Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all):
- dependency-check version: 1.2.11
- Report Generated On: Jul 12, 2015 at 23:30:14 EDT
- Dependencies Scanned: 12
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 0
- ...
- CurrentEngineRelease:
- NVD CVE 2002: 11/02/2015 21:51:09
- NVD CVE 2003: 15/04/2015 05:23:13
- NVD CVE 2004: 11/06/2015 04:59:25
- NVD CVE 2005: 01/07/2015 05:28:20
- NVD CVE 2006: 14/05/2015 05:46:37
- NVD CVE 2007: 17/03/2015 05:50:14
- NVD CVE 2008: 04/06/2015 06:31:11
- NVD CVE 2009: 03/07/2015 04:29:23
- NVD CVE 2010: 20/06/2015 05:08:21
- NVD CVE 2011: 04/06/2015 05:36:48
- NVD CVE 2012: 20/06/2015 04:25:12
- NVD CVE 2013: 06/07/2015 04:23:13
- NVD CVE 2014: 09/07/2015 03:49:47
- NVD CVE 2015: 09/07/2015 03:13:12
- NVD CVE Modified: 12/07/2015 20:06:48
- VersionCheckOn: 1436492708243
Display:
Showing Vulnerable Dependencies (click to show all)
Dependencies
guava-18.0.jar
Description:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\com\google\guava\guava\18.0\guava-18.0.jar
MD5: 947641f6bb535b1d942d1bc387c45290
SHA1: cce0823396aa693798f8882e64213b1772032b09
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | guava |
| central | groupid | com.google.guava |
| file | name | guava-18.0 |
| jar | package name | collect |
| jar | package name | google |
| jar | package name | io |
| jar | package name | util |
| manifest | Bundle-Description | Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. |
| Manifest | bundle-docurl | https://guava-libraries.googlecode.com/ |
| Manifest | Bundle-Name | Guava: Google Core Libraries for Java |
| Manifest | bundle-symbolicname | com.google.guava |
| pom | artifactid | guava |
| pom | description | Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. |
| pom | groupid | com.google.guava |
| pom | groupid | google.guava |
| pom | name | Guava: Google Core Libraries for Java |
| pom | parent-artifactid | guava-parent |
| pom | parent-groupid | com.google.guava |
commons-beanutils-1.8.3.jar
Description: BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\commons-beanutils\commons-beanutils\1.8.3\commons-beanutils-1.8.3.jar
MD5: b45be74134796c89db7126083129532f
SHA1: 686ef3410bcf4ab8ce7fd0b899e832aaba5facf7
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | commons-beanutils |
| central | groupid | commons-beanutils |
| file | name | commons-beanutils-1.8.3 |
| jar | package name | apache |
| jar | package name | beanutils |
| jar | package name | commons |
| manifest | Bundle-Description | BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection. |
| Manifest | bundle-docurl | http://commons.apache.org/beanutils/ |
| Manifest | Bundle-Name | Commons BeanUtils |
| Manifest | bundle-symbolicname | org.apache.commons.beanutils |
| Manifest | Bundle-Vendor | The Apache Software Foundation |
| Manifest | Implementation-Title | Commons BeanUtils |
| Manifest | Implementation-Vendor | The Apache Software Foundation |
| Manifest | Implementation-Vendor-Id | org.apache |
| Manifest | specification-title | Commons BeanUtils |
| Manifest | specification-vendor | The Apache Software Foundation |
| pom | artifactid | commons-beanutils |
| pom | description | BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection. |
| pom | groupid | commons-beanutils |
| pom | name | Commons BeanUtils |
| pom | parent-artifactid | commons-parent |
| pom | parent-groupid | org.apache.commons |
servlet-api-2.5.jar
File Path: C:\Users\Jeremy\.m2\repository\javax\servlet\servlet-api\2.5\servlet-api-2.5.jar
