rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-15008 
A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the probe implementation to save data to a custom table exists due to inadequate server side validation. As the code creates dynamic SQL for the insert statement and utilizes the user supplied table name with little validation, the table name can be modified to allow arbitrary update commands to be run. Usage of other SQL injection techniques such as timing attacks, it is possible to perform full data extraction as well. Patched in 2020.7 and in a hotfix for 2019.12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T19:39:30.000Z
CVE-2020-15009 
AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX and UX550GEX) could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-20T12:42:03.000Z
CVE-2020-15011 
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T11:34:56.000Z
CVE-2020-15012 
A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-12T20:35:01.000Z
CVE-2020-15014 
pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T12:13:49.000Z
CVE-2020-15015 
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T14:23:50.000Z
CVE-2020-15016 
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the txt GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-26T13:09:28.000Z
CVE-2020-15017 
NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the sta GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-26T13:08:35.000Z
CVE-2020-15018 
playSMS through 1.4.3 is vulnerable to session fixation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T12:37:43.000Z
CVE-2020-15020 
An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated attacker can achieve stored XSS via the Name Your Template field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-31T12:27:55.000Z
CVE-2020-15023 
Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exchange. By capturing an attempted (and even failed) WPS authentication attempt, it is possible to brute force the overall authentication exchange. This allows an attacker to obtain the recovered WPS PIN in minutes or even seconds, and eventually obtain the Wi-Fi PSK key, gaining access to the Wi=Fi network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T15:23:35.000Z
CVE-2020-15024 
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-10T17:10:42.000Z
CVE-2020-15025 
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:H/S:U/UI:N
version: 3.1
Published: 2020-06-24T18:04:39.000Z
CVE-2020-15026 
Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T18:42:51.000Z
CVE-2020-15027 
ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-16T14:39:04.000Z
CVE-2020-15028 
NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:37:21.000Z
CVE-2020-15029 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:36:09.000Z
CVE-2020-15030 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:35:14.000Z
CVE-2020-15031 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php chg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:34:16.000Z
CVE-2020-15032 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Incidents.php id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:33:20.000Z
CVE-2020-15033 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:31:51.000Z
CVE-2020-15034 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Setup.php tet parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:29:03.000Z
CVE-2020-15035 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Monitoring-Map.php hde parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:27:23.000Z
CVE-2020-15036 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T14:04:09.000Z
CVE-2020-15037 
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T14:02:52.000Z
CVE-2020-15038 
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T19:58:59.000Z
CVE-2020-15041 
PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T20:33:34.000Z
CVE-2020-15043 
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T17:48:37.000Z
CVE-2020-15046 
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users. The fixed versions are BIOS 3.2 and firmware 03.88.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-24T22:25:57.000Z
CVE-2020-15047 
MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-25T10:49:09.000Z
CVE-2020-15049 
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing "+\ "-" or an uncommon shell whitespace character prefix to the length field-value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N
version: 3.1
Published: 2020-06-30T17:55:55.000Z
CVE-2020-15050 
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-13T20:16:58.000Z
CVE-2020-15051 
An issue was discovered in Artica Proxy before 4.30.000000. Stored XSS exists via the Server Domain Name, Your Email Address, Group Name, MYSQL Server, Database, MYSQL Username, Group Name, and Task Description fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-15T20:02:29.000Z
CVE-2020-15052 
An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-20T16:37:56.000Z
CVE-2020-15053 
An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-20T16:38:03.000Z
CVE-2020-15054 
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:14:13.000Z
CVE-2020-15055 
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:16:57.000Z
CVE-2020-15056 
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:18:41.000Z
CVE-2020-15057 
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to denial-of-service the device via long input values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:20:01.000Z
CVE-2020-15058 
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:21:06.000Z
CVE-2020-15059 
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:22:04.000Z
CVE-2020-15060 
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:22:51.000Z
CVE-2020-15061 
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:23:37.000Z
CVE-2020-15062 
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:24:52.000Z
CVE-2020-15063 
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:26:05.000Z
CVE-2020-15064 
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:27:00.000Z
CVE-2020-15065 
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to denial-of-service the device via long input values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T21:27:49.000Z
CVE-2020-15069 
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-06-29T17:30:18.000Z
CVE-2020-15070 
Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-21T04:28:55.000Z
CVE-2020-15071 
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-11T17:24:08.000Z
CVE-2020-15072 
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Administrators section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-08T19:24:34.000Z
CVE-2020-15073 
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section via upload of an edited text document. This also affects the Subscriber Lists section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-08T19:22:07.000Z
CVE-2020-15074 
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.
Problem types: cwe_id: CWE-302
description: CWE-302: Authentication Bypass by Assumed-Immutable Data
Affected products: vendor: n/a
product: OpenVPN Access Server
Published: 2020-07-14T17:27:31.000Z
CVE-2020-15075 
OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp.
Problem types: cwe_id: CWE-61
description: CWE-61: UNIX Symbolic Link (Symlink) Following
Affected products: vendor: n/a
product: OpenVPN Connect
Published: 2021-03-30T13:38:02.000Z
CVE-2020-15076 
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp.
Problem types: cwe_id: CWE-61
description: CWE-61: UNIX Symbolic Link (Symlink) Following
Affected products: vendor: n/a
product: Private Tunnel
Published: 2021-05-26T18:17:57.000Z
CVE-2020-15077 
OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Problem types: cwe_id: CWE-305
description: CWE-305: Authentication Bypass by Primary Weakness
Affected products: vendor: n/a
product: OpenVPN Access Server
Published: 2021-06-04T10:42:01.000Z
CVE-2020-15078 
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Problem types: cwe_id: CWE-305
description: CWE-305: Authentication Bypass by Primary Weakness
Affected products: vendor: n/a
product: OpenVPN
Published: 2021-04-26T13:19:45.000Z
CVE-2020-15079 Improper access control in PrestaShop
In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: PrestaShop
product: PrestaShop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
version: 3.1
Published: 2020-07-02T16:45:24.000Z
CVE-2020-15080 Information disclosure in release archive in PrestaShop
In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible workaround is to make sure `composer.json` and `docker-compose.yml` are not accessible on your server.
Problem types: cwe_id: CWE-200
description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: PrestaShop
product: PrestaShop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2020-07-02T16:45:19.000Z
CVE-2020-15081 Information exposure in the upload directory in PrestaShop
In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.php file in the upload directory.
Problem types: cwe_id: CWE-548
description: CWE-548: Exposure of Information Through Directory Listing
Affected products: vendor: PrestaShop
product: PrestaShop
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2020-07-02T16:45:13.000Z
CVE-2020-15082 External control of configuration setting in the dashboard in PrestaShop
In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables. The problem is fixed in 1.7.6.6
Problem types: description: https://cwe.mitre.org/data/definitions/15.html
Affected products: vendor: PrestaShop
product: PrestaShop
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
version: 3.1
Published: 2020-07-02T16:50:17.000Z
CVE-2020-15083 Reflected XSS when uploading an image in the Product page in PrestaShop
In PrestaShop from version 1.7.0.0 and before version 1.7.6.6, if a target sends a corrupted file, it leads to a reflected XSS. The problem is fixed in 1.7.6.6
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: PrestaShop
product: PrestaShop
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2020-07-02T16:50:12.000Z