rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-18037 
The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before 5.0.9 (the fixed version for 5.0.x), from version 5.1.0 before 5.1.8 (the fixed version for 5.1.x), from version 5.2.0 before 5.2.6 (the fixed version for 5.2.x), from version 5.3.0 before 5.3.4 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.2 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.1 (the fixed version for 5.5.x) and before 5.6.0 allows remote attackers to read arbitrary files via a path traversal vulnerability through the name of a git tag.
Problem types: description: Path Traversal
Affected products: vendor: Atlassian
product: Bitbucket Server
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18038 
The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name.
Problem types: description: Path Traversal
Affected products: vendor: Atlassian
product: Bitbucket Server
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18039 
The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18040 
The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18041 
The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18042 
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18043 
Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-31T20:00:00.000Z
CVE-2017-18044 
A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-19T17:00:00.000Z
CVE-2017-18045 
JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T07:00:00.000Z
CVE-2017-18046 
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-21T22:00:00.000Z
CVE-2017-18047 
Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-22T04:00:00.000Z
CVE-2017-18048 
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T06:00:00.000Z
CVE-2017-18049 
In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-23T06:00:00.000Z
CVE-2017-18050 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which is received from firmware, leads to potential buffer overwrite and out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18051 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event->vdev_id in wma_rcpi_event_handler(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18052 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18053 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fix_param->vdev_id in wma_p2p_lo_event_handler(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18054 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for num_vdev_mac_entries in wma_pdev_hw_mode_transition_evt_handler(), which is received from firmware, leads to potential buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18055 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wmi_event->num_vdev_mac_entries in wma_pdev_set_hw_mode_resp_evt_handler(), which is received from firmware, leads to potential buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18056 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_id in wma_unified_bcntx_status_event_handler() which is received from firmware leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18057 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wma_nlo_scan_cmp_evt_handler(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18058 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wow_buf_pkt_len in wma_wow_wakeup_host_event() which is received from firmware leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18059 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev id in wma_scan_event_callback(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18060 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for resp_event->vdev_id in wma_unified_bcntx_status_event_handler(), which is received from firmware, leads to potential out of bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18061 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen when processing AOA measurement event from WIGIG firmware in wil_aoa_evt_meas().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18062 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, potential buffer overflow can happen when processing UTF event in wma_process_utf_event().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18063 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for nlo_event in wma_nlo_match_evt_handler(), which is received from firmware, leads to potential out of bound memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18064 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for p2p_noa_info in wma_send_bcn_buf_ll() which is received from firmware leads to potential buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18065 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vent->vdev_id in wma_action_frame_filter_mac_event_handler(), which is received from firmware, leads to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18066 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper controls in MSM CORE leads to use memory after it is freed in msm_core_ioctl().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-16T22:00:00.000Z
CVE-2017-18067 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in lim_send_auth_mgmt_frame() leads to buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18068 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper buffer length calculation in wma_roam_scan_filter() leads to buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18069 
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper message length calculation in oem_cmd_handler() while processing a WLAN_NL_MSG_OEM netlink message leads to buffer overread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-15T21:00:00.000Z
CVE-2017-18070 
In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rsp_per_ndi_list" is very large which can then lead to a heap overwrite of the heap object end_rsp in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: Integer Overflow to Buffer Overflow in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-12T20:00:00.000Z
CVE-2017-18071 
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, debug policy can potentially be bypassed.
Problem types: description: Improper Access Control in Core
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-11T15:00:00.000Z
CVE-2017-18072 
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of which information elements is supported.
Problem types: description: Information Exposure in WLAN
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-11T15:00:00.000Z
CVE-2017-18073 
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A, SD 835, the HLOS can gain access to unauthorized memory.
Problem types: description: Improper Input Validation in TrustZone
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-11T15:00:00.000Z
CVE-2017-18074 
In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, SD 835, while playing a .wma file with modified media header with non-standard bytes per second parameter value, a reachable assert occurs.
Problem types: description: Improper Input Validation in Audio
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2018-04-11T15:00:00.000Z
CVE-2017-18075 
crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T10:00:00.000Z
CVE-2017-18076 
In strategy.rb in OmniAuth before 1.3.2, the authenticity_token value is improperly protected because POST (in addition to GET) parameters are stored in the session and become available in the environment of the callback phase.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-26T19:00:00.000Z
CVE-2017-18077 
index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-27T12:00:00.000Z
CVE-2017-18078 
systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks write access, as demonstrated by changing the ownership of the /etc/passwd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-29T05:00:00.000Z
CVE-2017-18079 
drivers/input/serio/i8042.c in the Linux kernel before 4.12.4 allows attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact because the port->exists value can change after it is validated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-29T05:00:00.000Z
CVE-2017-18080 
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18081 
The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the csrf token cookie.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18082 
The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a branch.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Bamboo
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18083 
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18084 
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18085 
The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the key parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Confluence
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18086 
Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuesURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-02T14:00:00.000Z
CVE-2017-18087 
The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter.
Problem types: description: Argument Injection
Affected products: vendor: Atlassian
product: Bitbucket Server
Published: 2018-02-15T13:00:00.000Z
CVE-2017-18088 
Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.6 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.6 (the fixed version for 5.5.x), from version 5.6.0 before 5.6.3 (the fixed version for 5.6.x), from version 5.7.0 before 5.7.1 (the fixed version for 5.7.x) and before 5.8.0 allow remote attackers to conduct clickjacking attacks via framing various resources that lacked clickjacking protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T13:00:00.000Z
CVE-2017-18089 
The view review history resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the invited reviewers for a review.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Crucible
Published: 2018-02-16T18:00:00.000Z
CVE-2017-18090 
Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a commit author.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye
Published: 2018-02-16T18:00:00.000Z
CVE-2017-18091 
The admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the filename of a backup.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-02-16T18:00:00.000Z
CVE-2017-18092 
The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of a comment on the snippet.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Crucible
Published: 2018-02-19T14:00:00.000Z
CVE-2017-18093 
Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the location setting of a configured repository.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2018-02-19T14:00:00.000Z