Press CTR-C to copy XML [help]


Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

How to read the report | Suppressing false positives | Getting Help: github issues

Project: Waarp All JDK8

Waarp:Waarp-All-Jdk8:3.5.0

Scan Information (show all):

Summary

Display: Showing Vulnerable Dependencies (click to show all)

DependencyVulnerability IDsPackageHighest SeverityCVE CountConfidenceEvidence Count
WaarpCommon-3.5.0.jarpkg:maven/Waarp/WaarpCommon@3.5.0 012
WaarpDigest-3.5.0.jarpkg:maven/Waarp/WaarpDigest@3.5.0 012
WaarpExec-3.5.0.jarpkg:maven/Waarp/WaarpExec@3.5.0 012
WaarpFtp-Core-3.5.0.jarpkg:maven/Waarp/WaarpFtp-Core@3.5.0 014
WaarpFtp-Filesystem-3.5.0.jarpkg:maven/Waarp/WaarpFtp-Filesystem@3.5.0 012
WaarpFtp-Simpleimpl-3.5.0.jarpkg:maven/Waarp/WaarpFtp-Simpleimpl@3.5.0 014
WaarpFtpClient-3.5.0.jarpkg:maven/Waarp/WaarpFtpClient@3.5.0 014
WaarpGatewayFtp-3.5.0.jarpkg:maven/Waarp/WaarpGatewayFtp@3.5.0 012
WaarpGatewayKernel-3.5.0.jarpkg:maven/Waarp/WaarpGatewayKernel@3.5.0 012
WaarpHttp-3.5.0.jarpkg:maven/Waarp/WaarpHttp@3.5.0 012
WaarpIcap-3.5.0.jarpkg:maven/Waarp/WaarpIcap@3.5.0 012
WaarpPassword-3.5.0.jarpkg:maven/Waarp/WaarpPassword@3.5.0 014
WaarpProxyR66-3.5.0.jarpkg:maven/Waarp/WaarpProxyR66@3.5.0 012
WaarpR66-3.5.0.jarpkg:maven/Waarp/WaarpR66@3.5.0 012
WaarpSnmp-3.5.0.jarpkg:maven/Waarp/WaarpSnmp@3.5.0 012
WaarpThrift-3.5.0.jarpkg:maven/Waarp/WaarpThrift@3.5.0 012
btf-1.2.jarpkg:maven/com.github.fge/btf@1.2 021
cdi-api-2.0.SP1.jarcpe:2.3:a:redhat:jboss_weld:2.0.sp1:*:*:*:*:*:*:*pkg:maven/javax.enterprise/cdi-api@2.0.SP1MEDIUM1Low42
checker-qual-2.11.1.jarpkg:maven/org.checkerframework/checker-qual@2.11.1 032
commons-beanutils-1.9.4.jarcpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*pkg:maven/commons-beanutils/commons-beanutils@1.9.4 0Highest41
commons-cli-1.4.jarpkg:maven/commons-cli/commons-cli@1.4 040
commons-codec-1.15.jarpkg:maven/commons-codec/commons-codec@1.15 041
commons-collections-3.2.2.jarcpe:2.3:a:apache:commons_collections:3.2.2:*:*:*:*:*:*:*pkg:maven/commons-collections/commons-collections@3.2.2 0Highest41
commons-collections4-4.2.jarcpe:2.3:a:apache:commons_collections:4.2:*:*:*:*:*:*:*pkg:maven/org.apache.commons/commons-collections4@4.2 0Highest41
commons-compress-1.20.jarcpe:2.3:a:apache:commons-compress:1.20:*:*:*:*:*:*:*
cpe:2.3:a:apache:commons_compress:1.20:*:*:*:*:*:*:*		pkg:maven/org.apache.commons/commons-compress@1.20 0Highest45
commons-daemon-1.2.2.jarpkg:maven/commons-daemon/commons-daemon@1.2.2 043
commons-dbcp-1.4.jarpkg:maven/commons-dbcp/commons-dbcp@1.4 035
commons-exec-1.3.jarpkg:maven/org.apache.commons/commons-exec@1.3 039
commons-io-2.7.jarpkg:maven/commons-io/commons-io@2.7 041
commons-logging-1.2.jarpkg:maven/commons-logging/commons-logging@1.2 036
commons-net-3.7-ftp.jarpkg:maven/commons-net/commons-net@3.7 027
commons-pool-1.6.jarpkg:maven/commons-pool/commons-pool@1.6 036
commons-pool2-2.8.1.jarpkg:maven/org.apache.commons/commons-pool2@2.8.1 044
dom4j-2.1.3.jarcpe:2.3:a:dom4j_project:dom4j:2.1.3:*:*:*:*:*:*:*pkg:maven/org.dom4j/dom4j@2.1.3 0Highest16
error_prone_annotations-2.3.4.jarpkg:maven/com.google.errorprone/error_prone_annotations@2.3.4 023
failureaccess-1.0.1.jarcpe:2.3:a:google:guava:1.0.1:*:*:*:*:*:*:*pkg:maven/com.google.guava/failureaccess@1.0.1 0Highest32
ftp4j-1.7.2.jarpkg:maven/it.sauronsoftware/ftp4j@1.7.2 019
guava-29.0-jre.jarcpe:2.3:a:google:guava:29.0:*:*:*:*:*:*:*pkg:maven/com.google.guava/guava@29.0-jre 0Highest27
h2-1.4.200.jarcpe:2.3:a:h2database:h2:1.4.200:*:*:*:*:*:*:*pkg:maven/com.h2database/h2@1.4.200 0Highest38
h2-1.4.200.jar: data.zip: table.js 00
h2-1.4.200.jar: data.zip: tree.js 00
httpclient-4.5.12.jarcpe:2.3:a:apache:httpclient:4.5.12:*:*:*:*:*:*:*pkg:maven/org.apache.httpcomponents/httpclient@4.5.12 0Highest34
httpcore-4.4.13.jarpkg:maven/org.apache.httpcomponents/httpcore@4.4.13 034
istack-commons-runtime-3.0.10.jarpkg:maven/com.sun.istack/istack-commons-runtime@3.0.10 039
j2objc-annotations-1.3.jarpkg:maven/com.google.j2objc/j2objc-annotations@1.3 024
jackson-core-2.11.2.jarcpe:2.3:a:fasterxml:jackson:2.11.2:*:*:*:*:*:*:*pkg:maven/com.fasterxml.jackson.core/jackson-core@2.11.2 0Highest47
jackson-coreutils-1.6.jarpkg:maven/com.github.fge/jackson-coreutils@1.6 023
jackson-databind-2.11.2.jarcpe:2.3:a:fasterxml:jackson:2.11.2:*:*:*:*:*:*:*
cpe:2.3:a:fasterxml:jackson-databind:2.11.2:*:*:*:*:*:*:*		pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.11.2 0Highest41
jakarta.activation-1.2.1.jarpkg:maven/com.sun.activation/jakarta.activation@1.2.1 037
jakarta.activation-api-1.2.1.jarpkg:maven/jakarta.activation/jakarta.activation-api@1.2.1 032
jakarta.annotation-api-1.3.5.jarpkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5 032
jakarta.inject-2.6.1.jarpkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1 027
jakarta.validation-api-2.0.2.jarpkg:maven/jakarta.validation/jakarta.validation-api@2.0.2 029
