Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 1.2.11
Report Generated On: Jul 12, 2015 at 23:30:11 EDT
Dependencies Scanned: 9
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
CurrentEngineRelease:
NVD CVE 2002: 11/02/2015 21:51:09
NVD CVE 2003: 15/04/2015 05:23:13
NVD CVE 2004: 11/06/2015 04:59:25
NVD CVE 2005: 01/07/2015 05:28:20
NVD CVE 2006: 14/05/2015 05:46:37
NVD CVE 2007: 17/03/2015 05:50:14
NVD CVE 2008: 04/06/2015 06:31:11
NVD CVE 2009: 03/07/2015 04:29:23
NVD CVE 2010: 20/06/2015 05:08:21
NVD CVE 2011: 04/06/2015 05:36:48
NVD CVE 2012: 20/06/2015 04:25:12
NVD CVE 2013: 06/07/2015 04:23:13
NVD CVE 2014: 09/07/2015 03:49:47
NVD CVE 2015: 09/07/2015 03:13:12
NVD CVE Modified: 12/07/2015 20:06:48
VersionCheckOn: 1436492708243

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	GAV	Evidence Count
guava-18.0.jar	com.google.guava:guava:18.0	18
servlet-api-2.5.jar	javax.servlet:servlet-api:2.5	12
jna-platform-4.1.0.jar	net.java.dev.jna:jna-platform:4.1.0	21
jna-4.1.0.jar	net.java.dev.jna:jna:4.1.0	23
jna-4.1.0.jar: jnidispatch.dll		1
jna-4.1.0.jar: jnidispatch.dll		1
jna-4.1.0.jar: jnidispatch.dll		1
jcl-over-slf4j-1.7.12.jar	org.slf4j:jcl-over-slf4j:1.7.12	17
slf4j-api-1.7.12.jar	org.slf4j:slf4j-api:1.7.12	17

Dependencies

guava-18.0.jar

Description: Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\18.0\guava-18.0.jar
MD5: 947641f6bb535b1d942d1bc387c45290
SHA1: cce0823396aa693798f8882e64213b1772032b09
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	guava
central	groupid	com.google.guava
file	name	guava-18.0
jar	package name	collect
jar	package name	google
jar	package name	io
jar	package name	util
manifest	Bundle-Description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.
Manifest	bundle-docurl	https://guava-libraries.googlecode.com/
Manifest	Bundle-Name	Guava: Google Core Libraries for Java
Manifest	bundle-symbolicname	com.google.guava
pom	artifactid	guava
pom	description	Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.
pom	groupid	com.google.guava
pom	groupid	google.guava
pom	name	Guava: Google Core Libraries for Java
pom	parent-artifactid	guava-parent
pom	parent-groupid	com.google.guava

Identifiers

maven: com.google.guava:guava:18.0 Confidence:HIGHEST

servlet-api-2.5.jar

File Path: C:\Users\Jeremy\.m2\repository\javax\servlet\servlet-api\2.5\servlet-api-2.5.jar
MD5: 69ca51af4e9a67a1027a7f95b52c3e8f
SHA1: 5959582d97d8b61f4d154ca9e495aafd16726e34
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	servlet-api
central	groupid	javax.servlet
file	name	servlet-api-2.5
jar	package name	javax
jar	package name	servlet
Manifest	extension-name	servlet-api
Manifest	Implementation-Title
Manifest	Implementation-Vendor	Sun Microsystems Inc
Manifest	specification-title	A component of the Glassfish Application Server
Manifest	specification-vendor	Sun Microsystems Inc
pom	artifactid	servlet-api
pom	groupid	javax.servlet

Identifiers

maven: javax.servlet:servlet-api:2.5 Confidence:HIGHEST

jna-platform-4.1.0.jar

Description: Java Native Access Platform

License:

LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/

File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna-platform\4.1.0\jna-platform-4.1.0.jar
MD5: 533e404eda70bbf8e40de134ffeec95b
SHA1: 23457ad1cf75c2c16763330de5565a0e67b4bc0a
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	jna-platform
central	groupid	net.java.dev.jna
file	name	jna-platform-4.1.0
jar	package name	jna
jar	package name	platform
jar	package name	sun
jar (hint)	package name	oracle
manifest	Bundle-Description	JNA Platform Library
Manifest	Bundle-Name	jna-platform
Manifest	bundle-requiredexecutionenvironment	J2SE-1.4
Manifest	bundle-symbolicname	com.sun.jna.platform
Manifest	Bundle-Vendor	JNA Development Team
Manifest	Implementation-Title	com.sun.jna.platform
Manifest	Implementation-Vendor	JNA Development Team
Manifest	require-bundle	com.sun.jna;bundle-version="4.1.0"
Manifest	specification-title	Java Native Access (JNA)
Manifest	specification-vendor	JNA Development Team
pom	artifactid	jna-platform
pom	description	Java Native Access Platform
pom	groupid	net.java.dev.jna
pom	name	Java Native Access Platform

Identifiers

maven: net.java.dev.jna:jna-platform:4.1.0 Confidence:HIGHEST

jna-4.1.0.jar

Description: Java Native Access

License:

LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/

File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar
MD5: b0e08c9936dc52aa40439c71fcad6297
SHA1: 1c12d070e602efd8021891cdd7fd18bc129372d4
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	jna
central	groupid	net.java.dev.jna
file	name	jna-4.1.0
jar	package name	jna
jar	package name	library
jar	package name	native
jar	package name	sun
jar	package name	win32
jar (hint)	package name	oracle
manifest	Bundle-Description	JNA Library
Manifest	Bundle-Name	jna
Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc
Manifest	bundle-requiredexecutionenvironment	J2SE-1.4
Manifest	bundle-symbolicname	com.sun.jna
Manifest	Bundle-Vendor	JNA Development Team
Manifest	Implementation-Title	com.sun.jna
Manifest	Implementation-Vendor	JNA Development Team
Manifest	specification-title	Java Native Access (JNA)
Manifest	specification-vendor	JNA Development Team
pom	artifactid	jna
pom	description	Java Native Access
pom	groupid	net.java.dev.jna
pom	name	Java Native Access

Identifiers

maven: net.java.dev.jna:jna:4.1.0 Confidence:HIGHEST

jna-4.1.0.jar: jnidispatch.dll

File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\w32ce-arm\jnidispatch.dll
MD5: 57697cbdd321ae7d06f5da04e821f908
SHA1: 67167f2b2fce8db5f9f64a372b0da54730d3ee51

Evidence

Source	Name	Value
file	name	jnidispatch

Identifiers

None

jna-4.1.0.jar: jnidispatch.dll

File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dll
MD5: 06b2f1f909d2436dff20d7a668ef26a9
SHA1: bd1bdda9a91f3b0d9067e323f7394bef933f81f6

Evidence

Source	Name	Value
file	name	jnidispatch

Identifiers

None

jna-4.1.0.jar: jnidispatch.dll

File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\win32-x86\jnidispatch.dll
MD5: 05a72ada9247aeb114a9ef01a394b6c4
SHA1: 8b32cc82740fc62afdf5ea211f1ca8bb72269bbf

Evidence

Source	Name	Value
file	name	jnidispatch

Identifiers

None

jcl-over-slf4j-1.7.12.jar

Description: JCL 1.1.1 implemented over SLF4J

File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\jcl-over-slf4j\1.7.12\jcl-over-slf4j-1.7.12.jar
MD5: 5989c932ad8fff557a90f6f9032e57f9
SHA1: adef7a9e1263298255fdb5cb107ff171d07c82f3
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	jcl-over-slf4j
central	groupid	org.slf4j
file	name	jcl-over-slf4j-1.7.12
jar	package name	impl
manifest	Bundle-Description	JCL 1.1.1 implemented over SLF4J
Manifest	Bundle-Name	jcl-over-slf4j
Manifest	bundle-requiredexecutionenvironment	J2SE-1.5
Manifest	bundle-symbolicname	jcl.over.slf4j
Manifest	Bundle-Vendor	SLF4J.ORG
Manifest	Implementation-Title	jcl-over-slf4j
pom	artifactid	jcl-over-slf4j
pom	description	JCL 1.1.1 implemented over SLF4J
pom	groupid	org.slf4j
pom	groupid	slf4j
pom	name	JCL 1.1.1 implemented over SLF4J
pom	parent-artifactid	slf4j-parent
pom	parent-groupid	org.slf4j

Identifiers

maven: org.slf4j:jcl-over-slf4j:1.7.12 Confidence:HIGHEST

slf4j-api-1.7.12.jar

Description: The slf4j API

File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\1.7.12\slf4j-api-1.7.12.jar
MD5: 68910bf95dbcf90ce5859128f0f75d1e
SHA1: 8e20852d05222dc286bf1c71d78d0531e177c317
Referenced In Project: waffle-negotiate

Evidence

Source	Name	Value
central	artifactid	slf4j-api
central	groupid	org.slf4j
file	name	slf4j-api-1.7.12
jar	package name	slf4j
manifest	Bundle-Description	The slf4j API
Manifest	Bundle-Name	slf4j-api
Manifest	bundle-requiredexecutionenvironment	J2SE-1.5
Manifest	bundle-symbolicname	slf4j.api
Manifest	Bundle-Vendor	SLF4J.ORG
Manifest	Implementation-Title	slf4j-api
pom	artifactid	slf4j-api
pom	description	The slf4j API
pom	groupid	org.slf4j
pom	groupid	slf4j
pom	name	SLF4J API Module
pom	parent-artifactid	slf4j-parent
pom	parent-groupid	org.slf4j

Identifiers

maven: org.slf4j:slf4j-api:1.7.12 Confidence:HIGHEST

Project: waffle-negotiate

Dependencies

guava-18.0.jar

Evidence

Identifiers

servlet-api-2.5.jar

Evidence

Identifiers

jna-platform-4.1.0.jar

Evidence

Identifiers

jna-4.1.0.jar

Evidence

Identifiers

jna-4.1.0.jar: jnidispatch.dll

Evidence

Identifiers

jna-4.1.0.jar: jnidispatch.dll

Evidence

Identifiers

jna-4.1.0.jar: jnidispatch.dll

Evidence

Identifiers

jcl-over-slf4j-1.7.12.jar

Evidence

Identifiers

slf4j-api-1.7.12.jar

Evidence

Identifiers