Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 6.1.1Report Generated On : Thu, 8 Apr 2021 11:30:05 +0200Dependencies Scanned : 55 (46 unique)Vulnerable Dependencies : 2 Vulnerabilities Found : 19Vulnerabilities Suppressed : 0... NVD CVE Checked : 2021-04-08T10:53:04NVD CVE Modified : 2021-04-08T07:01:57VersionCheckOn : 2021-03-15T17:11:58Summary Display:
Showing Vulnerable Dependencies (click to show all) Dependencies ST4-4.1.jarDescription:
StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output.
StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization.
It evolved over years of effort developing jGuru.com.
StringTemplate also powers the ANTLR 3 and 4 code generator. Its distinguishing characteristic
is that unlike other engines, it strictly enforces model-view separation.
Strict separation makes websites and code generators more flexible
and maintainable; it also provides an excellent defense against malicious
template authors.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/antlr/ST4/4.1/ST4-4.1.jarMD5: 0ed049972a799b12d8bd57031a48522aSHA1: 467d508be07a542ad0a68ffcaed2d561c5fb2e0cSHA256: 8b1ccaed9edc55cd255d9c19c4d8da4756d9b6fcb435671292b43470b16d75d8Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor jar package name stringtemplate Highest Vendor jar package name v4 Low Vendor file name ST4 High Vendor pom groupid antlr Highest Vendor pom name StringTemplate 4 High Vendor jar package name stringtemplate Low Vendor pom groupid org.antlr Highest Vendor pom artifactid ST4 Low Product jar package name stringtemplate Highest Product jar package name v4 Low Product file name ST4 High Product pom artifactid ST4 Highest Product pom groupid antlr Highest Product pom name StringTemplate 4 High Version file version 4.1 High Version pom version 4.1 Highest
activation-1.1.1.jarDescription:
The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data License:
COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0: https://glassfish.dev.java.net/public/CDDLv1.0.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/activation/activation/1.1.1/activation-1.1.1.jar
MD5: 46a37512971d8eca81c3fcf245bf07d2
SHA1: 485de3a253e23f645037828c07f1d7f1af40763a
SHA256: ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor file name activation High Vendor pom artifactid activation Low Vendor jar (hint) package name oracle Highest Vendor jar package name javax Highest Vendor Manifest Implementation-Vendor-Id com.sun Medium Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor jar package name activation Highest Vendor Manifest extension-name javax.activation Medium Vendor jar package name sun Highest Vendor pom name JavaBeans(TM) Activation Framework High Vendor pom groupid javax.activation Highest Vendor pom url http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp Highest Vendor Manifest Implementation-Vendor Sun Microsystems, Inc. High Product file name activation High Product Manifest specification-title JavaBeans(TM) Activation Framework Specification Medium Product pom url http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp Medium Product pom name JavaBeans(TM) Activation Framework High Product jar package name javax Highest Product jar package name activation Highest Product pom artifactid activation Highest Product Manifest extension-name javax.activation Medium Product pom groupid javax.activation Highest Version file version 1.1.1 High Version Manifest Implementation-Version 1.1.1 High Version pom version 1.1.1 Highest
antlr-runtime-3.5.2.jarDescription:
A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/antlr/antlr-runtime/3.5.2/antlr-runtime-3.5.2.jarMD5: 1fbbae2cb72530207c20b797bdabd029SHA1: cd9cd41361c155f3af0f653009dcecb08d8b4afdSHA256: ce3fc8ecb10f39e9a3cddcbb2ce350d272d9cd3d0b1e18e6fe73c3b9389c8734Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom name ANTLR 3 Runtime High Vendor Manifest Implementation-Vendor-Id org.antlr Medium Vendor pom parent-groupid org.antlr Medium Vendor file name antlr-runtime High Vendor pom groupid antlr Highest Vendor pom parent-artifactid antlr-master Low Vendor pom artifactid antlr-runtime Low Vendor jar package name runtime Highest Vendor pom url http://www.antlr.org Highest Vendor Manifest Implementation-Vendor ANTLR High Vendor jar package name antlr Highest Vendor pom groupid org.antlr Highest Product pom artifactid antlr-runtime Highest Product pom parent-groupid org.antlr Medium Product pom url http://www.antlr.org Medium Product file name antlr-runtime High Product pom parent-artifactid antlr-master Medium Product Manifest Implementation-Title ANTLR 3 Runtime High Product pom groupid antlr Highest Product jar package name runtime Highest Product pom name ANTLR 3 Runtime High Product jar package name antlr Highest Version pom version 3.5.2 Highest Version Manifest Implementation-Version 3.5.2 High Version file version 3.5.2 High
aspectjrt-1.9.6.jarDescription:
The runtime needed to execute a program using AspectJ License:
Eclipse Public License - v 1.0: http://www.eclipse.org/legal/epl-v10.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/aspectj/aspectjrt/1.9.6/aspectjrt-1.9.6.jar
MD5: 391f9257f19b84b45eb79a1878b9600a
SHA1: 1651849d48659e5703adc2599e694bf67b8c3fc4
SHA256: 20c785678cbb4ee045914daf83da25f98a16071177dfa0e3451326723dfb4705
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom artifactid aspectjrt Low Vendor Manifest automatic-module-name org.aspectj.runtime Medium Vendor jar package name aspectj Highest Vendor manifest: org/aspectj/lang/ Implementation-Vendor https://www.eclipse.org/aspectj/ Medium Vendor jar package name runtime Highest Vendor file name aspectjrt High Vendor pom groupid org.aspectj Highest Vendor pom url https://www.eclipse.org/aspectj/ Highest Vendor pom groupid aspectj Highest Vendor pom name AspectJ runtime High Product manifest: org/aspectj/lang/ Implementation-Title org.aspectj.runtime Medium Product Manifest automatic-module-name org.aspectj.runtime Medium Product jar package name aspectj Highest Product manifest: org/aspectj/lang/ Specification-Title AspectJ Runtime Classes Medium Product jar package name runtime Highest Product file name aspectjrt High Product pom artifactid aspectjrt Highest Product pom url https://www.eclipse.org/aspectj/ Medium Product pom groupid aspectj Highest Product pom name AspectJ runtime High Version file version 1.9.6 High Version manifest: org/aspectj/lang/ Implementation-Version 1.9.6 Medium Version pom version 1.9.6 Highest
commons-io-2.4.jarDescription:
The Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/commons-io/commons-io/2.4/commons-io-2.4.jar
MD5: 7f97854dc04c119d461fed14f5d8bb96
SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad
