rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14303 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x0000000000003047."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14304 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllGetClassObject+0x00000000000043e0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14305 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at STDUJBIG2File!DllUnregisterServer+0x0000000000005578."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14306 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006e10."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14307 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77400000!TpAllocCleanupGroup+0x0000000000000402."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14308 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ddd."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14309 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000006ec8."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14310 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to a "Read Access Violation starting at STDUJBIG2File!DllUnregisterServer+0x0000000000001869."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T18:00:00.000Z
CVE-2017-14311 
The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T16:00:00.000Z
CVE-2017-14312 
Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this file is owned by a non-root account (and similarly can have nagios.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-11T22:00:00.000Z
CVE-2017-14313 
The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T00:00:00.000Z
CVE-2017-14314 
Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and application crash) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T00:00:00.000Z
CVE-2017-14315 
In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attacker can use this overflow to gain full control of the device through the relatively high privileges of the Bluetooth stack in iOS. The attack bypasses Bluetooth access control; however, the default "Bluetooth On" value must be present in Settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T15:00:00.000Z
CVE-2017-14316 
A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node >= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T15:00:00.000Z
CVE-2017-14317 
A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it (including domain creation / destruction, ballooning, device changes, etc.).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T15:00:00.000Z
CVE-2017-14318 
An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as `DOMID_XEN`, `DOMID_IO` and `DOMID_COW` are created without grant tables. Hence, if __gnttab_cache_flush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T15:00:00.000Z
CVE-2017-14319 
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were taken into account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T15:00:00.000Z
CVE-2017-14320 
Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T16:00:00.000Z
CVE-2017-14321 
Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T16:00:00.000Z
CVE-2017-14322 
The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-18T18:00:00.000Z
CVE-2017-14323 
SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T15:00:00.000Z
CVE-2017-14324 
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14325 
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14326 
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14327 
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14328 
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14329 
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14330 
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14331 
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14332 
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-23T08:00:00.000Z
CVE-2017-14333 
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during "readelf -a" execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14335 
On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T08:00:00.000Z
CVE-2017-14337 
When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access as an arbitrary user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T16:00:00.000Z
CVE-2017-14339 
The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinite loop. This can cause high CPU usage and makes the server unresponsive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T16:00:00.000Z
CVE-2017-14340 
The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-15T11:00:00.000Z
CVE-2017-14341 
ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T17:00:00.000Z
CVE-2017-14342 
ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T17:00:00.000Z
CVE-2017-14343 
ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T17:00:00.000Z
CVE-2017-14344 
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T18:00:00.000Z
CVE-2017-14345 
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T18:00:00.000Z
CVE-2017-14346 
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T18:00:00.000Z
CVE-2017-14347 
NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T19:00:00.000Z
CVE-2017-14348 
LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-12T19:00:00.000Z
CVE-2017-14349 
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T14:00:00.000Z
CVE-2017-14350 
A potential security vulnerability has been identified in HPE Application Performance Management (BSM) Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution.
Problem types: description: Remote Code Execution
Affected products: vendor: Micro Focus
product: HPE Application Performance Management (APM)
Published: 2017-09-29T15:00:00.000Z
CVE-2017-14351 
A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T19:00:00.000Z
CVE-2017-14352 
A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T19:00:00.000Z
CVE-2017-14353 
A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T15:00:00.000Z
CVE-2017-14354 
A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-05T15:00:00.000Z
CVE-2017-14355 
A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability could be exploited locally to allow escalation of privilege.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-05T21:00:00.000Z
CVE-2017-14356 
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow SQL injection.
Problem types: description: SQL Injection
Affected products: vendor: Micro Focus
product: HP ArcSight ESM
vendor: Micro Focus
product: HP ArcSight ESM Express
Published: 2017-10-31T15:00:00.000Z
CVE-2017-14357 
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting (XSS)
Problem types: description: Reflected and Stored Cross-Site Scripting (XSS)
Affected products: vendor: Micro Focus
product: HP ArcSight ESM
vendor: Micro Focus
product: HP ArcSight ESM Express
Published: 2017-10-31T15:00:00.000Z
CVE-2017-14358 
A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow URL redirection to untrusted site.
Problem types: description: URL redirection
Affected products: vendor: Micro Focus
product: HP ArcSight ESM
vendor: Micro Focus
product: HP ArcSight ESM Express
Published: 2017-10-31T15:00:00.000Z
CVE-2017-14359 MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)
A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting.
Problem types: description: Remote Cross-Site Scripting
Affected products: vendor: Micro Focus
product: HPE Performance Center
Credits: lang: en
value: Micro Focus would like to thank Pawel Bartunek for reporting this issue to security-alert@hpe.com
Published: 2017-11-03T18:00:00.000Z
CVE-2017-14360 MFSBGN03791 rev.1 - HPE Content Manager Workgroup Service, Denial of Service (DoS)
A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow Denial of Service (DoS).
Problem types: description: Denial of Service (DoS)
Affected products: vendor: Micro Focus
product: HPE Content Manager Workgroup Service
Credits: lang: en
value: Micro Focus would like to thank Honggang Ren of Fortinet's FortiGuard Labs for reporting this issue to security-alert@hpe.com
Published: 2017-11-08T14:00:00.000Z
CVE-2017-14361 MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.
Problem types: description: Man-In-The-Middle attack (MitM)
Affected products: vendor: Micro Focus
product: Project and Portfolio Management Center
Credits: lang: en
value: Micro Focus would like to thank Xiaoran Wang for reporting this issue to security-alert@hpe.com
Published: 2017-12-13T01:00:00.000Z
CVE-2017-14362 MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Micro Focus
product: Project and Portfolio Management Center
Credits: lang: en
value: Micro Focus would like to thank Xiaoran Wang for reporting this issue to security-alert@hpe.com
Published: 2017-12-13T01:00:00.000Z
CVE-2017-14363 MFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) vulnerability has been identified in Micro Focus Operations Manager i, versions 10.60, 10.61, 10.62. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS).
Problem types: description: Cross-Site Scripting (XSS)
Affected products: vendor: Micro Focus
product: Operations Manager i
Credits: lang: en
value: Micro Focus would like to thank Vahagn Vardanyan for reporting this issue to security-alert@hpe.com
Published: 2017-12-21T22:00:00.000Z
CVE-2017-14369 
RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Archer user may potentially exploit this vulnerability to elevate their privileges and export certain application records.
Problem types: description: Privilege Escalation Vulnerability
Affected products: vendor: n/a
product: RSA Archer GRC Platform prior to 6.2.0.5
Published: 2017-10-11T19:00:00.000Z
CVE-2017-14370 
RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An authenticated attacker may potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.
Problem types: description: Stored Cross Site Scripting
Affected products: vendor: n/a
product: RSA Archer GRC Platform versions prior to 6.2.0.5
Published: 2017-10-11T19:00:00.000Z
CVE-2017-14371 
RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.
Problem types: description: Reflected Cross Site Scripting
Affected products: vendor: n/a
product: RSA Archer GRC Platform prior to 6.2.0.5
Published: 2017-10-11T19:00:00.000Z
CVE-2017-14372 
RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages. Attackers could potentially exploit this to execute arbitrary HTML in the user's browser session in the context of the affected RSA Archer application.
Problem types: description: Reflected Cross Site Scripting
Affected products: vendor: n/a
product: RSA Archer GRC Platform prior to 6.2.0.5
Published: 2017-10-11T19:00:00.000Z