rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14604 
GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T08:00:00.000Z
CVE-2017-14607 
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T17:00:00.000Z
CVE-2017-14608 
In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T17:00:00.000Z
CVE-2017-14609 
The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by bearerbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2017-14610 
bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2017-14611 
SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T15:00:00.000Z
CVE-2017-14612 
"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-12T16:00:00.000Z
CVE-2017-14614 
Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z
CVE-2017-14615 
An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the context of any logged in user in the Web UI visiting "Traffic Monitor" sections "Events" and "All." As a side effect, no further events will be visible in the Traffic Monitor until the device is restarted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T20:00:00.000Z
CVE-2017-14616 
An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login attempts, UI management of the device becomes impossible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T20:00:00.000Z
CVE-2017-14617 
In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T21:00:00.000Z
CVE-2017-14618 
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T21:00:00.000Z
CVE-2017-14619 
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T21:00:00.000Z
CVE-2017-14620 
SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T15:00:00.000Z
CVE-2017-14621 
Portus 2.2.0 has XSS via the Team field, related to typeahead.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T23:00:00.000Z
CVE-2017-14622 
Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-27T17:00:00.000Z
CVE-2017-14623 
In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: (1) it relies only on the return error of the Bind function call to determine whether a user is authorized (i.e., a nil return value is interpreted as successful authorization) and (2) it is used with an LDAP server allowing unauthenticated bind.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T23:00:00.000Z
CVE-2017-14624 
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T05:00:00.000Z
CVE-2017-14625 
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T05:00:00.000Z
CVE-2017-14626 
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T05:00:00.000Z
CVE-2017-14627 
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-23T20:00:00.000Z
CVE-2017-14628 
In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14629 
In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14630 
In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14631 
In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14632 
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14633 
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14634 
In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T07:00:00.000Z
CVE-2017-14635 
In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T13:00:00.000Z
CVE-2017-14636 
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T07:00:00.000Z
CVE-2017-14637 
In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T07:00:00.000Z
CVE-2017-14638 
AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14639 
AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14640 
A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14641 
A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14642 
A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14643 
The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14644 
A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14645 
A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14646 
The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14647 
A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14648 
A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14649 
ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14650 
A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T17:00:00.000Z
CVE-2017-14651 
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T18:00:00.000Z
CVE-2017-14652 
SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T19:00:00.000Z
CVE-2017-14653 
member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T07:00:00.000Z
CVE-2017-14680 
ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T22:00:00.000Z
CVE-2017-14681 
The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for p3scan.pid modification before a root script executes a "kill `cat /pathname/p3scan.pid`" command, as demonstrated by etc/init.d/p3scan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T22:00:00.000Z
CVE-2017-14682 
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-21T22:00:00.000Z
CVE-2017-14683 
geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T08:00:00.000Z
CVE-2017-14684 
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T01:00:00.000Z
CVE-2017-14685 
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61" on Windows. This occurs because xps_load_links_in_glyphs in xps/xps-link.c does not verify that an xps font could be loaded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T06:00:00.000Z
CVE-2017-14686 
Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d" on Windows. This occurs because read_zip_dir_imp in fitz/unzip.c does not check whether size fields in a ZIP entry are negative numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T06:00:00.000Z
CVE-2017-14687 
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name comparisons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T06:00:00.000Z
CVE-2017-14688 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Read Access Violation starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d917."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14689 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000328e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14690 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from Faulting Address controls subsequent Write Address starting at STDUJBIG2File!DllGetClassObject+0x00000000000064e7."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14691 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_773a0000!RtlAddAccessAllowedAce+0x000000000000027a."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14692 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at STDUJBIG2File!DllGetClassObject+0x000000000000653b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14693 
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at DJVU!GetPlugInInfo+0x000000000001c613."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T08:00:00.000Z
CVE-2017-14694 
Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to execute arbitrary code or cause a denial of service via a crafted .pdf file, related to "Data from Faulting Address controls Code Flow starting at tiptsf!CPenInputPanel::FinalRelease+0x000000000000002f.".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-22T19:00:00.000Z
CVE-2017-14695 
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T17:00:00.000Z
CVE-2017-14696 
SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-24T17:00:00.000Z