SHA256: cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest bundle-symbolicname org.apache.commons.io Medium Vendor pom name Commons IO High Vendor jar package name apache Highest Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor file name commons-io High Vendor pom artifactid commons-io Low Vendor Manifest bundle-docurl http://commons.apache.org/io/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid commons-io Highest Vendor jar package name commons Highest Vendor pom url http://commons.apache.org/io/ Highest Vendor Manifest implementation-build tags/2.4-RC2@r1349569; 2012-06-12 18:18:20-0400 Low Vendor jar package name io Highest Product pom artifactid commons-io Highest Product Manifest bundle-symbolicname org.apache.commons.io Medium Product pom name Commons IO High Product jar package name apache Highest Product Manifest specification-title Commons IO Medium Product pom parent-groupid org.apache.commons Medium Product Manifest Implementation-Title Commons IO High Product pom url http://commons.apache.org/io/ Medium Product file name commons-io High Product pom parent-artifactid commons-parent Medium Product Manifest bundle-docurl http://commons.apache.org/io/ Low Product pom groupid commons-io Highest Product jar package name commons Highest Product Manifest Bundle-Name Commons IO Medium Product Manifest implementation-build tags/2.4-RC2@r1349569; 2012-06-12 18:18:20-0400 Low Product jar package name io Highest Version pom version 2.4 Highest Version file version 2.4 High Version Manifest Implementation-Version 2.4 High Version pom parent-version 2.4 Low
commons-math3-3.0.jarDescription:
The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/apache/commons/commons-math3/3.0/commons-math3-3.0.jar
MD5: 1c32031c57f7ad9a99fef07bcf1209e8
SHA1: 5f8d1d720333aa9a7dee1c949ea70d9ed7da6106
SHA256: 0bde674d932bfc7f048390f86ceb631cf1e8790de7163c0e7bb22409599a38db
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid commons-parent Low Vendor pom name Commons Math High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.commons Highest Vendor jar package name apache Highest Vendor pom url http://commons.apache.org/math/ Highest Vendor Manifest bundle-docurl http://commons.apache.org/math/ Low Vendor pom parent-groupid org.apache.commons Medium Vendor jar package name math3 Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest bundle-symbolicname org.apache.commons.math Medium Vendor pom artifactid commons-math3 Low Vendor Manifest implementation-build tags/MATH_3_0_RC3@r1296853; 2012-03-05 11:10:26+0100 Low Vendor file name commons-math3 High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid org.apache.commons Highest Vendor jar package name commons Highest Product pom name Commons Math High Product pom groupid apache.commons Highest Product jar package name apache Highest Product Manifest bundle-docurl http://commons.apache.org/math/ Low Product pom parent-groupid org.apache.commons Medium Product jar package name math3 Highest Product Manifest specification-title Commons Math Medium Product pom artifactid commons-math3 Highest Product Manifest Implementation-Title Commons Math High Product Manifest bundle-symbolicname org.apache.commons.math Medium Product Manifest implementation-build tags/MATH_3_0_RC3@r1296853; 2012-03-05 11:10:26+0100 Low Product file name commons-math3 High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/math/ Medium Product Manifest Bundle-Name Commons Math Medium Product jar package name commons Highest Version Manifest Implementation-Version 3.0 High Version pom parent-version 3.0 Low Version file version 3.0 High Version pom version 3.0 Highest
it-tidalwave-html-patches-1.2-ALPHA-8.jarDescription:
Some patched classes for manipulating HTML. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-html-patches/1.2-ALPHA-8/it-tidalwave-html-patches-1.2-ALPHA-8.jarMD5: 3a8d9b99fc3e09b9fcd643e2df15afd3SHA1: ed595aec10c39a7c2fafd2214f0f36658dbbdc7cSHA256: 5149fbc0e2e5ece6e9f025bbfbf80ef12b8cd229ac080873b9d7b4f45587a736Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor pom artifactid it-tidalwave-html-patches Low Vendor jar package name it Highest Vendor pom name NorthernWind :: HTML Patches High Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor file name it-tidalwave-html-patches High Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Vendor jar package name tidalwave Highest Product pom groupid it.tidalwave.northernwind Highest Product Manifest Implementation-Title NorthernWind :: HTML Patches High Product jar package name it Highest Product pom name NorthernWind :: HTML Patches High Product pom artifactid it-tidalwave-html-patches Highest Product Manifest build-jdk-spec 11 Low Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product Manifest specification-title NorthernWind :: HTML Patches Medium Product jar package name northernwind Highest Product file name it-tidalwave-html-patches High Product jar package name tidalwave Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-messagebus-3.2-ALPHA-6.jarDescription:
An abstract description of a simple message bus to be used within an application.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-messagebus/3.2-ALPHA-6/it-tidalwave-messagebus-3.2-ALPHA-6.jarMD5: f8289ebe8e12ad7a528e05786a3c99e1SHA1: dd15d636a557416da013e792706224c81a37deb2SHA256: bd7ef16bf96bd0888d51910aee92c55f7b8b753acdd40e0cbac1bebd26e5dff9Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor jar package name it Highest Vendor pom artifactid it-tidalwave-messagebus Low Vendor Manifest build-jdk-spec 11 Low Vendor jar package name messagebus Highest Vendor pom parent-artifactid modules Low Vendor pom name TheseFoolishThings - MessageBus High Vendor file name it-tidalwave-messagebus High Vendor jar package name tidalwave Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product Manifest Implementation-Title TheseFoolishThings - MessageBus High Product Manifest specification-title TheseFoolishThings - MessageBus Medium Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product jar package name messagebus Highest Product pom name TheseFoolishThings - MessageBus High Product file name it-tidalwave-messagebus High Product jar package name tidalwave Highest Product pom parent-artifactid modules Medium Product pom artifactid it-tidalwave-messagebus Highest Version pom version 3.2-ALPHA-6 Highest
it-tidalwave-messagebus-spring-3.2-ALPHA-6.jarDescription:
A Spring implementation of a simple message bus to be used within an application.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-messagebus-spring/3.2-ALPHA-6/it-tidalwave-messagebus-spring-3.2-ALPHA-6.jarMD5: 796a60b7032505b98fb2eaa2c53a8ea9SHA1: f4992daced01cacb72f6beac8ee0d398afd0b2c3SHA256: 2147fbde19f76282c5f53cf8147ec7414d874c8fc1a4066ff2a6cef00e4c6658Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom artifactid it-tidalwave-messagebus-spring Low Vendor file name it-tidalwave-messagebus-spring High Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name messagebus Highest Vendor pom parent-artifactid modules Low Vendor pom name TheseFoolishThings - MessageBus (Spring) High Vendor jar package name tidalwave Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product Manifest Implementation-Title TheseFoolishThings - MessageBus (Spring) High Product file name it-tidalwave-messagebus-spring High Product Manifest specification-title TheseFoolishThings - MessageBus (Spring) Medium Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product jar package name messagebus Highest Product pom artifactid it-tidalwave-messagebus-spring Highest Product pom name TheseFoolishThings - MessageBus (Spring) High Product jar package name tidalwave Highest Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-6 Highest
it-tidalwave-northernwind-core-1.2-ALPHA-8.jarDescription:
Contains the interfaces of the Core. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core/1.2-ALPHA-8/it-tidalwave-northernwind-core-1.2-ALPHA-8.jarMD5: a4286bdaaa0521173f9b410ab091f256SHA1: 7fd88ada6040d185ac501a897373e095f6847a4cSHA256: 63042a320e4c70327ca139a5c6e02bafad0e27669fb8a943c14dda42f0ea571bReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor file name it-tidalwave-northernwind-core High Vendor jar package name tidalwave Highest Vendor pom name NorthernWind :: Core High Vendor jar package name core Highest Vendor pom artifactid it-tidalwave-northernwind-core Low Vendor jar package name it Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Product pom groupid it.tidalwave.northernwind Highest Product Manifest Implementation-Title NorthernWind :: Core High Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product file name it-tidalwave-northernwind-core High Product jar package name tidalwave Highest Product pom name NorthernWind :: Core High Product jar package name core Highest Product jar package name it Highest Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product Manifest specification-title NorthernWind :: Core Medium Product pom artifactid it-tidalwave-northernwind-core Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-default-1.2-ALPHA-8.jarDescription:
A default implementation of the Core. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-default/1.2-ALPHA-8/it-tidalwave-northernwind-core-default-1.2-ALPHA-8.jarMD5: 6868e1cf7f08f3372a9ba78023b0aa38SHA1: 768d6ab586a786ef7dee1d2c402c21c7b5e8de42SHA256: 4562fc80c6c48ecc6143e06c4062762589593becad35cdb27428ba0f9cd75077Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor file name it-tidalwave-northernwind-core-default High Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor jar package name tidalwave Highest Vendor jar package name core Highest Vendor jar package name it Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Vendor pom name NorthernWind :: Core :: Default Implementation High Vendor pom artifactid it-tidalwave-northernwind-core-default Low Product pom groupid it.tidalwave.northernwind Highest Product file name it-tidalwave-northernwind-core-default High Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product jar package name tidalwave Highest Product Manifest specification-title NorthernWind :: Core :: Default Implementation Medium Product jar package name core Highest Product Manifest Implementation-Title NorthernWind :: Core :: Default Implementation High Product pom artifactid it-tidalwave-northernwind-core-default Highest Product jar package name it Highest Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product pom name NorthernWind :: Core :: Default Implementation High Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-filesystem-basic-1.2-ALPHA-8.jarDescription:
The implementation of some basic filesystems. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-filesystem-basic/1.2-ALPHA-8/it-tidalwave-northernwind-core-filesystem-basic-1.2-ALPHA-8.jarMD5: bbd310c9335ef9b6ce4a25299ad20c21SHA1: 5365300a7ab39e8e8cefb3286b7f57eb00e863f7SHA256: ee492865e61a26ce4d0b5477ee487460adad8a52e42759b449332f1a7a38d9b6Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom parent-artifactid it-tidalwave-northernwind-filesystem Low Vendor pom groupid it.tidalwave.northernwind Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor pom artifactid it-tidalwave-northernwind-core-filesystem-basic Low Vendor jar package name tidalwave Highest Vendor pom name NorthernWind :: Filesystems :: Basic High Vendor file name it-tidalwave-northernwind-core-filesystem-basic High Product pom artifactid it-tidalwave-northernwind-core-filesystem-basic Highest Product pom groupid it.tidalwave.northernwind Highest Product pom parent-artifactid it-tidalwave-northernwind-filesystem Medium Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title NorthernWind :: Filesystems :: Basic High Product Manifest specification-title NorthernWind :: Filesystems :: Basic Medium Product jar package name northernwind Highest Product jar package name tidalwave Highest Product pom name NorthernWind :: Filesystems :: Basic High Product file name it-tidalwave-northernwind-core-filesystem-basic High Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-filesystem-git-1.2-ALPHA-8.jarDescription:
The implementation of the Git filesystem. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-filesystem-git/1.2-ALPHA-8/it-tidalwave-northernwind-core-filesystem-git-1.2-ALPHA-8.jarMD5: 1d1b71dcbbb784dc3ca746224f75628eSHA1: c92b5a537e748ef5bf5744fde1490a568b41aae9SHA256: 8a29a1b2fdab4fcf5fe7e69aa6480bf74cf8ec471e98bd9b4bb443aa0631222bReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom parent-artifactid it-tidalwave-northernwind-filesystem Low Vendor pom groupid it.tidalwave.northernwind Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor file name it-tidalwave-northernwind-core-filesystem-git High Vendor jar package name tidalwave Highest Vendor pom name NorthernWind :: Filesystems :: SCM :: Git High Vendor pom artifactid it-tidalwave-northernwind-core-filesystem-git Low Product pom groupid it.tidalwave.northernwind Highest Product pom parent-artifactid it-tidalwave-northernwind-filesystem Medium Product Manifest Implementation-Title NorthernWind :: Filesystems :: SCM :: Git High Product pom artifactid it-tidalwave-northernwind-core-filesystem-git Highest Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product Manifest specification-title NorthernWind :: Filesystems :: SCM :: Git Medium Product jar package name northernwind Highest Product file name it-tidalwave-northernwind-core-filesystem-git High Product jar package name tidalwave Highest Product pom name NorthernWind :: Filesystems :: SCM :: Git High Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-filesystem-hg-1.2-ALPHA-8.jarDescription:
The implementation of the Mercurial filesystem. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-filesystem-hg/1.2-ALPHA-8/it-tidalwave-northernwind-core-filesystem-hg-1.2-ALPHA-8.jarMD5: 35814a0b37d8e3bd78761d3a69b1fa09SHA1: a94be5d6a854f0fc81ff02d2058abf41875a798bSHA256: 99b75e61dbef7f13bacb257ccaaba28586c03f64f328b8e6944454bbab6fe7caReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom parent-artifactid it-tidalwave-northernwind-filesystem Low Vendor pom groupid it.tidalwave.northernwind Highest Vendor file name it-tidalwave-northernwind-core-filesystem-hg High Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor pom artifactid it-tidalwave-northernwind-core-filesystem-hg Low Vendor jar package name tidalwave Highest Vendor pom name NorthernWind :: Filesystems :: SCM :: Mercurial High Product pom artifactid it-tidalwave-northernwind-core-filesystem-hg Highest Product Manifest specification-title NorthernWind :: Filesystems :: SCM :: Mercurial Medium Product Manifest Implementation-Title NorthernWind :: Filesystems :: SCM :: Mercurial High Product pom groupid it.tidalwave.northernwind Highest Product pom parent-artifactid it-tidalwave-northernwind-filesystem Medium Product file name it-tidalwave-northernwind-core-filesystem-hg High Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product jar package name tidalwave Highest Product pom name NorthernWind :: Filesystems :: SCM :: Mercurial High Version pom version 1.2-ALPHA-8 Highest
Published Vulnerabilities CVE-2010-4237 suppress
Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack. CWE-295 Improper Certificate Validation
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions:
CVE-2014-9390 suppress
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem. CWE-20 Improper Input Validation