jakarta.ws.rs-api-2.1.6.jarcpe:2.3:a:oracle:web_services:2.1.6:*:*:*:*:*:*:*pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6 0Low38
jakarta.xml.bind-api-2.3.2.jarpkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2 029
javassist-3.27.0-GA.jarpkg:maven/org.javassist/javassist@3.27.0-GA 026
javasysmon-0.3.6.jarpkg:maven/javasysmon/javasysmon@0.3.6 013
javax.annotation-api-1.3.2.jarpkg:maven/javax.annotation/javax.annotation-api@1.3.2 039
javax.el-api-3.0.0.jarpkg:maven/javax.el/javax.el-api@3.0.0 038
javax.inject-1.jarpkg:maven/javax.inject/javax.inject@1 019
javax.interceptor-api-1.2.jarpkg:maven/javax.interceptor/javax.interceptor-api@1.2 037
javax.servlet-api-4.0.1.jarpkg:maven/javax.servlet/javax.servlet-api@4.0.1 036
javax.ws.rs-api-2.1.1.jarcpe:2.3:a:oracle:web_services:2.1.1:*:*:*:*:*:*:*pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1 0Low37
jaxb-runtime-2.3.3-b01.jarpkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b01 031
jaxen-1.2.0.jarpkg:maven/jaxen/jaxen@1.2.0 026
jboss-annotations-api_1.3_spec-2.0.1.Final.jarpkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final 047
jboss-jaxb-api_2.3_spec-1.0.1.Final.jarpkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@1.0.1.Final 048
jboss-jaxrs-api_2.1_spec-2.0.1.Final.jarpkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final 049
jcl-over-slf4j-1.7.30.jarpkg:maven/org.slf4j/jcl-over-slf4j@1.7.30 033
jersey-common-2.31.jarcpe:2.3:a:jersey_project:jersey:2.31:*:*:*:*:*:*:*pkg:maven/org.glassfish.jersey.core/jersey-common@2.31 0Highest33
joda-time-2.10.6.jarpkg:maven/joda-time/joda-time@2.10.6 038
json-patch-1.9.jarcpe:2.3:a:json-patch_project:json-patch:1.9:*:*:*:*:*:*:*pkg:maven/com.github.fge/json-patch@1.9 0Highest21
jsr305-3.0.2.jarpkg:maven/com.google.code.findbugs/jsr305@3.0.2 017
jul-to-slf4j-1.7.30.jarpkg:maven/org.slf4j/jul-to-slf4j@1.7.30 028
libthrift-0.13.0.jarcpe:2.3:a:apache:thrift:0.13.0:*:*:*:*:*:*:*pkg:maven/org.apache.thrift/libthrift@0.13.0 0Highest24
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jarcpe:2.3:a:google:guava:9999.0:*:*:*:*:*:*:*pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava 0Highest15
log4j-api-2.13.3.jarcpe:2.3:a:apache:log4j:2.13.3:*:*:*:*:*:*:*pkg:maven/org.apache.logging.log4j/log4j-api@2.13.3 0Highest46
log4j-over-slf4j-1.7.30.jarcpe:2.3:a:apache:log4j:1.7.30:*:*:*:*:*:*:*pkg:maven/org.slf4j/log4j-over-slf4j@1.7.30LOW1Highest31
logback-core-1.2.3.jarcpe:2.3:a:logback:logback:1.2.3:*:*:*:*:*:*:*pkg:maven/ch.qos.logback/logback-core@1.2.3 0Highest32
mariadb-java-client-2.5.4.jarpkg:maven/org.mariadb.jdbc/mariadb-java-client@2.5.4 031
microprofile-config-api-1.3.jarpkg:maven/org.eclipse.microprofile.config/microprofile-config-api@1.3 026
msg-simple-1.1.jarpkg:maven/com.github.fge/msg-simple@1.1 021
mysql-connector-java-8.0.20.jarcpe:2.3:a:mysql:mysql:8.0.20:*:*:*:*:*:*:*
cpe:2.3:a:oracle:connector\/j:8.0.20:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_connector\/j:8.0.20:*:*:*:*:*:*:*		pkg:maven/mysql/mysql-connector-java@8.0.20 0Highest43
netty-all-4.1.51.Final.jarcpe:2.3:a:netty:netty:4.1.51:*:*:*:*:*:*:*pkg:maven/io.netty/netty-all@4.1.51.Final 0Highest23
netty-http-java6-1.5.0.jarpkg:maven/Waarp/netty-http-java6@1.5.0 019
netty-tcnative-boringssl-static-2.0.34.Final.jarcpe:2.3:a:apache_tomcat:apache_tomcat:2.0.34:*:*:*:*:*:*:*pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.34.Final 0Low37
org.osgi.annotation.versioning-1.0.0.jarpkg:maven/org.osgi/org.osgi.annotation.versioning@1.0.0 040
osgi-resource-locator-1.0.3.jarpkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3 030
postgresql-42.2.16.jre6.jarcpe:2.3:a:postgresql:postgresql:42.2.16.jre6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.2.16.jre6:*:*:*:*:*:*:*		pkg:maven/org.postgresql/postgresql@42.2.16.jre6 0Highest43
protobuf-java-3.6.1.jarpkg:maven/com.google.protobuf/protobuf-java@3.6.1 027
reactive-streams-1.0.3.jarpkg:maven/org.reactivestreams/reactive-streams@1.0.3 025
resteasy-core-4.4.2.Final.jarcpe:2.3:a:redhat:resteasy:4.4.2:*:*:*:*:*:*:*pkg:maven/org.jboss.resteasy/resteasy-core@4.4.2.Final 0Highest34
slf4j-api-1.7.30.jarpkg:maven/org.slf4j/slf4j-api@1.7.30 029
smallrye-config-1.3.9.jarpkg:maven/io.smallrye/smallrye-config@1.3.9 020
snakeyaml-1.26.jarcpe:2.3:a:snakeyaml_project:snakeyaml:1.26:*:*:*:*:*:*:*pkg:maven/org.yaml/snakeyaml@1.26 0Highest28
snmp4j-2.8.3.jarpkg:maven/org.snmp4j/snmp4j@2.8.3 022
snmp4j-agent-2.7.3.jarpkg:maven/org.snmp4j/snmp4j-agent@2.7.3 025
txw2-2.3.3-b01.jarpkg:maven/org.glassfish.jaxb/txw2@2.3.3-b01 033
xercesImpl-2.12.1.jarcpe:2.3:a:exist-db:exist:2.12.1:*:*:*:*:*:*:*pkg:maven/org.exist-db.thirdparty.xerces/xercesImpl@2.12.1CRITICAL1Highest75
xml-apis-1.4.01.jarpkg:maven/xml-apis/xml-apis@1.4.01 076
zjsonpatch-0.4.11.jarpkg:maven/com.flipkart.zjsonpatch/zjsonpatch@0.4.11 020

