rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-19900 
An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying content type names in the content creation interface. An attacker could potentially craft a specialized content type name, then have an editor execute scripting when creating content, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer content types" permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T05:03:39.000Z
CVE-2019-19901 
An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying certain block descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when configuring a layout, aka XSS. This issue is mitigated by the fact that the attacker would be required to have the permission to create custom blocks, which is typically an administrative task.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T05:02:57.000Z
CVE-2019-19902 
An issue was discovered in Backdrop CMS 1.13.x before 1.13.5 and 1.14.x before 1.14.2. It allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, allowing non-configuration scripts to potentially be uploaded to the server. This issue is mitigated by the fact that the attacker would be required to have the "Synchronize, import, and export configuration" permission, a permission that only trusted administrators should be given. Other measures in the product prevent the execution of PHP scripts, so another server-side scripting language must be accessible on the server to execute code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T05:03:27.000Z
CVE-2019-19903 
An issue was discovered in Backdrop CMS 1.14.x before 1.14.2. It doesn't sufficiently filter output when displaying file type descriptions created by administrators. An attacker could potentially craft a specialized description, then have an administrator execute scripting when viewing the list of file types, aka XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the "Administer file types" permission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T05:03:11.000Z
CVE-2019-19905 
NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T17:39:24.000Z
CVE-2019-19906 
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T17:39:13.000Z
CVE-2019-19907 
HrAddFBBlock in libfreebusy/freebusyutil.cpp in Kopano Groupware Core before 8.7.7 allows out-of-bounds access, as demonstrated by mishandling of an array copy during parsing of ICal data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T00:00:00.000Z
CVE-2019-19908 
phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T12:47:14.000Z
CVE-2019-19909 
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T18:07:29.000Z
CVE-2019-19910 
The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 (1.35 and/or 1.34) mishandles certain HTML attributes, as demonstrated by IMG onmouseover= (impact is XSS) and IMG src=http (impact is disclosing the client's IP address). This can occur within a talk page topical header that is viewed within a mobile (MobileFrontend) context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T18:41:25.000Z
CVE-2019-19911 
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-05T21:57:24.000Z
CVE-2019-19912 
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-30T21:28:00.000Z
CVE-2019-19913 
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-30T21:26:28.000Z
CVE-2019-19915 
The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=eps_redirect_save and /admin-ajax.php?action=eps_redirect_delete actions. This could result in a loss of site availability, malicious redirects, and user infections. This could also be exploited via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-19T21:07:25.000Z
CVE-2019-19916 
In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the multipart/x-mixed-replace MIME type. This could result in script running where CSP should have blocked it, allowing for cross-site scripting (XSS) and other attacks when the product renders the content as HTML. Remediating this would also need to consider the polyglot case, e.g., a file that is a valid GIF image and also valid JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T15:07:12.000Z
CVE-2019-19917 
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T19:52:43.000Z
CVE-2019-19918 
Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T19:52:34.000Z
CVE-2019-19919 
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payloads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-20T22:50:39.000Z
CVE-2019-19920 
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval (rather than direct parsing and/or use of the taint feature). This issue is similar to CVE-2018-11805.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-22T17:07:31.000Z
CVE-2019-19921 
runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-12T00:00:00.000Z
CVE-2019-19922 
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-22T19:07:16.000Z
CVE-2019-19923 
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T15:43:33.000Z
CVE-2019-19924 
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T15:53:59.000Z
CVE-2019-19925 
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T16:03:07.000Z
CVE-2019-19926 
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T00:53:23.000Z
CVE-2019-19927 
In the Linux kernel 5.0.0-rc7 (as distributed in ubuntu/linux.git on kernel.ubuntu.com), mounting a crafted f2fs filesystem image and performing some operations can lead to slab-out-of-bounds read access in ttm_put_pages in drivers/gpu/drm/ttm/ttm_page_alloc.c. This is related to the vmwgfx or ttm module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-31T02:00:12.000Z
CVE-2019-19929 
An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner before 8.0.1 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded by the product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T01:40:00.000Z
