rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-27919 
archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T00:00:13.000Z
CVE-2021-27921 
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T08:41:57.000Z
CVE-2021-27922 
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T08:41:50.000Z
CVE-2021-27923 
Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T08:41:40.000Z
CVE-2021-27924 
An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T19:01:24.000Z
CVE-2021-27925 
An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T18:57:30.000Z
CVE-2021-27927 
In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method. An attacker doesn't have to know Zabbix user login credentials, but has to know the correct Zabbix URL and contact information of an existing user with sufficient privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T00:00:00.000Z
CVE-2021-27928 
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T02:46:44.000Z
CVE-2021-27930 
Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated (or compromised) user to inject malicious JavaScript in folder/file name within the application in order to grab other users’ sessions or execute malicious code in their browsers (1-click RCE).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R
version: 3.1
Published: 2021-07-06T11:43:17.000Z
CVE-2021-27931 
LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T19:38:12.000Z
CVE-2021-27932 
Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-25T00:00:00.000Z
CVE-2021-27933 
pfSense 2.5.0 allows XSS via the services_wol_edit.php Description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-28T06:30:59.000Z
CVE-2021-27935 
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T19:37:13.000Z
CVE-2021-27938 
A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-16T15:09:39.000Z
CVE-2021-27940 
resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T22:00:05.000Z
CVE-2021-27941 
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T20:31:53.000Z
CVE-2021-27942 
Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T17:09:52.000Z
CVE-2021-27943 
The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vulnerable to a brute-force attack (against only 10000 possibilities), allowing a threat actor to forcefully pair the device, leading to remote control of the TV settings and configurations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-02T20:41:58.000Z
CVE-2021-27944 
Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access controls, allowing an unauthenticated threat actor to access privileged functionality, leading to OS command execution. The specific attack methodology is a file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T11:23:00.000Z
CVE-2021-27945 
The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who views the relevant application content. The attacker-supplied code can perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their keystrokes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-08T16:53:56.000Z
CVE-2021-27946 
SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:08:09.000Z
CVE-2021-27947 
SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:10:33.000Z
CVE-2021-27948 
SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:13:33.000Z
CVE-2021-27949 
Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T17:19:11.000Z
CVE-2021-27950 
A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T14:26:04.000Z
CVE-2021-27952 
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T14:31:18.000Z
CVE-2021-27953 
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forcing the device to reboot via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T14:36:41.000Z
CVE-2021-27954 
A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T14:26:39.000Z
CVE-2021-27956 
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T17:55:22.000Z
CVE-2021-27961 
evesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-07-09T00:00:00.000Z
CVE-2021-27962 
Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T13:55:39.000Z
CVE-2021-27963 
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T01:37:36.000Z
CVE-2021-27964 
SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T01:37:20.000Z
CVE-2021-27965 
The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T01:53:46.000Z
CVE-2021-27969 
Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-23T13:24:16.000Z
CVE-2021-27971 
Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T07:06:51.000Z
CVE-2021-27973 
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T18:19:28.000Z
CVE-2021-27983 
Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-10T18:14:32.000Z
CVE-2021-27984 
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-10T18:40:01.000Z
CVE-2021-27989 
Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T11:45:27.000Z
CVE-2021-27990 
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T13:56:38.000Z
CVE-2021-27999 
A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T13:50:13.000Z
CVE-2021-28000 
A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T13:50:15.000Z
CVE-2021-28001 
A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting https://site.com/articles/welcome-to-your-site#comments-head.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T13:50:16.000Z
CVE-2021-28002 
A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T13:50:17.000Z
CVE-2021-28006 
Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-09T13:01:38.000Z
CVE-2021-28007 
Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T12:27:59.000Z
CVE-2021-28021 
Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-15T00:00:00.000Z
CVE-2021-28022 
Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T14:28:50.000Z
CVE-2021-28023 
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T14:28:57.000Z
CVE-2021-28024 
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T14:29:04.000Z
CVE-2021-28025 
Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2021-28026 
jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T13:17:38.000Z
CVE-2021-28027 
An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:40:52.000Z
CVE-2021-28028 
An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:40:40.000Z
CVE-2021-28029 
An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:38:07.000Z
CVE-2021-28030 
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:40:29.000Z
CVE-2021-28031 
An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:40:15.000Z
CVE-2021-28032 
An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow<Idx> behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:40:02.000Z
CVE-2021-28033 
An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:38:21.000Z
CVE-2021-28034 
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:39:46.000Z
CVE-2021-28035 
An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of uninitialized memory can occur upon a val.clone() panic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:39:33.000Z
CVE-2021-28036 
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:38:51.000Z
CVE-2021-28037 
An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T08:38:34.000Z
CVE-2021-28038 
An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T00:00:00.000Z
CVE-2021-28039 
An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T00:00:00.000Z
CVE-2021-28040 
An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T17:46:34.000Z
CVE-2021-28041 
ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T19:07:34.000Z
CVE-2021-28042 
Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-05T21:43:59.000Z
CVE-2021-28047 
Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T20:01:35.000Z
CVE-2021-28048 
An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T19:37:02.000Z