Dependencies

WaarpCommon-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpCommon/3.5.0/WaarpCommon-3.5.0.jar
MD5: 3f2382eeb0ab67ee203619c835d5be6c
SHA1: 01f9d4464c4514ba77031fc7db53b9ffe3577f7e
SHA256:29b3c2a892f33c4dc83e60346d33c8a8e4955a6c6b92c4decb45c6e03291b018
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpDigest-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpDigest/3.5.0/WaarpDigest-3.5.0.jar
MD5: 44367dffd521fa957ca866da01d11021
SHA1: 317996c11e2beae132807aa258953b151a4b2761
SHA256:0e3447af32c44d11399ff8695a6d751afb399356ada0a5e1db0518f1667c4323
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpExec-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpExec/3.5.0/WaarpExec-3.5.0.jar
MD5: 41533ac1cdef5965b1f5cdd93f4366be
SHA1: 1ee5f54d41b1546dd05d83748e89850293e66631
SHA256:a1791cc82c8ad678bd9181fdd4cc32d8af0e86bd2b8e949d0ca9eacb8ba77101
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpFtp-Core-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpFtp-Core/3.5.0/WaarpFtp-Core-3.5.0.jar
MD5: 41e5ff0fc9047722b4dafb310cf55d05
SHA1: 042c54d9b9bf309714de2e47ef30acb5d771dd48
SHA256:730ef2f6641963a184702f5fc3f0536b20d517ea83d10b43536f6a7f12a68fb5
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpFtp-Filesystem-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpFtp-Filesystem/3.5.0/WaarpFtp-Filesystem-3.5.0.jar
MD5: aa6383d35be5506750521db0ced209ff
SHA1: b4503f5ad97237e81e1b85c0c55b70cb95f8e917
SHA256:ae220be4a6c7b6eb5cc6cb299b23b9ea81fba3d375333d300366ff7b7720a67d
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpFtp-Simpleimpl-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpFtp-Simpleimpl/3.5.0/WaarpFtp-Simpleimpl-3.5.0.jar
MD5: 5e20bd673ed918bf36bec007578bec47
SHA1: 3f0fbc651173754f4565525c7766ca50c34b5ebf
SHA256:358732fd3738549a3475a471873750f53111a35de771536a9c4414a8d8c756a6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpFtpClient-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpFtpClient/3.5.0/WaarpFtpClient-3.5.0.jar
MD5: 0f62319fdd1f17f13916c1a5e371c286
SHA1: 59a9153d411248f7da85318f5b872440f98a4356
SHA256:bde6c6bef57b2f5c245c0d5ae295a7ff9235eb0544f271d33805c4122ddeef30
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpGatewayFtp-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpGatewayFtp/3.5.0/WaarpGatewayFtp-3.5.0.jar
MD5: 1d49b2499003221b37ca8da51c77aff5
SHA1: d80efab2392583052be394d36018b74270e02f6f
SHA256:2d002e15358a2e8ad665468025896660ed84087a7396508cd5bb29cab03dc175
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpGatewayKernel-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpGatewayKernel/3.5.0/WaarpGatewayKernel-3.5.0.jar
MD5: 663773e33d2074dc5f66a240c1d36817
SHA1: 027660271568722cd39deadb4b098f0f109b7086
SHA256:e34ee950f4c83950623c86ef772c206866e71682993cf5696db3a8c693e18ebe
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpHttp-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpHttp/3.5.0/WaarpHttp-3.5.0.jar
MD5: f6835f6687bfd7ee316842ff810bd8a7
SHA1: f49578d3d2e2c530b0e2863ab69628be21213de5
SHA256:3ce25abeb4e0133f9de0a7312c35143b901f1c720294253f6079993fc6645bfa
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpIcap-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpIcap/3.5.0/WaarpIcap-3.5.0.jar
MD5: 8d42011c5bebef44806727982065d500
SHA1: 5f8ea2a2973709b2abe20645cf20f86bac3fa2f5
SHA256:881b16e1bc524e39558516926057e504ca82298bf6a99f6ddda2880db86f680e
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpPassword-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpPassword/3.5.0/WaarpPassword-3.5.0.jar
MD5: 9deea65766c1bf3dc379a48c3a68b184
SHA1: c5f56b08497abd33b5f5e8c692d93c0c8cd8e604
SHA256:050f4afb27a3062b08287b7eb0f10097ad85186cc48013452e280faed3f22bd6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpProxyR66-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpProxyR66/3.5.0/WaarpProxyR66-3.5.0.jar
MD5: 4a041acd4eb15ce40d7e2b117a41af79
SHA1: 49163eb1f50d83f4cdf3ec0eee78b347e2c36064
SHA256:5924db83dae45e9ad253ecd0e47cfcc6a43ccbf4c62fe9ccc72b002c03ba98af
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpR66-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpR66/3.5.0/WaarpR66-3.5.0.jar
MD5: 7a24c0c1a544a3c341f4c0be593e0829
SHA1: d587a7001e419d0b606955a416e42403579da60e
SHA256:58e244ca07f53f57c3ea0f1a5555f79ab87a70f10779c5cdf50d6f049fbd7f7d
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpSnmp-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpSnmp/3.5.0/WaarpSnmp-3.5.0.jar
MD5: e07dae806a1ef334fbf6f6dfb4595d2f
SHA1: 58e71f40e6d4f6fb2c2bb138c555139072084c5c
SHA256:65681793028162259f3581f298e135a08c15c0046e5e01ca82b20aee61a1e3c6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

WaarpThrift-3.5.0.jar

License:

GPL 3.0: LICENSE.txt
File Path: /home/frederic/.m2/repository/Waarp/WaarpThrift/3.5.0/WaarpThrift-3.5.0.jar
MD5: 9d3891eb60f5bef552e47406660d8c5a
SHA1: 410d27c1af853de10e089952813b2d9c19fd47cb
SHA256:bc8d112cfeaf5bba1d7b835c3436ba5b202885b8b5ce4be6cbfbc113c3e03624
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

btf-1.2.jar

Description:

null

License:

Lesser General Public License, version 3 or greater: http://www.gnu.org/licenses/lgpl.html
Apache Software License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/frederic/.m2/repository/com/github/fge/btf/1.2/btf-1.2.jar
MD5: 5c91cd1157e0bb99e77a33b6f42a457c
SHA1: 9e66651022eb86301b348d57e6f59459effc343b
SHA256:38a380577a186718cb97ee8af58d4f40f7fbfdc23ff68b5f4b3c2c68a1d5c05d
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

cdi-api-2.0.SP1.jar

Description:

APIs for CDI (Contexts and Dependency Injection for Java)

License:

Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt
File Path: /home/frederic/.m2/repository/javax/enterprise/cdi-api/2.0.SP1/cdi-api-2.0.SP1.jar
MD5: 9a73e10c9fcdac545343e1292b06e605
SHA1: 4049cdc830c72149c3315182e0441960de935e0e
SHA256:4e23f4550e3468e7e8f53f81602bccb8e6f53a3fc8a7392a213098f23c68f7cd
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

CVE-2014-8122  

Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related to a stale thread state.
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:N

References:

Vulnerable Software & Versions: (show all)

checker-qual-2.11.1.jar

Description:

        Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker

License:

The MIT License: http://opensource.org/licenses/MIT
File Path: /home/frederic/.m2/repository/org/checkerframework/checker-qual/2.11.1/checker-qual-2.11.1.jar
MD5: 936884d7b04ee8f064df137bcdfe470d
SHA1: 8c43bf8f99b841d23aadda6044329dad9b63c185
SHA256:015224a4b1dc6de6da053273d4da7d39cfea20e63038169fc45ac0d1dc9c5938
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-beanutils-1.9.4.jar

Description:

Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256:7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-cli-1.4.jar

Description:

    Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-cli/commons-cli/1.4/commons-cli-1.4.jar
MD5: c966d7e03507c834d5b09b848560174e
SHA1: c51c00206bb913cd8612b24abd9fa98ae89719b1
SHA256:fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-codec-1.15.jar

Description:

     The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-codec/commons-codec/1.15/commons-codec-1.15.jar
MD5: 303baf002ce6d382198090aedd9d79a2
SHA1: 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d
SHA256:b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-collections-3.2.2.jar

Description:

Types that extend and augment the Java Collections Framework.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256:eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-collections4-4.2.jar

Description:

The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/commons/commons-collections4/4.2/commons-collections4-4.2.jar
MD5: b290524be8a0dbb6521df95f4ce80c8d
SHA1: 54ebea0a5b653d3c680131e73fe807bb8f78c4ed
SHA256:6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-compress-1.20.jar

Description:

Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/commons/commons-compress/1.20/commons-compress-1.20.jar
MD5: 3f7237fb56029591b5bdd2698c196220
SHA1: b8df472b31e1f17c232d2ad78ceb1c84e00c641b
SHA256:0aeb625c948c697ea7b205156e112363b59ed5e2551212cd4e460bdb72c7c06e
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-daemon-1.2.2.jar

Description:

    Apache Commons Daemon software is a set of utilities and Java support
    classes for running Java applications as server processes. These are
    commonly known as 'daemon' processes in Unix terminology (hence the
    name). On Windows they are called 'services'.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-daemon/commons-daemon/1.2.2/commons-daemon-1.2.2.jar
MD5: bb27d960ade50ef134ce1009399014c3
SHA1: a3af8109d05090664542b1eba2549108cb56479f
SHA256:e9469231d2f1e2e5a5c676ca9acb0012b6a4be3f8d7ca1884aae5dfe23beca65
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-dbcp-1.4.jar

Description:

Commons Database Connection Pooling

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-dbcp/commons-dbcp/1.4/commons-dbcp-1.4.jar
MD5: b004158fab904f37f5831860898b3cd9
SHA1: 30be73c965cc990b153a100aaaaafcf239f82d39
SHA256:a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-exec-1.3.jar

Description:

Apache Commons Exec is a library to reliably execute external processes from within the JVM.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/commons/commons-exec/1.3/commons-exec-1.3.jar
MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8
SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b
SHA256:cb49812dc1bfb0ea4f20f398bcae1a88c6406e213e67f7524fb10d4f8ad9347b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-io-2.7.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-io/commons-io/2.7/commons-io-2.7.jar
MD5: 87709c85b69a685ddba69c65fe6dd6f9
SHA1: 3f2bd4ba11c4162733c13cc90ca7c7ea09967102
SHA256:4547858fff38bbf15262d520685b184a3dce96897bc1844871f055b96e8f6e95
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-net-3.7-ftp.jar

File Path: /home/frederic/.m2/repository/commons-net/commons-net/3.7/commons-net-3.7-ftp.jar
MD5: a5db757f2d33b4ae44914fb2643cace2
SHA1: 83318fa5e8996dc2e8e2b9a3b08cf0b3a071c0e7
SHA256:39fd4d7309a3e6fbbd727d25f325231f3e9510578fa92bfd0f506fc7923e0857
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-pool-1.6.jar

Description:

Commons Object Pooling Library

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/commons-pool/commons-pool/1.6/commons-pool-1.6.jar
MD5: 5ca02245c829422176d23fa530e919cc
SHA1: 4572d589699f09d866a226a14b7f4323c6d8f040
SHA256:46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

commons-pool2-2.8.1.jar

Description:

The Apache Commons Object Pooling Library.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/commons/commons-pool2/2.8.1/commons-pool2-2.8.1.jar
MD5: 157b59fa54ae503b58ee0da4fdb79a08
SHA1: 4f89525d29a81305edea6c504fd3b1ecf7ecd16e
SHA256:16154621c8d292278d3849c7df6be8de8cdc9feb7479b2b2a0a917ee847bfce6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

dom4j-2.1.3.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE
File Path: /home/frederic/.m2/repository/org/dom4j/dom4j/2.1.3/dom4j-2.1.3.jar
MD5: 41efcf234c5a05a8c590f9b51d53ca66
SHA1: a75914155a9f5808963170ec20653668a2ffd2fd
SHA256:549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

error_prone_annotations-2.3.4.jar

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/google/errorprone/error_prone_annotations/2.3.4/error_prone_annotations-2.3.4.jar
MD5: 67beeee58df00366100061c7da82f4c2
SHA1: dac170e4594de319655ffb62f41cbd6dbb5e601e
SHA256:baf7d6ea97ce606c53e11b6854ba5f2ce7ef5c24dddf0afa18d1260bd25b002c
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

failureaccess-1.0.1.jar

Description:

    Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar
MD5: 091883993ef5bfa91da01dcc8fc52236
SHA1: 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA256:a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

ftp4j-1.7.2.jar

Description:

POM was created from install:install-file

File Path: /home/frederic/.m2/repository/it/sauronsoftware/ftp4j/1.7.2/ftp4j-1.7.2.jar
MD5: 9b5971848287cbe7b44cbd65030bb8a6
SHA1: abd6a2ba75b142926052c4538611efda49e0b0e2
SHA256:af8093a956cc5fc7289e72607b7ece2325db292b1ab7cf728dc876d3ad69061d
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

guava-29.0-jre.jar

Description:

    Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/google/guava/guava/29.0-jre/guava-29.0-jre.jar
MD5: c87962fe0522b105531f37fe351b3b0c
SHA1: 801142b4c3d0f0770dd29abea50906cacfddd447
SHA256:b22c5fb66d61e7b9522531d04b2f915b5158e80aa0b40ee7282c8bfb07b0da25
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

h2-1.4.200.jar

Description:

H2 Database Engine

License:

MPL 2.0 or EPL 1.0: https://h2database.com/html/license.html
File Path: /home/frederic/.m2/repository/com/h2database/h2/1.4.200/h2-1.4.200.jar
MD5: 18c05829a03b92c0880f22a3c4d1d11d
SHA1: f7533fe7cb8e99c87a43d325a77b4b678ad9031a
SHA256:3ad9ac4b6aae9cd9d3ac1c447465e1ed06019b851b893dd6a8d76ddb6d85bca6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

h2-1.4.200.jar: data.zip: table.js

File Path: /home/frederic/.m2/repository/com/h2database/h2/1.4.200/h2-1.4.200.jar/org/h2/util/data.zip/org/h2/server/web/res/table.js
MD5: 0e4b062032d1a5ea21b7ad0d878d3c31
SHA1: c5efb4c787ace5210d545d68742f415d28a61bdc
SHA256:0e1bf9d8833063242e13836bd0fca607763676308acf8b6e6992e7d7d8008d45
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