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions: (show all )
CVE-2014-9462 suppress
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command. CWE-20 Improper Input Validation
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P References:
Vulnerable Software & Versions:
CVE-2016-3068 suppress
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions: (show all )
CVE-2016-3069 suppress
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions: (show all )
CVE-2016-3105 suppress
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name. CWE-284 Improper Access Control
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions:
CVE-2016-3630 suppress
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. CWE-19 Data Processing Errors
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions: (show all )
CVE-2017-1000115 suppress
Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions:
CVE-2017-1000116 suppress
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks. CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv2:
Base Score: HIGH (10.0) Vector: /AV:N/AC:L/Au:N/C:C/I:C/A:C CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions:
CVE-2017-17458 suppress
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically. CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv2:
Base Score: HIGH (10.0) Vector: /AV:N/AC:L/Au:N/C:C/I:C/A:C CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions:
CVE-2017-9462 suppress
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name. CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions:
CVE-2018-1000132 suppress
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1. CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N References:
Vulnerable Software & Versions:
CVE-2018-13346 suppress
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions:
CVE-2018-13347 suppress
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002. CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions:
CVE-2018-13348 suppress
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions:
CVE-2018-17983 suppress
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry. CWE-125 Out-of-bounds Read
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:P CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H References:
Vulnerable Software & Versions:
CVE-2019-3902 suppress
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository. CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: MEDIUM (5.8) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:P CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions:
it-tidalwave-northernwind-core-filesystem-scm-1.2-ALPHA-8.jarDescription:
Support classes for SCM filesystems. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-filesystem-scm/1.2-ALPHA-8/it-tidalwave-northernwind-core-filesystem-scm-1.2-ALPHA-8.jarMD5: d91528b87e52b40abe1f0bdcd22fdeb1SHA1: 0e8a50d4786fe36d9854cd6dd0a05322c76471f0SHA256: 74e027c5bcd1c0b76b19a5e5579252e60bc784823ad692fd250c39a0796ffaf1Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom parent-artifactid it-tidalwave-northernwind-filesystem Low Vendor pom groupid it.tidalwave.northernwind Highest Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor pom artifactid it-tidalwave-northernwind-core-filesystem-scm Low Vendor jar package name tidalwave Highest Vendor file name it-tidalwave-northernwind-core-filesystem-scm High Vendor pom name NorthernWind :: Filesystems :: SCM High Product pom artifactid it-tidalwave-northernwind-core-filesystem-scm Highest Product pom groupid it.tidalwave.northernwind Highest Product pom parent-artifactid it-tidalwave-northernwind-filesystem Medium Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product Manifest specification-title NorthernWind :: Filesystems :: SCM Medium Product jar package name northernwind Highest Product Manifest Implementation-Title NorthernWind :: Filesystems :: SCM High Product jar package name tidalwave Highest Product file name it-tidalwave-northernwind-core-filesystem-scm High Product pom name NorthernWind :: Filesystems :: SCM High Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-marshalling-default-1.2-ALPHA-8.jarDescription:
The default implementation of marshalling for some Core classes. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-marshalling-default/1.2-ALPHA-8/it-tidalwave-northernwind-core-marshalling-default-1.2-ALPHA-8.jarMD5: 7427a83bc01b5a5cd19411afc05db861SHA1: 486e5bbe1cf08860ca108122aa7559971df4ff1aSHA256: adf504a019d4a2297d8420c7aba25819ef6fd607e9e40c2efd73a543b41e994dReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom artifactid it-tidalwave-northernwind-core-marshalling-default Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom name NorthernWind :: Core :: Default Marshalling High Vendor pom groupid it.tidalwave.northernwind Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor jar package name tidalwave Highest Vendor file name it-tidalwave-northernwind-core-marshalling-default High Vendor jar package name core Highest Vendor jar package name it Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Product pom name NorthernWind :: Core :: Default Marshalling High Product pom groupid it.tidalwave.northernwind Highest Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product jar package name tidalwave Highest Product Manifest Implementation-Title NorthernWind :: Core :: Default Marshalling High Product file name it-tidalwave-northernwind-core-marshalling-default High Product Manifest specification-title NorthernWind :: Core :: Default Marshalling Medium Product jar package name core Highest Product jar package name it Highest Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product pom artifactid it-tidalwave-northernwind-core-marshalling-default Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-core-profiling-1.2-ALPHA-8.jarDescription:
This module collects elapsed times for processing requests and builds up some statistics. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-core-profiling/1.2-ALPHA-8/it-tidalwave-northernwind-core-profiling-1.2-ALPHA-8.jarMD5: 1ef1bededccf716f86f3d1516a11c435SHA1: 75c864aa45879789c55c906cb139f3dd30b9587cSHA256: 363eb0653b839ba5f444e194e8a61afed1304d255a687447eba9468cea5dbfaaReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor Manifest build-jdk-spec 11 Low Vendor file name it-tidalwave-northernwind-core-profiling High Vendor jar package name northernwind Highest Vendor pom name NorthernWind :: Profiling High Vendor jar package name tidalwave Highest Vendor pom artifactid it-tidalwave-northernwind-core-profiling Low Vendor jar package name it Highest Vendor jar package name profiling Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Product pom groupid it.tidalwave.northernwind Highest Product Manifest build-jdk-spec 11 Low Product file name it-tidalwave-northernwind-core-profiling High Product jar package name northernwind Highest Product pom name NorthernWind :: Profiling High Product jar package name tidalwave Highest Product jar package name it Highest Product Manifest specification-title NorthernWind :: Profiling Medium Product Manifest Implementation-Title NorthernWind :: Profiling High Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product jar package name profiling Highest Product pom artifactid it-tidalwave-northernwind-core-profiling Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-frontend-commons-1.2-ALPHA-8.jarDescription:
