# CVEs published 2021-05-07

105 CVEs were published on May 7, 2021: 1 critical, 35 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2021-31757](https://cve.now/CVE-2021-31757.md): An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104\_CN. (no CVSS)
- [CVE-2021-31755](https://cve.now/CVE-2021-31755.md): An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104\_CN. (CVSS 9.8, KEV)
- [CVE-2021-31758](https://cve.now/CVE-2021-31758.md): An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104\_CN. (no CVSS)
- [CVE-2021-31756](https://cve.now/CVE-2021-31756.md): An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104\_CN. (no CVSS)
- [CVE-2021-29499](https://cve.now/CVE-2021-29499.md): Predictable SIF UUID Identifiers (CVSS 7.5, sylabs sif · github.com/sylabs/sif)
- [CVE-2021-31472](https://cve.now/CVE-2021-31472.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31470](https://cve.now/CVE-2021-31470.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31471](https://cve.now/CVE-2021-31471.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31469](https://cve.now/CVE-2021-31469.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31468](https://cve.now/CVE-2021-31468.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31467](https://cve.now/CVE-2021-31467.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31466](https://cve.now/CVE-2021-31466.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31465](https://cve.now/CVE-2021-31465.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31463](https://cve.now/CVE-2021-31463.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31464](https://cve.now/CVE-2021-31464.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31462](https://cve.now/CVE-2021-31462.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31461](https://cve.now/CVE-2021-31461.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31460](https://cve.now/CVE-2021-31460.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31459](https://cve.now/CVE-2021-31459.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31458](https://cve.now/CVE-2021-31458.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31457](https://cve.now/CVE-2021-31457.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31456](https://cve.now/CVE-2021-31456.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31454](https://cve.now/CVE-2021-31454.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31455](https://cve.now/CVE-2021-31455.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31453](https://cve.now/CVE-2021-31453.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31452](https://cve.now/CVE-2021-31452.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31451](https://cve.now/CVE-2021-31451.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31449](https://cve.now/CVE-2021-31449.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31450](https://cve.now/CVE-2021-31450.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31448](https://cve.now/CVE-2021-31448.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31447](https://cve.now/CVE-2021-31447.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31446](https://cve.now/CVE-2021-31446.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31445](https://cve.now/CVE-2021-31445.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31444](https://cve.now/CVE-2021-31444.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31442](https://cve.now/CVE-2021-31442.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-31443](https://cve.now/CVE-2021-31443.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. (CVSS 3.3, Foxit Reader)
- [CVE-2021-31441](https://cve.now/CVE-2021-31441.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. (CVSS 7.8, Foxit Reader)
- [CVE-2021-32470](https://cve.now/CVE-2021-32470.md): Craft CMS before 3.6.13 has an XSS vulnerability. (no CVSS, craftcms/cms)
- [CVE-2021-27574](https://cve.now/CVE-2021-27574.md): An issue was discovered in Emote Remote Mouse through 4.0.0.0. (no CVSS)
- [CVE-2021-27573](https://cve.now/CVE-2021-27573.md): An issue was discovered in Emote Remote Mouse through 4.0.0.0. (no CVSS)
- [CVE-2021-27572](https://cve.now/CVE-2021-27572.md): An issue was discovered in Emote Remote Mouse through 4.0.0.0. (no CVSS)
- [CVE-2021-27571](https://cve.now/CVE-2021-27571.md): An issue was discovered in Emote Remote Mouse through 4.0.0.0. (no CVSS)
- [CVE-2021-27570](https://cve.now/CVE-2021-27570.md): An issue was discovered in Emote Remote Mouse through 3.015. (no CVSS)
- [CVE-2021-27569](https://cve.now/CVE-2021-27569.md): An issue was discovered in Emote Remote Mouse through 4.0.0.0. (no CVSS)