  • None

h2-1.4.200.jar: data.zip: tree.js

File Path: /home/frederic/.m2/repository/com/h2database/h2/1.4.200/h2-1.4.200.jar/org/h2/util/data.zip/org/h2/server/web/res/tree.js
MD5: 98225c0658feee5efb09b28c76e25884
SHA1: 6b84951f0a2febfbb1046e768d12f784047ce48c
SHA256:e9ee4656df4c1db81dcf20b7dcdcf08701c3b63f929ae8d8af69c334212c169e
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

  • None

httpclient-4.5.12.jar

Description:

   Apache HttpComponents Client

File Path: /home/frederic/.m2/repository/org/apache/httpcomponents/httpclient/4.5.12/httpclient-4.5.12.jar
MD5: 72002652711fe0fa3218d2bf20f47409
SHA1: 4023a2a80b64c25926911faf350b50cd2a29220f
SHA256:bc5f065aba5dd815ee559dd24d9bcb797fb102ff9cfa036f5091ebc529bd3b93
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

httpcore-4.4.13.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /home/frederic/.m2/repository/org/apache/httpcomponents/httpcore/4.4.13/httpcore-4.4.13.jar
MD5: e07a248f61c52776a2366c075dcd4963
SHA1: 853b96d3afbb7bf8cc303fe27ee96836a10c1834
SHA256:e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

istack-commons-runtime-3.0.10.jar

Description:

istack common utility code

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/frederic/.m2/repository/com/sun/istack/istack-commons-runtime/3.0.10/istack-commons-runtime-3.0.10.jar
MD5: 05660669c45f5bb65cece45bf01d92bc
SHA1: be8418d9a1c91d8569045e82e8ad73cadbaa1f0d
SHA256:85239e7fff2463b7d8a9c3962f78ee3e2c6db9455c724f29281e2c5f663e22be
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

j2objc-annotations-1.3.jar

Description:

    A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/google/j2objc/j2objc-annotations/1.3/j2objc-annotations-1.3.jar
MD5: 5fa4ec4ec0c5aa70af8a7d4922df1931
SHA1: ba035118bc8bac37d7eff77700720999acd9986d
SHA256:21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jackson-core-2.11.2.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/fasterxml/jackson/core/jackson-core/2.11.2/jackson-core-2.11.2.jar
MD5: 1cf7bf96372fd34cb4a450f19d8e706b
SHA1: bc022ab0f0c83c07f9c52c5ab9a6a4932b15cc35
SHA256:f8d768c4e8884522be5881dd2a91aec812d08d4f05852b434190e22de659dfc9
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jackson-coreutils-1.6.jar

Description:

null

License:

Lesser General Public License, version 3 or greater: http://www.gnu.org/licenses/lgpl.html
Apache Software License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/frederic/.m2/repository/com/github/fge/jackson-coreutils/1.6/jackson-coreutils-1.6.jar
MD5: 26a6b351813e2895cba18e0ee4abe5b7
SHA1: 9e6af56eb7cc2a65700b289abc7ee2bd170fd231
SHA256:d84b416924fb061a26c48a5c90e98cf4d4e718179eb1df702aa8f1021163eed6
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jackson-databind-2.11.2.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.11.2/jackson-databind-2.11.2.jar
MD5: 14fd0effa4d1d3e09edb36423be82aff
SHA1: ee08bbd8975dde844307fe8309dfcd5ec7ee129d
SHA256:cb890b4aad8ed21a7b57e3c8f7924dbdca1aeff9ddd27cb0ff37243037ae1342
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.activation-1.2.1.jar

Description:

JavaBeans Activation Framework

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/frederic/.m2/repository/com/sun/activation/jakarta.activation/1.2.1/jakarta.activation-1.2.1.jar
MD5: dc519b1f09bbaf9274ea5da358a00110
SHA1: 8013606426a73d8ba6b568370877251e91a38b89
SHA256:d84d4ba8b55cdb7fdcbb885e6939386367433f56f5ab8cfdc302a7c3587fa92b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.activation-api-1.2.1.jar

Description:

JavaBeans Activation Framework API jar

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/frederic/.m2/repository/jakarta/activation/jakarta.activation-api/1.2.1/jakarta.activation-api-1.2.1.jar
MD5: 9b647398add993324d3d9e5effa6005a
SHA1: 562a587face36ec7eff2db7f2fc95425c6602bc1
SHA256:8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.annotation-api-1.3.5.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar
MD5: 8b165cf58df5f8c2a222f637c0a07c97
SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d
SHA256:85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.inject-2.6.1.jar

Description:

Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/org/glassfish/hk2/external/jakarta.inject/2.6.1/jakarta.inject-2.6.1.jar
MD5: 4d7c80a1e3cd54531af03bef4537f7af
SHA1: 8096ebf722902e75fbd4f532a751e514f02e1eb7
SHA256:5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.validation-api-2.0.2.jar

Description:

        Jakarta Bean Validation API

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/jakarta/validation/jakarta.validation-api/2.0.2/jakarta.validation-api-2.0.2.jar
MD5: 77501d529c1928c9bac2500cc9f93fb0
SHA1: 5eacc6522521f7eacb081f95cee1e231648461e7
SHA256:b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.ws.rs-api-2.1.6.jar

Description:

Jakarta RESTful Web Services API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/jakarta/ws/rs/jakarta.ws.rs-api/2.1.6/jakarta.ws.rs-api-2.1.6.jar
MD5: c3892382aeb5c54085b22b1890511d29
SHA1: 1dcb770bce80a490dff49729b99c7a60e9ecb122
SHA256:4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jakarta.xml.bind-api-2.3.2.jar

Description:

JAXB (JSR 222) API

License:

http://www.eclipse.org/org/documents/edl-v10.php
File Path: /home/frederic/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.2/jakarta.xml.bind-api-2.3.2.jar
MD5: dabb40ba58199304c640b7bd8bb2fbac
SHA1: 8d49996a4338670764d7ca4b85a1c4ccf7fe665d
SHA256:69156304079bdeed9fc0ae3b39389f19b3cc4ba4443bc80508995394ead742ea
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javassist-3.27.0-GA.jar

Description:

  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/
File Path: /home/frederic/.m2/repository/org/javassist/javassist/3.27.0-GA/javassist-3.27.0-GA.jar
MD5: 05ea852668c9e38294d1bb823af95a70
SHA1: f63e6aa899e15eca8fdaa402a79af4c417252213
SHA256:0730bdb1547a5a3f458d60400d804078d80f329c5b5dbc2498a4e220de8f7013
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javasysmon-0.3.6.jar

Description:

POM was created from install:install-file

File Path: /home/frederic/.m2/repository/javasysmon/javasysmon/0.3.6/javasysmon-0.3.6.jar
MD5: 769d7e1c06277aceb34b5ccbf681be17
SHA1: 808e60b1cf74b37d18374668844228bd9e6a5b28
SHA256:e7f97c4a75719c2ecd8e5159bd05e9278bf1c6d48139099828ab594be5ba45d7
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.annotation-api-1.3.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE
File Path: /home/frederic/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.el-api-3.0.0.jar