Utilities used by the front end implementations. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-frontend-commons/1.2-ALPHA-8/it-tidalwave-northernwind-frontend-commons-1.2-ALPHA-8.jarMD5: 84b8095a30a48d412c2fc8525cc40497SHA1: 527ff3e3613b13536de7bbe616e3b43844ead5dbSHA256: 14e151eabd4e3f2e82c5551fd242821566d9e1e839ee2d985f884b6d72eb4019Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor pom name NorthernWind :: Frontend :: Commons High Vendor Manifest build-jdk-spec 11 Low Vendor pom artifactid it-tidalwave-northernwind-frontend-commons Low Vendor jar package name northernwind Highest Vendor jar package name tidalwave Highest Vendor file name it-tidalwave-northernwind-frontend-commons High Vendor jar package name it Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Vendor jar package name frontend Highest Product pom groupid it.tidalwave.northernwind Highest Product pom name NorthernWind :: Frontend :: Commons High Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product jar package name tidalwave Highest Product file name it-tidalwave-northernwind-frontend-commons High Product Manifest Implementation-Title NorthernWind :: Frontend :: Commons High Product Manifest specification-title NorthernWind :: Frontend :: Commons Medium Product pom artifactid it-tidalwave-northernwind-frontend-commons Highest Product jar package name it Highest Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product jar package name frontend Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-frontend-components-1.2-ALPHA-8.jarDescription:
The definitions of page components. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-frontend-components/1.2-ALPHA-8/it-tidalwave-northernwind-frontend-components-1.2-ALPHA-8.jarMD5: 75841ef0c1d90037bbca5d98c33038d4SHA1: b6b0a6dd69ea4dac5e28186cd7133963b845bf94SHA256: 48be515fb6957ca5f7e27f99192c29a1402390f17be7540329b724e30f7c91deReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor pom artifactid it-tidalwave-northernwind-frontend-components Low Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor file name it-tidalwave-northernwind-frontend-components High Vendor jar package name tidalwave Highest Vendor pom name NorthernWind :: Frontend :: Components High Vendor jar package name it Highest Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Vendor jar package name frontend Highest Product pom groupid it.tidalwave.northernwind Highest Product Manifest specification-title NorthernWind :: Frontend :: Components Medium Product Manifest Implementation-Title NorthernWind :: Frontend :: Components High Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product file name it-tidalwave-northernwind-frontend-components High Product jar package name tidalwave Highest Product pom name NorthernWind :: Frontend :: Components High Product jar package name it Highest Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product pom artifactid it-tidalwave-northernwind-frontend-components Highest Product jar package name frontend Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-frontend-components-htmltemplate-1.2-ALPHA-8.jarDescription:
An implementation of page components based on HTML templating. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-frontend-components-htmltemplate/1.2-ALPHA-8/it-tidalwave-northernwind-frontend-components-htmltemplate-1.2-ALPHA-8.jarMD5: b96a3a926fa0982833507505fa69d00eSHA1: f1a8ec8522689647b6d1706107db6056a4d8bcadSHA256: e88d2a1491e6cb9aaafbad123dc6d91b898c774f8f9d16472402002c281477b1Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor file name it-tidalwave-northernwind-frontend-components-htmltemplate High Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor Manifest build-jdk-spec 11 Low Vendor jar package name northernwind Highest Vendor jar package name tidalwave Highest Vendor jar package name it Highest Vendor pom name NorthernWind :: Frontend :: Components :: HTML Template High Vendor pom parent-artifactid it-tidalwave-northernwind-modules Low Vendor pom artifactid it-tidalwave-northernwind-frontend-components-htmltemplate Low Vendor jar package name frontend Highest Product file name it-tidalwave-northernwind-frontend-components-htmltemplate High Product Manifest specification-title NorthernWind :: Frontend :: Components :: HTML Template Medium Product pom groupid it.tidalwave.northernwind Highest Product Manifest build-jdk-spec 11 Low Product jar package name northernwind Highest Product jar package name tidalwave Highest Product pom artifactid it-tidalwave-northernwind-frontend-components-htmltemplate Highest Product jar package name it Highest Product pom name NorthernWind :: Frontend :: Components :: HTML Template High Product pom parent-artifactid it-tidalwave-northernwind-modules Medium Product Manifest Implementation-Title NorthernWind :: Frontend :: Components :: HTML Template High Product jar package name frontend Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-northernwind-frontend-springmvc-1.2-ALPHA-8.jarDescription:
An implementation of the front end based on Spring MVC. File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/northernwind/it-tidalwave-northernwind-frontend-springmvc/1.2-ALPHA-8/it-tidalwave-northernwind-frontend-springmvc-1.2-ALPHA-8.jarMD5: 2edd8d14bf5d4920cde50bb9ca44e3b5SHA1: c541465f9615f39bccc471dc79b47910972f042bSHA256: c1ec12731d23853b2abdd1b0cb7c6870e1ff47fa0961f6350050c791e449a28bReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom parent-artifactid it-tidalwave-northernwind-frontend Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom groupid it.tidalwave.northernwind Highest Vendor Manifest build-jdk-spec 11 Low Vendor pom name NorthernWind :: Frontend :: Spring MVC High Vendor jar package name northernwind Highest Vendor jar package name tidalwave Highest Vendor file name it-tidalwave-northernwind-frontend-springmvc High Vendor pom artifactid it-tidalwave-northernwind-frontend-springmvc Low Vendor jar package name it Highest Vendor jar package name frontend Highest Product pom groupid it.tidalwave.northernwind Highest Product Manifest build-jdk-spec 11 Low Product pom name NorthernWind :: Frontend :: Spring MVC High Product Manifest Implementation-Title NorthernWind :: Frontend :: Spring MVC High Product jar package name northernwind Highest Product Manifest specification-title NorthernWind :: Frontend :: Spring MVC Medium Product jar package name tidalwave Highest Product file name it-tidalwave-northernwind-frontend-springmvc High Product pom parent-artifactid it-tidalwave-northernwind-frontend Medium Product jar package name it Highest Product pom artifactid it-tidalwave-northernwind-frontend-springmvc Highest Product jar package name frontend Highest Version pom version 1.2-ALPHA-8 Highest
it-tidalwave-role-3.2-ALPHA-6.jarDescription:
Roles are a powerful way for designing complex behaviours while keeping good practices such as Single Responsibility, Dependency Inversion and
