rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-8965 
An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T18:00:00.000Z
CVE-2018-8966 
An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T18:00:00.000Z
CVE-2018-8967 
An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T18:00:00.000Z
CVE-2018-8968 
An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldflv parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T18:00:00.000Z
CVE-2018-8969 
An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter in an action=modify request. This can be leveraged for database access by deleting install.lock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T18:00:00.000Z
CVE-2018-8970 
The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes silent omission of hostname verification, and consequently allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. NOTE: the LibreSSL documentation indicates that this special case is supported, but the BoringSSL documentation does not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T21:00:00.000Z
CVE-2018-8971 
The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing in unintended users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T21:00:00.000Z
CVE-2018-8972 
Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T22:00:00.000Z
CVE-2018-8973 
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.php?mudi=add request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-24T22:00:00.000Z
CVE-2018-8974 
Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line. Fix released on 2018-03-28.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-26T06:00:00.000Z
CVE-2018-8975 
The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8976 
In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds read) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T00:00:00.000Z
CVE-2018-8977 
In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service (invalid memory access) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8978 
Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T19:00:00.000Z
CVE-2018-8979 
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T19:00:00.000Z
CVE-2018-8988 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002008.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8989 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8990 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8991 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8992 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002005.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8993 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002001.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8994 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002003.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8995 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8996 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002007.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8997 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002004.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8998 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-8999 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9000 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9001 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9002 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9003 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9004 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9005 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9006 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9007 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9009 
In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T03:00:00.000Z
CVE-2018-9010 
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T18:00:00.000Z
CVE-2018-9014 
dsmall v20180320 allows physical path leakage via a public/index.php/home/predeposit/index.html?pdr_sn= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T18:00:00.000Z
CVE-2018-9015 
dsmall v20180320 allows XSS via the public/index.php/home/predeposit/index.html pdr_sn parameter (aka the CMS search box).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T18:00:00.000Z
CVE-2018-9016 
dsmall v20180320 allows XSS via the main page search box at the public/index.php/home URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T18:00:00.000Z
CVE-2018-9017 
dsmall v20180320 allows XSS via the member search box at the public/index.php/home/membersnsfriend/findlist.html URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T18:00:00.000Z
CVE-2018-9018 
In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-25T21:00:00.000Z
CVE-2018-9019 
SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-05-22T20:00:00.000Z
CVE-2018-9020 
The Events Manager plugin before 5.8.1.2 for WordPress allows XSS via the events-manager.js mapTitle parameter in the Google Maps miniature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-26T02:00:00.000Z
CVE-2018-9021 
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially crafted requests.
Problem types: description: Authentication Bypass
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9022 
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poisoning a configuration file.
Problem types: description: Authentication Bypass
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9023 
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted arguments to the update_crld script.
Problem types: description: Improper Input Validation
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9024 
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file.
Problem types: description: Improper Authentication
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9025 
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input.
Problem types: description: Improper Input Validation
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9026 
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
Problem types: description: Session Fixation
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9027 
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted link.
Problem types: description: Cross-site Scripting
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9028 
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
Problem types: description: Weak Cryptography for Passwords
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9029 
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
Problem types: description: Improper Input Validation
Affected products: vendor: CA Technologies
product: CA Privileged Access Manager
Published: 2018-06-18T18:00:00.000Z
CVE-2018-9031 
The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an "if(pwd ==" line in the HTML source code. This means, in effect, that authentication occurs only on the client side.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-29T16:00:00.000Z
CVE-2018-9032 
An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9034 
Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-04T19:00:00.000Z
CVE-2018-9035 
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-04T19:00:00.000Z
CVE-2018-9036 
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-06-20T15:00:00.000Z
CVE-2018-9037 
Monstra CMS 3.0.4 allows remote code execution via an upload_file request for a .zip file, which is automatically extracted and may contain .php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T18:00:00.000Z
CVE-2018-9038 
Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T18:00:00.000Z
CVE-2018-9039 
In Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit permissions, can scope some variables to targets greater than their permissions should allow. In other words, they can see machines beyond their team's scoped environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9040 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9041 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402004.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9042 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9043 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9044 
In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9045 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002849.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9046 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9047 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002841.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z
CVE-2018-9048 
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-27T03:00:00.000Z