Description:

Expression Language 3.0 API

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html
File Path: /home/frederic/.m2/repository/javax/el/javax.el-api/3.0.0/javax.el-api-3.0.0.jar
MD5: 018bd5e6158d75bf328b2cafd53cfc6a
SHA1: 60a59edc89f93d57541da31ee1c83428ab1cdcb3
SHA256:8d21ac8c3a38027be27ff4c4fe24806ae2fc188559123253ddc7425066d78fa1
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.inject-1.jar

Description:

The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256:91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.interceptor-api-1.2.jar

Description:

Project GlassFish Interceptor API

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html
File Path: /home/frederic/.m2/repository/javax/interceptor/javax.interceptor-api/1.2/javax.interceptor-api-1.2.jar
MD5: 001934e19937dc127ff1d4d60cd8fc5d
SHA1: a5c058610aebacc1eb89c89e8fde2a978090e374
SHA256:62acf2da0e19e813e0f5aa5de09108368b12e40b4a2f47c66a88f984f4f5143b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.servlet-api-4.0.1.jar

Description:

Java(TM) Servlet 4.0 API Design Specification

License:

CDDL + GPLv2 with classpath exception: https://oss.oracle.com/licenses/CDDL+GPL-1.1
File Path: /home/frederic/.m2/repository/javax/servlet/javax.servlet-api/4.0.1/javax.servlet-api-4.0.1.jar
MD5: b80414033bf3397de334b95e892a2f44
SHA1: a27082684a2ff0bf397666c3943496c44541d1ca
SHA256:83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

javax.ws.rs-api-2.1.1.jar

Description:

Java API for RESTful Web Services

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/javax/ws/rs/javax.ws.rs-api/2.1.1/javax.ws.rs-api-2.1.1.jar
MD5: 23b81452f9e2076ffefede649975b0d1
SHA1: d3466bc9321fe84f268a1adb3b90373fc14b0eb5
SHA256:2c309eb2c9455ffee9da8518c70a3b6d46be2a269b2e2a101c806a537efe79a4
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jaxb-runtime-2.3.3-b01.jar

Description:

JAXB (JSR 222) Reference Implementation

File Path: /home/frederic/.m2/repository/org/glassfish/jaxb/jaxb-runtime/2.3.3-b01/jaxb-runtime-2.3.3-b01.jar
MD5: f1d96ef7cbe6d52929f4e4a4036c1d05
SHA1: 4caeecc729d73a2ee354e11c3c94d5ca10d4a8ae
SHA256:3cd95396cea903c1201dc9baa655e6b98a2e5c73425942818367448a7ecbb118
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jaxen-1.2.0.jar

Description:

Jaxen is a universal XPath engine for Java.

License:

BSD License 2.0: https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt
File Path: /home/frederic/.m2/repository/jaxen/jaxen/1.2.0/jaxen-1.2.0.jar
MD5: c32cf69356254b8f5050fce6e86358e9
SHA1: c10535a925bd35129a4329bc75065cc6b5293f2c
SHA256:70feef9dd75ad064def05a3ce8975aeba515ee7d1be146d12199c8828a64174c
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jboss-annotations-api_1.3_spec-2.0.1.Final.jar

Description:

JBoss Jakarta Annotations API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/org/jboss/spec/javax/annotation/jboss-annotations-api_1.3_spec/2.0.1.Final/jboss-annotations-api_1.3_spec-2.0.1.Final.jar
MD5: e749fa3db958f32ca811bce62039facb
SHA1: b3744f492ce9a65d1197a5b24645dff93fa85424
SHA256:afc4e3b8701119c9a2ceb8cebe3fd1869a269de768d7d56e7b5051827a132368
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jboss-jaxb-api_2.3_spec-1.0.1.Final.jar

Description:

JSR-000222: Java(TM) Architecture for XML Binding (JAXB) 2.3

License:

CDDL or GPLv2 with exceptions: https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
File Path: /home/frederic/.m2/repository/org/jboss/spec/javax/xml/bind/jboss-jaxb-api_2.3_spec/1.0.1.Final/jboss-jaxb-api_2.3_spec-1.0.1.Final.jar
MD5: 3e43746a0cdff00324a67eace06a57a5
SHA1: 9280f807930b8949a5eb8535fd422bff1982621c
SHA256:5e9a85868190c568de71748ea53b1d22d50bd362ec862dd1e9989edd31b911cf
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jboss-jaxrs-api_2.1_spec-2.0.1.Final.jar

Description:

Jakarta API for RESTful Web Services

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/org/jboss/spec/javax/ws/rs/jboss-jaxrs-api_2.1_spec/2.0.1.Final/jboss-jaxrs-api_2.1_spec-2.0.1.Final.jar
MD5: 35b4d1b6b5f70f01c108c6b2349e4635
SHA1: 75cdeb26ccf87bc6f9d0f31b5ec4d80aa15b662c
SHA256:3518db0a3980aacfdae916f0eb081d0fcefaa2076d2ba603edc779a601d2d1a4
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jcl-over-slf4j-1.7.30.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/slf4j/jcl-over-slf4j/1.7.30/jcl-over-slf4j-1.7.30.jar
MD5: 69ad224b2feb6f86554fe8997b9c3d4b
SHA1: cd92524ea19d27e5b94ecd251e1af729cffdfe15
SHA256:71e9ee37b9e4eb7802a2acc5f41728a4cf3915e7483d798db3b4ff2ec8847c50
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jersey-common-2.31.jar

Description:

Jersey core common packages

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
The GNU General Public License (GPL), Version 2, With Classpath Exception: https://www.gnu.org/software/classpath/license.html
Apache License, 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
Public Domain: https://creativecommons.org/publicdomain/zero/1.0/
File Path: /home/frederic/.m2/repository/org/glassfish/jersey/core/jersey-common/2.31/jersey-common-2.31.jar
MD5: 4e155dab61f8761a081969692e3d4d41
SHA1: b918c028c3c8c8b92a1ebb764571c369a85de04b
SHA256:5b25dd2819835ae2479c74c112565328094d2dac22448dbe1d5723a401fbd7ae
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

joda-time-2.10.6.jar

Description:

Date and time library to replace JDK date handling

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/joda-time/joda-time/2.10.6/joda-time-2.10.6.jar
MD5: 0072f121a68dd42ad73ab53a4a02b425
SHA1: 26ef5b746eba68dffc7040c86e80b434e20e9b12
SHA256:6b1b1691b7391efda2143bc12bc6916dbfccf66370a8c946dc04f4f7ddf13cbf
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

json-patch-1.9.jar

Description:

JSON Patch (RFC 6902) and JSON Merge Patch (RFC 7386) implementation in Java

License:

Lesser General Public License, version 3 or greater: http://www.gnu.org/licenses/lgpl.html
Apache Software License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/frederic/.m2/repository/com/github/fge/json-patch/1.9/json-patch-1.9.jar
MD5: 9df773c8904f39b05b6a8a6848804c96
SHA1: 0a4c3c97a0f5965dec15795acf40d3fbc897af4b
SHA256:2d6acbda3675e6f25b7b4ab338317006865a8416a69c2b5e1cfa8b8209fc10a1
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

jul-to-slf4j-1.7.30.jar

Description:

JUL to SLF4J bridge

File Path: /home/frederic/.m2/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jar
MD5: f2c78cb93d70dc5dea0c50f36ace09c1
SHA1: d58bebff8cbf70ff52b59208586095f467656c30
SHA256:bbcbfdaa72572255c4f85207a9bfdb24358dc993e41252331bd4d0913e4988b9
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

libthrift-0.13.0.jar

Description:

Thrift is a software framework for scalable cross-language services development.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/thrift/libthrift/0.13.0/libthrift-0.13.0.jar
MD5: 31132a57eacc3e7cd2b7af626b5f1ff9
SHA1: 0e5af3b6dc164eb2c699b70bf67a0babef507faf
SHA256:f261ec1cfb7452e25c584cb4440389dffce59a6d38dfe91d12ec790594629b6e
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Description:

    An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....

File Path: /home/frederic/.m2/repository/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
MD5: d094c22570d65e132c19cea5d352e381
SHA1: b421526c5f297295adef1c886e5246c39d4ac629
SHA256:b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

log4j-api-2.13.3.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.3/log4j-api-2.13.3.jar
MD5: 236b9969df6b394e88283a9f813b9b95
SHA1: ec1508160b93d274b1add34419b897bae84c6ca9
SHA256:2b4b1965c9dce7f3732a0fbf5c8493199c1e6bf8cf65c3e235b57d98da5f36af
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

log4j-over-slf4j-1.7.30.jar

Description:

Log4j implemented over SLF4J

License:

Apache Software Licenses: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/slf4j/log4j-over-slf4j/1.7.30/log4j-over-slf4j-1.7.30.jar
MD5: 3b22990e0f731c139873e7c5f48853dd
SHA1: 69af1f8a7ef3040a2881f7ec105e0a86fb158ab2
SHA256:ad9d34d0b7f0bf576be2b5f844988fd872bb99f87ecffa41d54a8ebaad79a10b
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

CVE-2020-9488  

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender.
CWE-295 Improper Certificate Validation

CVSSv2:
  • Base Score: MEDIUM (4.3)
  • Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSSv3:
  • Base Score: LOW (3.7)
  • Vector: /AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References:

Vulnerable Software & Versions:

logback-core-1.2.3.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html
File Path: /home/frederic/.m2/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar
MD5: 841fc80c6edff60d947a3872a2db4d45
SHA1: 864344400c3d4d92dfeb0a305dc87d953677c03c
SHA256:5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

mariadb-java-client-2.5.4.jar

Description:

JDBC driver for MariaDB and MySQL

License:

LGPL-2.1
File Path: /home/frederic/.m2/repository/org/mariadb/jdbc/mariadb-java-client/2.5.4/mariadb-java-client-2.5.4.jar
MD5: fa49f696b08a26b810e25d7743b21982
SHA1: adb3dbc97684a254b9ecf488167bbf177a33d8ba
SHA256:5fafee1aad82be39143b4bfb8915d6c2d73d860938e667db8371183ff3c8500a
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

microprofile-config-api-1.3.jar

Description:

MicroProfile Config :: API

License:

Apache License, Version 2.0
File Path: /home/frederic/.m2/repository/org/eclipse/microprofile/config/microprofile-config-api/1.3/microprofile-config-api-1.3.jar
MD5: 21a30777482d84e5682181ef404a0fd9
SHA1: 5813ff0cf78ee03b483887ebf63084ae195f332f
SHA256:6a1bf1548909e97d4866847cf8e96e2f30d15b959a68c95385daccba8abe3072
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

msg-simple-1.1.jar

Description:

null

License:

Lesser General Public License, version 3 or greater: http://www.gnu.org/licenses/lgpl.html
Apache Software License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/frederic/.m2/repository/com/github/fge/msg-simple/1.1/msg-simple-1.1.jar
MD5: b0d8d70468edff2e223b3d2f07cc5de1
SHA1: f261263e13dd4cfa93cc6b83f1f58f619097a2c4
SHA256:c3c5add3971a9a7f1868beb7607780d73f36bb611c7505de01f1baf49ab4ff75
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

mysql-connector-java-8.0.20.jar

Description:

JDBC Type 4 driver for MySQL

License:

The GNU General Public License, v2 with FOSS exception
File Path: /home/frederic/.m2/repository/mysql/mysql-connector-java/8.0.20/mysql-connector-java-8.0.20.jar
MD5: 48d69b9a82cbe275af9e45cb80f6b15f
SHA1: d8d388e71c823570662a45dd33f4284141921280
SHA256:56a42553b516660ae0bcd08f7f4f5f375294afbd62200d6c0c88a8c61c668ede
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

netty-all-4.1.51.Final.jar

File Path: /home/frederic/.m2/repository/io/netty/netty-all/4.1.51.Final/netty-all-4.1.51.Final.jar
MD5: c6cff5eb9da8ba723bf2c1a679e1b4ee
SHA1: 5e5f741acc4c211ac4572c31c7e5277ec465e4e4
SHA256:eb8fac6a0bf6885e16fdd453f7f362cdfffa730221c4906721bbfab46fe1f6bf
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

netty-http-java6-1.5.0.jar

Description:

Waarp shaded jar for Netty HTTP Router for Java 6

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/Waarp/netty-http-java6/1.5.0/netty-http-java6-1.5.0.jar
MD5: c626a48ebeb6d2c0dfea9953a1db333b
SHA1: 11a3759b842014ccadd544dd58c9320a44ff41a1
SHA256:6676f2f137eace2c32a534567d92c2167aa9e27cc47de585c5d79e7e32bdf373
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

netty-tcnative-boringssl-static-2.0.34.Final.jar

Description:

    A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.

License:

http://www.apache.org/licenses/LICENSE-2.0
File Path: /home/frederic/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.34.Final/netty-tcnative-boringssl-static-2.0.34.Final.jar
MD5: 2b2c276b2e7caa8a54d69bc363e1da8d
SHA1: 2c6ed37507465974089e51d425787a11c53cdfb5
SHA256:4d4aa17164d81d138f62a498c47d347008dd76c13ded6cade5e9fa2fbfbb1295
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

org.osgi.annotation.versioning-1.0.0.jar

Description:

OSGi Companion Code for org.osgi.annotation.versioning Version 1.0.0.

License:

Apache License, Version 2.0: http://opensource.org/licenses/apache2.0.php
File Path: /home/frederic/.m2/repository/org/osgi/org.osgi.annotation.versioning/1.0.0/org.osgi.annotation.versioning-1.0.0.jar
MD5: b707c08f31e7100928195f1ab9fdfd8f
SHA1: 42813c6d05fc83706280ea83d868da3b534f1e9c
SHA256:b299b3ca50b3a57504e131fddd34d5f3e10a581a6c81e74b6d8fba81c6e055a7
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

osgi-resource-locator-1.0.3.jar

Description:

Used by various API providers that rely on META-INF/services mechanism to locate providers.