Interface Segregation.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role/3.2-ALPHA-6/it-tidalwave-role-3.2-ALPHA-6.jarMD5: 23b8645930465e65835eb789dcb3690fSHA1: 0b800bbea8394bc98932759cc72d05ea86282aa2SHA256: 74cd3e429481c0eecfa6d247d0695f5cc0973448a732b018ebc89ecf5e748becReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor pom name TheseFoolishThings - Roles High Vendor file name it-tidalwave-role High Vendor jar package name it Highest Vendor Manifest build-jdk-spec 11 Low Vendor pom parent-artifactid modules Low Vendor jar package name tidalwave Highest Vendor jar package name role Highest Vendor pom artifactid it-tidalwave-role Low Product pom groupid it.tidalwave.thesefoolishthings Highest Product pom name TheseFoolishThings - Roles High Product Manifest Implementation-Title TheseFoolishThings - Roles High Product file name it-tidalwave-role High Product Manifest specification-title TheseFoolishThings - Roles Medium Product jar package name it Highest Product Manifest build-jdk-spec 11 Low Product pom artifactid it-tidalwave-role Highest Product jar package name tidalwave Highest Product pom parent-artifactid modules Medium Product jar package name role Highest Version pom version 3.2-ALPHA-6 Highest
it-tidalwave-role-spring-3.2-ALPHA-6.jarDescription:
Specific Spring support for DCI roles.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-role-spring/3.2-ALPHA-6/it-tidalwave-role-spring-3.2-ALPHA-6.jarMD5: 2d60c80126260ccaf21a7f0c6299d943SHA1: 32720745dd26fc1d545bd06f5502022c4bf6831fSHA256: 00b6311fe342f8bd4e18e1bc8a455070c020367095946bdf441c4ebb380f2546Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor Manifest build-jdk-spec 11 Low Vendor jar package name spring Highest Vendor pom parent-artifactid modules Low Vendor pom name TheseFoolishThings - Roles (Spring) High Vendor jar package name tidalwave Highest Vendor jar package name role Highest Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor pom artifactid it-tidalwave-role-spring Low Vendor jar package name it Highest Vendor file name it-tidalwave-role-spring High Product Manifest build-jdk-spec 11 Low Product jar package name spring Highest Product pom name TheseFoolishThings - Roles (Spring) High Product jar package name tidalwave Highest Product pom parent-artifactid modules Medium Product jar package name role Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product jar package name it Highest Product pom artifactid it-tidalwave-role-spring Highest Product Manifest specification-title TheseFoolishThings - Roles (Spring) Medium Product Manifest Implementation-Title TheseFoolishThings - Roles (Spring) High Product file name it-tidalwave-role-spring High Version pom version 3.2-ALPHA-6 Highest
it-tidalwave-util-3.2-ALPHA-6.jarDescription:
A collection of commmon utilities.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/it/tidalwave/thesefoolishthings/it-tidalwave-util/3.2-ALPHA-6/it-tidalwave-util-3.2-ALPHA-6.jarMD5: 0f4175ff23fc0c42d7caa08a67cb5b45SHA1: dc696f982e12d6f226c91906cac851d976d2bcf5SHA256: 09f983d2bbbf84d0177ea62f2c394bd7f52fa8cb048cde121f645a2a476c1a32Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Tidalwave s.a.s. (http://tidalwave.it) Low Vendor pom groupid it.tidalwave.thesefoolishthings Highest Vendor Manifest Implementation-Vendor Tidalwave s.a.s. (http://tidalwave.it) High Vendor jar package name it Highest Vendor pom name TheseFoolishThings - Utilities High Vendor Manifest build-jdk-spec 11 Low Vendor pom artifactid it-tidalwave-util Low Vendor jar package name util Highest Vendor pom parent-artifactid modules Low Vendor file name it-tidalwave-util High Vendor jar package name tidalwave Highest Product pom groupid it.tidalwave.thesefoolishthings Highest Product Manifest Implementation-Title TheseFoolishThings - Utilities High Product jar package name it Highest Product pom name TheseFoolishThings - Utilities High Product Manifest build-jdk-spec 11 Low Product Manifest specification-title TheseFoolishThings - Utilities Medium Product pom artifactid it-tidalwave-util Highest Product jar package name util Highest Product file name it-tidalwave-util High Product jar package name tidalwave Highest Product pom parent-artifactid modules Medium Version pom version 3.2-ALPHA-6 Highest
javax.annotation-api-1.3.2.jarDescription:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256: e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom organization url https://javaee.github.io/glassfish Medium Vendor pom groupid javax.annotation Highest Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Vendor jar package name javax Highest Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor pom parent-groupid net.java Medium Vendor Manifest bundle-docurl https://javaee.github.io/glassfish Low Vendor Manifest extension-name javax.annotation Medium Vendor pom parent-artifactid jvnet-parent Low Vendor file name javax.annotation-api High Vendor pom organization name GlassFish Community High Vendor pom name ${extension.name} API High Vendor Manifest specification-vendor Oracle Corporation Low Vendor Manifest automatic-module-name java.annotation Medium Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor jar package name annotation Highest Vendor pom artifactid javax.annotation-api Low Product pom artifactid javax.annotation-api Highest Product pom groupid javax.annotation Highest Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Product jar package name javax Highest Product Manifest bundle-symbolicname javax.annotation-api Medium Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product Manifest bundle-docurl https://javaee.github.io/glassfish Low Product Manifest extension-name javax.annotation Medium Product file name javax.annotation-api High Product pom name ${extension.name} API High Product Manifest Bundle-Name javax.annotation API Medium Product pom organization url https://javaee.github.io/glassfish Low Product Manifest automatic-module-name java.annotation Medium Product jar package name annotation Highest Product pom organization name GlassFish Community Low Version pom version 1.3.2 Highest Version pom parent-version 1.3.2 Low Version Manifest Implementation-Version 1.3.2 High Version Manifest Bundle-Version 1.3.2 High Version file version 1.3.2 High
javax.inject-1.jarDescription:
The javax.inject API License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor file name javax.inject-1 High Vendor pom url http://code.google.com/p/atinject/ Highest Vendor pom name javax.inject High Vendor jar package name javax Highest Vendor jar package name inject Highest Vendor pom artifactid javax.inject Low Vendor pom groupid javax.inject Highest Vendor jar package name inject Low Vendor jar package name javax Low Product file name javax.inject-1 High Product pom name javax.inject High Product jar package name javax Highest Product jar package name inject Highest Product pom groupid javax.inject Highest Product pom url http://code.google.com/p/atinject/ Medium Product pom artifactid javax.inject Highest Product jar package name inject Low Version pom version 1 Highest Version file version 1 Medium
jaxb-api-2.2.11.jarDescription:
JAXB (JSR 222) API License:
CDDL 1.1: https://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: https://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/javax/xml/bind/jaxb-api/2.2.11/jaxb-api-2.2.11.jar
MD5: 5983d1e2ec1a9b0604575cd9e9582591
SHA1: 32274d4244967ff43e7a5d967743d94ed3d2aea7
SHA256: 273d82f8653b53ad9d00ce2b2febaef357e79a273560e796ff3fcfec765f8910
