, (4) pending until, and (5) lock fields by reading this dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4762 
Cross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request System (OTRS) before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4763 
The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the (1) Status, (2) Service, and (3) Queue via selections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4764 
Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were based on revoked PGP or GPG keys, which makes it easier for remote attackers to spoof e-mail communication by leveraging a key that has a revocation signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4765 
Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z
CVE-2010-4766 
The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a standard e-mail client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-03-18T16:00:00.000Z