- [CVE-2020-4901](https://cve.now/CVE-2020-4901.md): IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause (CVSS 5.4, IBM Robotic Process Automation with Automation Anywhere)
- [CVE-2021-29495](https://cve.now/CVE-2021-29495.md): Nim stdlib httpClient does not validate peer certificates by default (CVSS 5.9, nim-lang security)
- [CVE-2021-22677](https://cve.now/CVE-2021-22677.md): An integer overflow exists in the APIs of the host MCU while trying to connect to a WIFI network may lead to issues such as a denial-of-serv (no CVSS, SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100)
- [CVE-2021-29488](https://cve.now/CVE-2021-29488.md): Creation of files outside the Download Folder through malicious PAR2 files (CVSS 4.3, sabnzbd)
- [CVE-2021-27437](https://cve.now/CVE-2021-27437.md): The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. (no CVSS, WISE-PaaS/RMM)
- [CVE-2021-21419](https://cve.now/CVE-2021-21419.md): Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet (CVSS 5.3, eventlet)
- [CVE-2021-22673](https://cve.now/CVE-2021-22673.md): The affected product is vulnerable to stack-based buffer overflow while processing over-the-air firmware updates from the CDN server, which (no CVSS, SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100)
- [CVE-2021-22671](https://cve.now/CVE-2021-22671.md): Multiple integer overflow issues exist while processing long domain names, which may allow an attacker to remotely execute code on the Simpl (no CVSS, SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100)
- [CVE-2021-22679](https://cve.now/CVE-2021-22679.md): The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute cod (no CVSS, SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100)
- [CVE-2021-22675](https://cve.now/CVE-2021-22675.md): The affected product is vulnerable to integer overflow while parsing malformed over-the-air firmware update files, which may allow an attack (no CVSS, SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100)
- [CVE-2021-3502](https://cve.now/CVE-2021-3502.md): A flaw was found in avahi 0.8-5. (no CVSS, avahi)
- [CVE-2020-14009](https://cve.now/CVE-2020-14009.md): Proofpoint Enterprise Protection (PPS/PoD) before 8.16.4 contains a vulnerability that could allow an attacker to deliver an email message w (no CVSS)
- [CVE-2021-21984](https://cve.now/CVE-2021-21984.md): VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. (no CVSS, VMware vRealize Business for Cloud)
- [CVE-2021-26123](https://cve.now/CVE-2021-26123.md): LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm. (no CVSS)
- [CVE-2021-26122](https://cve.now/CVE-2021-26122.md): LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm. (no CVSS)
- [CVE-2020-36124](https://cve.now/CVE-2020-36124.md): Pax Technology PAXSTORE v7.0.8\_20200511171508 and lower is affected by XML External Entity (XXE) injection. (no CVSS)
- [CVE-2020-36125](https://cve.now/CVE-2020-36125.md): Pax Technology PAXSTORE v7.0.8\_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive ope (no CVSS)
- [CVE-2020-36126](https://cve.now/CVE-2020-36126.md): Pax Technology PAXSTORE v7.0.8\_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation (no CVSS)
- [CVE-2020-36127](https://cve.now/CVE-2020-36127.md): Pax Technology PAXSTORE v7.0.8\_20200511171508 and lower is affected by an information disclosure vulnerability. (no CVSS)
- [CVE-2020-36128](https://cve.now/CVE-2020-36128.md): Pax Technology PAXSTORE v7.0.8\_20200511171508 and lower is affected by a token spoofing vulnerability. (no CVSS)
- [CVE-2021-30173](https://cve.now/CVE-2021-30173.md): Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion (CVSS 6.5, Jun-He Technology Quan-Fang-Wei-Tong-Xun system)
- [CVE-2021-30172](https://cve.now/CVE-2021-30172.md): Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS (CVSS 4.6, Jun-He Technology Quan-Fang-Wei-Tong-Xun system)
- [CVE-2021-30171](https://cve.now/CVE-2021-30171.md): Jun-He Technology Ltd. ERP POS - Stored XSS-2 (CVSS 4.6, Jun-He Technology ERP POS)
- [CVE-2021-30170](https://cve.now/CVE-2021-30170.md): Jun-He Technology Ltd. ERP POS - Stored XSS-1 (CVSS 4.6, Jun-He Technology ERP POS)
- [CVE-2021-1927](https://cve.now/CVE-2021-1927.md): Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snap (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1915](https://cve.now/CVE-2021-1915.md): Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdrago (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1925](https://cve.now/CVE-2021-1925.md): Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdr (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1910](https://cve.now/CVE-2021-1910.md): Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1905](https://cve.now/CVE-2021-1905.md): Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. (CVSS 8.4, KEV, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1906](https://cve.now/CVE-2021-1906.md): Improper handling of address deregistration on failure can lead to new GPU address allocation failure. (CVSS 6.2, KEV, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1895](https://cve.now/CVE-2021-1895.md): Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr (CVSS 6.8, Qualcomm Snapdragon Consumer IOT, Snapdragon Industrial IOT…)