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/frederic/.m2/repository/org/glassfish/hk2/osgi-resource-locator/1.0.3/osgi-resource-locator-1.0.3.jar
MD5: e7e82b82118c5387ae45f7bf3892909b
SHA1: de3b21279df7e755e38275137539be5e2c80dd58
SHA256:aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

postgresql-42.2.16.jre6.jar

Description:

PostgreSQL JDBC Driver Postgresql-jre6

License:

BSD-2-Clause: https://jdbc.postgresql.org/about/license.html
File Path: /home/frederic/.m2/repository/org/postgresql/postgresql/42.2.16.jre6/postgresql-42.2.16.jre6.jar
MD5: 89550079621f55d6ee1758eb951beacb
SHA1: c884bc2b7126cce4871da1641b496f84ce22baae
SHA256:259b5c1fa9f936be1868246b99979df84c1d0a713ddc9ba773e52a1b1fbd4e8c
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

protobuf-java-3.6.1.jar

Description:

    Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.

License:

https://opensource.org/licenses/BSD-3-Clause
File Path: /home/frederic/.m2/repository/com/google/protobuf/protobuf-java/3.6.1/protobuf-java-3.6.1.jar
MD5: 17b60a7d277343a16fe881d18adecc0b
SHA1: 0d06d46ecfd92ec6d0f3b423b4cd81cb38d8b924
SHA256:fb66d913ff0578553b2e28a3338cbbbe2657e6cfe0e98d939f23aea219daf508
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

reactive-streams-1.0.3.jar

Description:

A Protocol for Asynchronous Non-Blocking Data Sequence

License:

CC0: http://creativecommons.org/publicdomain/zero/1.0/
File Path: /home/frederic/.m2/repository/org/reactivestreams/reactive-streams/1.0.3/reactive-streams-1.0.3.jar
MD5: 69122b098fff1c6b1bf2cd3b355e7e03
SHA1: d9fb7a7926ffa635b3dcaa5049fb2bfa25b3e7d0
SHA256:1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

resteasy-core-4.4.2.Final.jar

File Path: /home/frederic/.m2/repository/org/jboss/resteasy/resteasy-core/4.4.2.Final/resteasy-core-4.4.2.Final.jar
MD5: da8584627e465c00d20b7e8e0a3d0a2f
SHA1: 27a61a31fda086cffc94fdfe80d909948151f971
SHA256:c49833e12a06ba304129be2152c601576665637eee94eec7ba9df09f7902f35f
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

slf4j-api-1.7.30.jar

Description:

The slf4j API

File Path: /home/frederic/.m2/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jar
MD5: f8be00da99bc4ab64c79ab1e2be7cb7c
SHA1: b5a4b6d16ab13e34a88fae84c35cd5d68cac922c
SHA256:cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

smallrye-config-1.3.9.jar

File Path: /home/frederic/.m2/repository/io/smallrye/smallrye-config/1.3.9/smallrye-config-1.3.9.jar
MD5: 2a616c51a1d045ba291801c7285f8b91
SHA1: 5a2f67cc06b1c119bd8f118be9bffe7e0d7824f5
SHA256:61a850ebdfc8510df682533c6691428a2998951cf7b57cf0e2e718b1c7c91c67
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

snakeyaml-1.26.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/yaml/snakeyaml/1.26/snakeyaml-1.26.jar
MD5: 72d987f6193910b63c5e6881ab64da32
SHA1: a78a8747147d2c5807683e76ec2b633e95c14fe9
SHA256:d87d607e500885356c03c1cae61e8c2e05d697df8787d5aba13484c2eb76a844
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

snmp4j-2.8.3.jar

Description:

SNMP API for Java

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/snmp4j/snmp4j/2.8.3/snmp4j-2.8.3.jar
MD5: d79571b66a8088747fd30b818b134923
SHA1: e8891d5864d1ad438e0b2d8e15b98dd2691072e6
SHA256:a7c90ba74790df260b1567a43a03e9906bb8b989e344fbc3a607dbd12ff62b19
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

snmp4j-agent-2.7.3.jar

Description:

SNMP-Agent API for Java

License:

Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/snmp4j/snmp4j-agent/2.7.3/snmp4j-agent-2.7.3.jar
MD5: 9d51aecb914ac512eef77ff1b4ed49cf
SHA1: 1188bd52c582b275835840491bb8a26f3ad5ca21
SHA256:06938d1052f3a9acf1b546e4b09d0483dd65d63cc76f7b1a361ec5ac3a04c6ce
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

txw2-2.3.3-b01.jar

Description:

        TXW is a library that allows you to write XML documents.

File Path: /home/frederic/.m2/repository/org/glassfish/jaxb/txw2/2.3.3-b01/txw2-2.3.3-b01.jar
MD5: 4e7db62b457d1876874d46956e0a9ff4
SHA1: 4679019bd1f908a792a07ef9db542cf37759367e
SHA256:d0de4c8f2ab610409c6659f44d7962200306ef9a6e9cb96a611ccf1e683a9f36
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

xercesImpl-2.12.1.jar

Description:

        Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family.
        This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building
        parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is
        the reference implementation of XNI but other parser components, configurations, and parsers can be written
        using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.
        Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema
        1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema
        Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for
        evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation
        of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete
        implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML
        Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that
        it does not yet provide an option to enable normalization checking as described in section 2.13 of this
        specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly
        serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/org/exist-db/thirdparty/xerces/xercesImpl/2.12.1/xercesImpl-2.12.1.jar
MD5: 9f82c362c893779109c1de812c5d4deb
SHA1: 3a206b25679f598a03374afd4e0410d8849b088b
SHA256:ae0c329a3187178c8e7b0369a5346845e426062ffbb8a08fc68ced6affe6c626
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

CVE-2018-1000823  

exist version <= 5.0.0-RC4 contains a XML External Entity (XXE) vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning.
CWE-611 Improper Restriction of XML External Entity Reference ('XXE')

CVSSv2:
  • Base Score: HIGH (7.5)
  • Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSSv3:
  • Base Score: CRITICAL (10.0)
  • Vector: /AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References:

Vulnerable Software & Versions: (show all)

xml-apis-1.4.01.jar

Description:

xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The SAX License: http://www.saxproject.org/copying.html
The W3C License: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip
File Path: /home/frederic/.m2/repository/xml-apis/xml-apis/1.4.01/xml-apis-1.4.01.jar
MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d
SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3
SHA256:a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers

zjsonpatch-0.4.11.jar

Description:

Java Library to find / apply JSON Patches according to RFC 6902

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/frederic/.m2/repository/com/flipkart/zjsonpatch/zjsonpatch/0.4.11/zjsonpatch-0.4.11.jar
MD5: fbc34b23751d73cce90880e5b386fbc4
SHA1: c5500b069122750c79d43167a8bcafd8458747fe
SHA256:bc785c6d2850e8a15203e354e1aa7233a246d157c055927c6097092e8e467b28
Referenced In Project/Scope:Waarp All JDK8:compile

Identifiers



This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the NPM Public Advisories.
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.