rainbutterfly/cve_corpus huggingface dataset:
CVE-2016-4461 
Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-16T16:00:00.000Z
CVE-2016-4462 
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz 16.11.01
Problem types: description: Information Disclosure
Affected products: vendor: Apache Software Foundation
product: Apache OFBiz
Published: 2017-08-30T17:00:00.000Z
CVE-2016-4463 
Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-08T19:00:00.000Z
CVE-2016-4464 
The application plugins in Apache CXF Fediz 1.2.x before 1.2.3 and 1.3.x before 1.3.1 do not match SAML AudienceRestriction values against configured audience URIs, which might allow remote attackers to have bypass intended restrictions and have unspecified other impact via a crafted SAML token with a trusted signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-21T18:00:00.000Z
CVE-2016-4465 
The URLValidator class in Apache Struts 2 2.3.20 through 2.3.28.1 and 2.5.x before 2.5.1 allows remote attackers to cause a denial of service via a null value for a URL field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-04T22:00:00.000Z
CVE-2016-4467 
The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate when using the SChannel-based security layer, which allows man-in-the-middle attackers to spoof servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-02T14:00:00.000Z
CVE-2016-4468 
SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T15:00:00.000Z
CVE-2016-4469 
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin/addProxyConnector_commit.action, (2) new repositories via the token parameter to admin/addRepository_commit.action, (3) edit existing repositories via the token parameter to admin/editRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin/addLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin/saveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-28T16:00:00.000Z
CVE-2016-4470 
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-27T10:00:00.000Z
CVE-2016-4471 
ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-08T18:00:00.000Z
CVE-2016-4472 
The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-30T17:00:00.000Z
CVE-2016-4473 
/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code.  NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-06-08T20:00:00.000Z
CVE-2016-4474 
The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-30T16:00:00.000Z
CVE-2016-4475 
The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-19T21:00:00.000Z
CVE-2016-4476 
hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-4477 
wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-09T10:00:00.000Z
CVE-2016-4478 
Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-13T19:00:00.000Z
CVE-2016-4480 
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-18T14:00:00.000Z
CVE-2016-4482 
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4483 
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-11T16:00:00.000Z
CVE-2016-4484 
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-23T21:00:00.000Z
CVE-2016-4485 
The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4486 
The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-23T10:00:00.000Z
CVE-2016-4487 
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4488 
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4489 
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4490 
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4491 
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4492 
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4493 
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-02-24T20:00:00.000Z
CVE-2016-4494 
Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to hijack the authentication of unspecified victims for requests that disclose the contents of a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4495 
KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a configuration file via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4496 
Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-12T01:00:00.000Z
CVE-2016-4497 
Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-12T01:00:00.000Z
CVE-2016-4498 
Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-12T01:00:00.000Z
CVE-2016-4499 
Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-12T01:00:00.000Z
CVE-2016-4500 
Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by leveraging root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-01T15:00:00.000Z
CVE-2016-4501 
Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass authentication and make arbitrary configuration changes via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-31T01:00:00.000Z
CVE-2016-4502 
Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-31T01:00:00.000Z
CVE-2016-4503 
Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-12T01:00:00.000Z
CVE-2016-4504 
A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.
Problem types: description: CSRF
Affected products: vendor: n/a
product: Meteocontrol WEB'log
Published: 2017-03-21T16:00:00.000Z
CVE-2016-4505 
Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allow remote authenticated users to modify arbitrary passwords via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-31T01:00:00.000Z
CVE-2016-4506 
Cross-site request forgery (CSRF) vulnerability on Resource Data Management (RDM) Intuitive 650 TDB Controller devices before 2.1.24 allows remote authenticated users to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-31T01:00:00.000Z
CVE-2016-4507 
SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-06T14:00:00.000Z
CVE-2016-4508 
Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-06T14:00:00.000Z
CVE-2016-4509 
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T14:00:00.000Z
CVE-2016-4510 
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-09T10:00:00.000Z
CVE-2016-4511 
ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for local users to obtain sensitive cleartext information by leveraging read access to the ACTConfig configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4512 
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T14:00:00.000Z
CVE-2016-4513 
Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-26T01:00:00.000Z
CVE-2016-4514 
Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-19T20:00:00.000Z
CVE-2016-4516 
ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4518 
OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-19T20:00:00.000Z
CVE-2016-4519 
Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-25T01:00:00.000Z
CVE-2016-4520 
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-4521 
Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-31T01:00:00.000Z
CVE-2016-4522 
SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-28T01:00:00.000Z
CVE-2016-4523 
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-09T10:00:00.000Z
CVE-2016-4524 
ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4525 
Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-25T01:00:00.000Z
CVE-2016-4526 
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-09-19T01:00:00.000Z
CVE-2016-4527 
ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-10T01:00:00.000Z
CVE-2016-4528 
Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-25T01:00:00.000Z
CVE-2016-4529 
An unspecified ActiveX control in Schneider Electric SoMachine HVAC Programming Software for M171/M172 Controllers before 2.1.0 allows remote attackers to execute arbitrary code via unknown vectors, related to the INTERFACESAFE_FOR_UNTRUSTED_CALLER (aka safe for scripting) flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-15T16:00:00.000Z
CVE-2016-4530 
OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-19T20:00:00.000Z
CVE-2016-4531 
Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon a logout action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-28T01:00:00.000Z
CVE-2016-4532 
Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-09T10:00:00.000Z
CVE-2016-4533 
Heap-based buffer overflow in WECON LeviStudio allows remote attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-12T01:00:00.000Z
CVE-2016-4534 
The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-05T18:00:00.000Z
CVE-2016-4535 
Integer signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0, allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted packed executable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-05T18:00:00.000Z