- [CVE-2020-11295](https://cve.now/CVE-2020-11295.md): Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdrag (CVSS 6.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-1891](https://cve.now/CVE-2021-1891.md): A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Comput (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11294](https://cve.now/CVE-2020-11294.md): Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, S (CVSS 5.9, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11289](https://cve.now/CVE-2020-11289.md): Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdrago (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11293](https://cve.now/CVE-2020-11293.md): Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Sn (CVSS 5.1, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11288](https://cve.now/CVE-2020-11288.md): Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, S (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11284](https://cve.now/CVE-2020-11284.md): Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untruste (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…)
- [CVE-2020-11285](https://cve.now/CVE-2020-11285.md): Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snap (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11279](https://cve.now/CVE-2020-11279.md): Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11273](https://cve.now/CVE-2020-11273.md): Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when his (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11274](https://cve.now/CVE-2020-11274.md): Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11268](https://cve.now/CVE-2020-11268.md): Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Aut (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Mobile)
- [CVE-2020-11254](https://cve.now/CVE-2020-11254.md): Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-29445](https://cve.now/CVE-2020-29445.md): Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and po (CVSS 4.3, Atlassian Confluence Server)
- [CVE-2020-29444](https://cve.now/CVE-2020-29444.md): Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Sit (CVSS 5.4, Atlassian Confluence Server)
- [CVE-2021-32074](https://cve.now/CVE-2021-32074.md): HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a mult (no CVSS)
- [CVE-2021-32090](https://cve.now/CVE-2021-32090.md): The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter. (no CVSS, localstack)
- [CVE-2021-32091](https://cve.now/CVE-2021-32091.md): A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6. (no CVSS, localstack)
- [CVE-2021-32092](https://cve.now/CVE-2021-32092.md): A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. (no CVSS)
- [CVE-2021-32093](https://cve.now/CVE-2021-32093.md): The ConfigFileAction component of U.S. (no CVSS)
- [CVE-2021-32094](https://cve.now/CVE-2021-32094.md): U.S. (no CVSS)
- [CVE-2021-32095](https://cve.now/CVE-2021-32095.md): U.S. (no CVSS)
- [CVE-2021-32096](https://cve.now/CVE-2021-32096.md): The ConsoleAction component of U.S. (no CVSS)
- [CVE-2021-32098](https://cve.now/CVE-2021-32098.md): Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization. (no CVSS)
- [CVE-2021-32099](https://cve.now/CVE-2021-32099.md): A SQL injection vulnerability in the pandora\_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his u (no CVSS)
- [CVE-2021-32100](https://cve.now/CVE-2021-32100.md): A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user. (no CVSS)
- [CVE-2021-32101](https://cve.now/CVE-2021-32101.md): The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/\_machine\_config.php. (no CVSS)
- [CVE-2021-32102](https://cve.now/CVE-2021-32102.md): A SQL injection vulnerability exists (with user privileges) in library/custom\_template/ajax\_code.php in OpenEMR 5.0.2.1. (no CVSS)
- [CVE-2021-32103](https://cve.now/CVE-2021-32103.md): A Stored XSS vulnerability in interface/usergroup/usergroup\_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject (no CVSS)
- [CVE-2021-32104](https://cve.now/CVE-2021-32104.md): A SQL injection vulnerability exists (with user privileges) in interface/forms/eye\_mag/save.php in OpenEMR 5.0.2.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-05-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.