CVE-2019-19930 
In libIEC61850 1.4.0, MmsValue_newOctetString in mms/iso_mms/common/mms_value.c has an integer signedness error that can lead to an attempted excessive memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T02:02:30.000Z
CVE-2019-19931 
In libIEC61850 1.4.0, MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T02:02:13.000Z
CVE-2019-19935 
Froala Editor before 3.2.3 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:40:15.000Z
CVE-2019-19937 
In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T19:45:36.000Z
CVE-2019-19940 
Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T15:10:31.000Z
CVE-2019-19941 
Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T15:19:52.000Z
CVE-2019-19942 
Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform DNS spoofing against the web interface via crafted hostnames in DHCP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T15:24:46.000Z
CVE-2019-19943 
The HTTP service in quickweb.exe in Pablo Quick 'n Easy Web Server 3.3.8 allows Remote Unauthenticated Heap Memory Corruption via a large host or domain parameter. It may be possible to achieve remote code execution because of a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-28T19:40:14.000Z
CVE-2019-19944 
In libIEC61850 1.4.0, BerDecoder_decodeUint32 in mms/asn1/ber_decode.c has an out-of-bounds read, related to intLen and bufPos.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T18:39:50.000Z
CVE-2019-19945 
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large negative Content-Length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T17:17:19.000Z
CVE-2019-19946 
The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-16T17:31:05.000Z
CVE-2019-19947 
In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-23T23:12:42.000Z
CVE-2019-19948 
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:07:19.000Z
CVE-2019-19949 
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:06:26.000Z
CVE-2019-19950 
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:07:10.000Z
CVE-2019-19951 
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:07:02.000Z
CVE-2019-19952 
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:06:41.000Z
CVE-2019-19953 
In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T00:06:51.000Z
CVE-2019-19954 
Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T14:07:20.000Z
CVE-2019-19956 
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T15:12:57.000Z
CVE-2019-19957 
In libIEC61850 1.4.0, getNumberOfElements in mms/iso_mms/server/mms_access_result.c has an out-of-bounds read vulnerability, related to bufPos and elementLength.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T21:58:29.000Z
CVE-2019-19958 
In libIEC61850 1.4.0, StringUtils_createStringFromBuffer in common/string_utilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T21:58:40.000Z
CVE-2019-19959 
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-03T21:37:42.000Z
CVE-2019-19960 
In wolfSSL before 4.3.0, wc_ecc_mulmod_ex does not properly resist side-channel attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T23:04:04.000Z
CVE-2019-19962 
wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T23:03:39.000Z
CVE-2019-19963 
An issue was discovered in wolfSSL before 4.3.0 in a non-default configuration where DSA is enabled. DSA signing uses the BEEA algorithm during modular inversion of the nonce, leading to a side-channel attack against the nonce.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-24T23:03:26.000Z
CVE-2019-19964 
On NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to the web-administration panel can access part of the web panel, bypassing authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T13:58:30.000Z
CVE-2019-19965 
In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-25T03:01:51.000Z
CVE-2019-19966 
In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-25T03:01:38.000Z
CVE-2019-19967 
The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-25T21:20:06.000Z
CVE-2019-19968 
PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-04T14:14:00.000Z
CVE-2019-19977 
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T00:07:49.000Z
CVE-2019-19979 
A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:26:32.000Z
CVE-2019-19980 
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users (Subscriber or greater access) to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wp_ajax function to send_test_email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:26:20.000Z
CVE-2019-19981 
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:26:06.000Z
CVE-2019-19982 
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send a /wp-admin/admin-post.php?es_skip=1&option_name= request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:25:44.000Z
CVE-2019-19983 
In the WordPress plugin, Fast Velocity Minify before 2.7.7, the full web root path to the running WordPress application can be discovered. In order to exploit this vulnerability, FVM Debug Mode needs to be enabled and an admin-ajax request needs to call the fastvelocity_min_files action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:25:30.000Z
CVE-2019-19984 
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:25:14.000Z
CVE-2019-19985 
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-12-26T02:25:00.000Z
CVE-2019-19986 
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary SQL SELECT statements by injecting the HTTP (POST or GET) parameter persoid into /tools/VamPersonPhoto.php. The SQL Injection type is Error-based (this means that relies on error messages thrown by the database server to obtain information about the structure of the database).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-26T15:18:05.000Z