MD5: 69ca51af4e9a67a1027a7f95b52c3e8f
SHA1: 5959582d97d8b61f4d154ca9e495aafd16726e34
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | servlet-api |
| central | groupid | javax.servlet |
| file | name | servlet-api-2.5 |
| jar | package name | javax |
| jar | package name | servlet |
| Manifest | extension-name | servlet-api |
| Manifest | Implementation-Title | |
| Manifest | Implementation-Vendor | Sun Microsystems Inc |
| Manifest | specification-title | A component of the Glassfish Application Server |
| Manifest | specification-vendor | Sun Microsystems Inc |
| pom | artifactid | servlet-api |
| pom | groupid | javax.servlet |
jna-platform-4.1.0.jar
Description: Java Native Access Platform
License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna-platform\4.1.0\jna-platform-4.1.0.jar
MD5: 533e404eda70bbf8e40de134ffeec95b
SHA1: 23457ad1cf75c2c16763330de5565a0e67b4bc0a
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | jna-platform |
| central | groupid | net.java.dev.jna |
| file | name | jna-platform-4.1.0 |
| jar | package name | jna |
| jar | package name | platform |
| jar | package name | sun |
| jar (hint) | package name | oracle |
| manifest | Bundle-Description | JNA Platform Library |
| Manifest | Bundle-Name | jna-platform |
| Manifest | bundle-requiredexecutionenvironment | J2SE-1.4 |
| Manifest | bundle-symbolicname | com.sun.jna.platform |
| Manifest | Bundle-Vendor | JNA Development Team |
| Manifest | Implementation-Title | com.sun.jna.platform |
| Manifest | Implementation-Vendor | JNA Development Team |
| Manifest | require-bundle | com.sun.jna;bundle-version="4.1.0" |
| Manifest | specification-title | Java Native Access (JNA) |
| Manifest | specification-vendor | JNA Development Team |
| pom | artifactid | jna-platform |
| pom | description | Java Native Access Platform |
| pom | groupid | net.java.dev.jna |
| pom | name | Java Native Access Platform |
jna-4.1.0.jar
Description: Java Native Access
License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar
MD5: b0e08c9936dc52aa40439c71fcad6297
SHA1: 1c12d070e602efd8021891cdd7fd18bc129372d4
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | jna |
| central | groupid | net.java.dev.jna |
| file | name | jna-4.1.0 |
| jar | package name | jna |
| jar | package name | library |
| jar | package name | native |
| jar | package name | sun |
| jar | package name | win32 |
| jar (hint) | package name | oracle |
| manifest | Bundle-Description | JNA Library |
| Manifest | Bundle-Name | jna |
| Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc |
| Manifest | bundle-requiredexecutionenvironment | J2SE-1.4 |
| Manifest | bundle-symbolicname | com.sun.jna |
| Manifest | Bundle-Vendor | JNA Development Team |
| Manifest | Implementation-Title | com.sun.jna |
| Manifest | Implementation-Vendor | JNA Development Team |
| Manifest | specification-title | Java Native Access (JNA) |
| Manifest | specification-vendor | JNA Development Team |
| pom | artifactid | jna |
| pom | description | Java Native Access |
| pom | groupid | net.java.dev.jna |
| pom | name | Java Native Access |
jna-4.1.0.jar: jnidispatch.dll
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\w32ce-arm\jnidispatch.dll
MD5: 57697cbdd321ae7d06f5da04e821f908
SHA1: 67167f2b2fce8db5f9f64a372b0da54730d3ee51
Evidence
| Source | Name | Value |
|---|
| file | name | jnidispatch |
jna-4.1.0.jar: jnidispatch.dll
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\win32-x86-64\jnidispatch.dll
MD5: 06b2f1f909d2436dff20d7a668ef26a9