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Vendor pom groupid javax.xml.bind Highest Vendor pom url http://jaxb.java.net/ Highest Vendor jar package name javax Highest Vendor Manifest bundle-symbolicname jaxb-api Medium Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor jar package name bind Highest Vendor pom parent-groupid net.java Medium Vendor pom artifactid jaxb-api Low Vendor jar package name jaxb Highest Vendor pom parent-artifactid jvnet-parent Low Vendor pom organization url http://www.oracle.com/ Medium Vendor pom name Java Architecture for XML Binding High Vendor Manifest specification-vendor Oracle Corporation Low Vendor file name jaxb-api High Vendor pom organization name Oracle Corporation High Vendor Manifest extension-name javax.xml.bind Medium Vendor jar package name xml Highest Product Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Product pom groupid javax.xml.bind Highest Product pom artifactid jaxb-api Highest Product pom organization name Oracle Corporation Low Product jar package name javax Highest Product Manifest specification-title Java Architecture for XML Binding Medium Product Manifest bundle-symbolicname jaxb-api Medium Product Manifest bundle-docurl http://www.oracle.com/ Low Product jar package name bind Highest Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product jar package name jaxb Highest Product pom name Java Architecture for XML Binding High Product Manifest Bundle-Name jaxb-api Medium Product file name jaxb-api High Product Manifest extension-name javax.xml.bind Medium Product jar package name xml Highest Product pom url http://jaxb.java.net/ Medium Product pom organization url http://www.oracle.com/ Low Version Manifest specification-version 2.2.11 High Version pom parent-version 2.2.11 Low Version file version 2.2.11 High Version Manifest Bundle-Version 2.2.11 High Version pom version 2.2.11 Highest
jaxb-core-2.2.11.jarDescription:
Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar
MD5: c5eca4e58a75eabe3379926803421bab
SHA1: c3f87d654f8d5943cd08592f3f758856544d279a
SHA256: b13da0c655a3d590a2a945553648c407e6347648c9f7a3f811b7b3a8a1974baa
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom artifactid jaxb-core Low Vendor file name jaxb-core High Vendor pom groupid sun.xml.bind Highest Vendor pom name Old JAXB Core High Vendor jar (hint) package name oracle Highest Vendor Manifest git-revision f92ac5110f00752578034111d2f8a10bb0c466e3 Low Vendor jar package name bind Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest Implementation-Vendor Oracle High Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor Manifest (hint) Implementation-Vendor sun High Vendor Manifest Implementation-Vendor-Id com.oracle Medium Vendor pom groupid com.sun.xml.bind Highest Vendor jar package name sun Highest Vendor pom groupid glassfish.jaxb Highest Vendor pom name JAXB Core High Vendor Manifest bundle-symbolicname com.sun.xml.bind.jaxb-core Medium Vendor pom parent-artifactid jaxb-bundles Low Vendor jar package name xml Highest Vendor pom parent-artifactid jaxb-parent Low Product file name jaxb-core High Product Manifest Implementation-Title JAXB Implementation High Product pom groupid sun.xml.bind Highest Product pom name Old JAXB Core High Product Manifest git-revision f92ac5110f00752578034111d2f8a10bb0c466e3 Low Product Manifest specification-title Java Architecture for XML Binding Medium Product jar package name bind Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product pom parent-groupid com.sun.xml.bind.mvn Medium Product Manifest Bundle-Name Old JAXB Core Medium Product jar package name sun Highest Product pom groupid glassfish.jaxb Highest Product pom parent-artifactid jaxb-parent Medium Product pom name JAXB Core High Product pom artifactid jaxb-core Highest Product Manifest bundle-symbolicname com.sun.xml.bind.jaxb-core Medium Product jar package name xml Highest Product pom parent-artifactid jaxb-bundles Medium Version file version 2.2.11 High Version Manifest major-version 2.2.11 Medium Version Manifest Bundle-Version 2.2.11 High Version Manifest build-id 2.2.11 Medium Version Manifest Implementation-Version 2.2.11 High Version pom version 2.2.11 Highest
jaxb-core-2.2.11.jar (shaded: com.sun.istack:istack-commons-runtime:2.21)File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar/META-INF/maven/com.sun.istack/istack-commons-runtime/pom.xmlMD5: caebf95d1d57fc0321b36137e246e192SHA1: 04c234cf684a202c5c9bb7f0a198ba97e958f8f4SHA256: ebe7137b5fbfd050545f9a7f3f339ae55beb0b53755071b4fd62aa024c626d1cReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom name istack common utility code runtime High Vendor pom groupid sun.istack Highest Vendor pom parent-artifactid istack-commons Low Vendor pom parent-groupid com.sun.istack Medium Vendor pom artifactid istack-commons-runtime Low Product pom artifactid istack-commons-runtime Highest Product pom name istack common utility code runtime High Product pom groupid sun.istack Highest Product pom parent-artifactid istack-commons Medium Product pom parent-groupid com.sun.istack Medium Version pom version 2.21 Highest
jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:txw2:2.2.11)Description:
TXW is a library that allows you to write XML documents.
File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-core/2.2.11/jaxb-core-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/txw2/pom.xmlMD5: 83d24d59202baf2810daa01739963822SHA1: 4be03527dbf2428f7ea99fb9c2f50f089dffad5eSHA256: 8514cb724b4fca59a5cf272b632e539bd0a0f3cacf1844082d0a173a86406bd8Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom groupid glassfish.jaxb Highest Vendor pom artifactid txw2 Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom name TXW2 Runtime High Vendor pom parent-artifactid jaxb-txw-parent Low Product pom groupid glassfish.jaxb Highest Product pom artifactid txw2 Highest Product pom parent-groupid com.sun.xml.bind.mvn Medium Product pom name TXW2 Runtime High Product pom parent-artifactid jaxb-txw-parent Medium Version pom version 2.2.11 Highest
jaxb-impl-2.2.11.jarDescription:
Old JAXB Runtime module. Contains sources required for runtime processing. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-impl/2.2.11/jaxb-impl-2.2.11.jar
MD5: bea06b3ee5ef2c338beac9187b7782f3
SHA1: a49ce57aee680f9435f49ba6ef427d38c93247a6
SHA256: f91793a96f185a2fc004c86a37086f060985854ce6b19935e03c4de51e3201d2
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom groupid sun.xml.bind Highest Vendor Manifest bundle-symbolicname com.sun.xml.bind.jaxb-impl Medium Vendor jar (hint) package name oracle Highest Vendor Manifest git-revision f92ac5110f00752578034111d2f8a10bb0c466e3 Low Vendor jar package name bind Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest Implementation-Vendor Oracle High Vendor Manifest originally-created-by Apache Maven 3.0.4 Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom name Old JAXB Runtime High Vendor Manifest (hint) Implementation-Vendor sun High Vendor Manifest Implementation-Vendor-Id com.oracle Medium Vendor pom groupid com.sun.xml.bind Highest Vendor pom artifactid jaxb-impl Low Vendor jar package name sun Highest Vendor file name jaxb-impl High Vendor pom parent-artifactid jaxb-bundles Low Vendor jar package name xml Highest Product Manifest Implementation-Title JAXB Implementation High Product pom groupid sun.xml.bind Highest Product Manifest bundle-symbolicname com.sun.xml.bind.jaxb-impl Medium Product Manifest git-revision f92ac5110f00752578034111d2f8a10bb0c466e3 Low Product Manifest specification-title Java Architecture for XML Binding Medium Product jar package name bind Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest originally-created-by Apache Maven 3.0.4 Low Product pom parent-groupid com.sun.xml.bind.mvn Medium Product pom name Old JAXB Runtime High Product jar package name sun Highest Product Manifest Bundle-Name Old JAXB Runtime Medium Product file name jaxb-impl High Product pom artifactid jaxb-impl Highest Product jar package name xml Highest Product pom parent-artifactid jaxb-bundles Medium Version file version 2.2.11 High Version Manifest major-version 2.2.11 Medium Version Manifest Bundle-Version 2.2.11 High Version Manifest build-id 2.2.11 Medium Version Manifest Implementation-Version 2.2.11 High Version pom version 2.2.11 Highest