SHA1: bd1bdda9a91f3b0d9067e323f7394bef933f81f6
Evidence
| Source | Name | Value |
|---|
| file | name | jnidispatch |
jna-4.1.0.jar: jnidispatch.dll
File Path: C:\Users\Jeremy\.m2\repository\net\java\dev\jna\jna\4.1.0\jna-4.1.0.jar\com\sun\jna\win32-x86\jnidispatch.dll
MD5: 05a72ada9247aeb114a9ef01a394b6c4
SHA1: 8b32cc82740fc62afdf5ea211f1ca8bb72269bbf
Evidence
| Source | Name | Value |
|---|
| file | name | jnidispatch |
shiro-core-1.2.3.jar
Description: Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: C:\Users\Jeremy\.m2\repository\org\apache\shiro\shiro-core\1.2.3\shiro-core-1.2.3.jar
MD5: 9147beb1ddba5ed220608bdd90759108
SHA1: 4ddf1b83360c7e39f02e3e20ca364d2c448ed01f
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | shiro-core |
| central | groupid | org.apache.shiro |
| central | version | 1.2.3 |
| file | name | 1.2.3 |
| file | name | shiro-core-1.2.3 |
| jar | package name | apache |
| jar | package name | crypto |
| jar | package name | io |
| jar | package name | session |
| jar | package name | shiro |
| Manifest | Bundle-Version | 1.2.3 |
| Manifest | Implementation-Version | 1.2.3 |
| Manifest | specification-version | 1.2.3 |
| pom | artifactid | shiro-core |
| pom | groupid | apache.shiro |
| pom | groupid | org.apache.shiro |
| pom | version | 1.2.3 |
Related Dependencies
- shiro-web-1.2.3.jar
- File Path: C:\Users\Jeremy\.m2\repository\org\apache\shiro\shiro-web\1.2.3\shiro-web-1.2.3.jar
- SHA1: 4dbcac122a883c29d32fe94f6b1525e5a81884ec
- MD5: 38105101e9efde681dc1de127193f99f
- maven: org.apache.shiro:shiro-web:1.2.3
jcl-over-slf4j-1.7.12.jar
Description: JCL 1.1.1 implemented over SLF4J
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\jcl-over-slf4j\1.7.12\jcl-over-slf4j-1.7.12.jar
MD5: 5989c932ad8fff557a90f6f9032e57f9
SHA1: adef7a9e1263298255fdb5cb107ff171d07c82f3
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | jcl-over-slf4j |
| central | groupid | org.slf4j |
| file | name | jcl-over-slf4j-1.7.12 |
| jar | package name | impl |
| manifest | Bundle-Description | JCL 1.1.1 implemented over SLF4J |
| Manifest | Bundle-Name | jcl-over-slf4j |
| Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 |
| Manifest | bundle-symbolicname | jcl.over.slf4j |
| Manifest | Bundle-Vendor | SLF4J.ORG |
| Manifest | Implementation-Title | jcl-over-slf4j |
| pom | artifactid | jcl-over-slf4j |
| pom | description | JCL 1.1.1 implemented over SLF4J |
| pom | groupid | org.slf4j |
| pom | groupid | slf4j |
| pom | name | JCL 1.1.1 implemented over SLF4J |
| pom | parent-artifactid | slf4j-parent |
| pom | parent-groupid | org.slf4j |
slf4j-api-1.7.12.jar
Description: The slf4j API
File Path: C:\Users\Jeremy\.m2\repository\org\slf4j\slf4j-api\1.7.12\slf4j-api-1.7.12.jar
MD5: 68910bf95dbcf90ce5859128f0f75d1e
SHA1: 8e20852d05222dc286bf1c71d78d0531e177c317
Referenced In Project:
waffle-shiro
Evidence
| Source | Name | Value |
|---|
| central | artifactid | slf4j-api |
| central | groupid | org.slf4j |
| file | name | slf4j-api-1.7.12 |
| jar | package name | slf4j |
| manifest | Bundle-Description | The slf4j API |
| Manifest | Bundle-Name | slf4j-api |
| Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 |
| Manifest | bundle-symbolicname | slf4j.api |
| Manifest | Bundle-Vendor | SLF4J.ORG |
| Manifest | Implementation-Title | slf4j-api |
| pom | artifactid | slf4j-api |
| pom | description | The slf4j API |
| pom | groupid | org.slf4j |
| pom | groupid | slf4j |
| pom | name | SLF4J API Module |
| pom | parent-artifactid | slf4j-parent |
| pom | parent-groupid | org.slf4j |