jaxb-impl-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-runtime:2.2.11)Description:
JAXB (JSR 222) Reference Implementation File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/sun/xml/bind/jaxb-impl/2.2.11/jaxb-impl-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/jaxb-runtime/pom.xmlMD5: fa2e4dc2609e6a4d96418f4ac6519e8dSHA1: 6a1651361e4c2392aff30da0df648187f670f8cbSHA256: e5327b31b595ab8143e97836d5ccdf85feb91e7ff5666f7b26913632facca4aaReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid jaxb-runtime-parent Low Vendor pom groupid glassfish.jaxb Highest Vendor pom artifactid jaxb-runtime Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom name JAXB Runtime High Product pom groupid glassfish.jaxb Highest Product pom artifactid jaxb-runtime Highest Product pom parent-artifactid jaxb-runtime-parent Medium Product pom parent-groupid com.sun.xml.bind.mvn Medium Product pom name JAXB Runtime High Version pom version 2.2.11 Highest
jcl-over-slf4j-1.7.30.jarDescription:
JCL 1.2 implemented over SLF4J License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jcl-over-slf4j/1.7.30/jcl-over-slf4j-1.7.30.jar
MD5: 69ad224b2feb6f86554fe8997b9c3d4b
SHA1: cd92524ea19d27e5b94ecd251e1af729cffdfe15
SHA256: 71e9ee37b9e4eb7802a2acc5f41728a4cf3915e7483d798db3b4ff2ec8847c50
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:runtime
Evidence Type Source Name Value Confidence Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor jar package name apache Highest Vendor Manifest automatic-module-name org.apache.commons.logging Medium Vendor pom url http://www.slf4j.org Highest Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom groupid slf4j Highest Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor pom parent-artifactid slf4j-parent Low Vendor pom groupid org.slf4j Highest Vendor pom artifactid jcl-over-slf4j Low Vendor file name jcl-over-slf4j High Vendor jar package name commons Highest Vendor jar package name logging Highest Product pom url http://www.slf4j.org Medium Product Manifest Bundle-Name jcl-over-slf4j Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom parent-groupid org.slf4j Medium Product jar package name apache Highest Product Manifest automatic-module-name org.apache.commons.logging Medium Product pom name JCL 1.2 implemented over SLF4J High Product pom artifactid jcl-over-slf4j Highest Product pom groupid slf4j Highest Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product file name jcl-over-slf4j High Product Manifest Implementation-Title jcl-over-slf4j High Product jar package name commons Highest Product pom parent-artifactid slf4j-parent Medium Product jar package name logging Highest Version Manifest Implementation-Version 1.7.30 High Version Manifest Bundle-Version 1.7.30 High Version pom version 1.7.30 Highest Version file version 1.7.30 High
jdom-1.0.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/jdom/jdom/1.0/jdom-1.0.jarMD5: 0b8f97de82fc9529b1028a77125ce4f8SHA1: a2ac1cd690ab4c80defe7f9bce14d35934c35cecSHA256: 3b23bc3979aec14a952a12aafc483010dc57579775f2ffcacef5256a90eeda02Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor manifest: org/jdom/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/output/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/adapters/ Implementation-Vendor jdom.org Medium Vendor jar package name jdom Highest Vendor pom groupid jdom Highest Vendor file name jdom High Vendor manifest: org/jdom/transform/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/input/ Implementation-Vendor jdom.org Medium Vendor pom artifactid jdom Low Vendor manifest: org/jdom/filter/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/xpath/ Implementation-Vendor jdom.org Medium Product pom artifactid jdom Highest Product jar package name jdom Highest Product manifest: org/jdom/adapters/ Implementation-Title org.jdom.adapters Medium Product manifest: org/jdom/filter/ Implementation-Title org.jdom.filter Medium Product manifest: org/jdom/transform/ Implementation-Title org.jdom.transform Medium Product jar package name filter Highest Product manifest: org/jdom/ Specification-Title JDOM Classes Medium Product manifest: org/jdom/adapters/ Specification-Title JDOM Adapter Classes Medium Product file name jdom High Product manifest: org/jdom/transform/ Specification-Title JDOM Transformation Classes Medium Product manifest: org/jdom/output/ Specification-Title JDOM Output Classes Medium Product manifest: org/jdom/xpath/ Specification-Title JDOM XPath Classes Medium Product manifest: org/jdom/filter/ Specification-Title JDOM Filter Classes Medium Product jar package name xpath Highest Product jar package name output Highest Product manifest: org/jdom/input/ Implementation-Title org.jdom.input Medium Product manifest: org/jdom/input/ Specification-Title JDOM Input Classes Medium Product jar package name input Highest Product manifest: org/jdom/xpath/ Implementation-Title org.jdom.xpath Medium Product manifest: org/jdom/output/ Implementation-Title org.jdom.output Medium Product manifest: org/jdom/ Implementation-Title org.jdom Medium Product jar package name adapters Highest Product pom groupid jdom Highest Product jar package name transform Highest Version pom version 1.0 Highest Version manifest: org/jdom/filter/ Implementation-Version 1.0 Medium Version manifest: org/jdom/transform/ Implementation-Version 1.0 Medium Version manifest: org/jdom/output/ Implementation-Version 1.0 Medium Version manifest: org/jdom/adapters/ Implementation-Version 1.0 Medium Version manifest: org/jdom/ Implementation-Version 1.0 Medium Version file version 1.0 High Version manifest: org/jdom/xpath/ Implementation-Version 1.0 Medium Version manifest: org/jdom/input/ Implementation-Version 1.0 Medium
jetty-util-6.1.26.jarDescription:
Utility classes for Jetty License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/mortbay/jetty/jetty-util/6.1.26/jetty-util-6.1.26.jar
MD5: 450fedce4f7f8ad3761577b10a664200
SHA1: e5642fe0399814e1687d55a3862aa5a3417226a9
SHA256: 9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:runtime
Evidence Type Source Name Value Confidence Vendor file name jetty-util High Vendor pom parent-groupid org.mortbay.jetty Medium Vendor Manifest originally-created-by 1.6.0_22 (Sun Microsystems Inc.) Low Vendor pom artifactid jetty-util Low Vendor jar package name util Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor pom parent-artifactid project Low Vendor pom name Jetty Utilities High Vendor pom groupid org.mortbay.jetty Highest Vendor Manifest mode development Low Vendor jar package name mortbay Highest Vendor pom groupid mortbay.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty-util Low Vendor Manifest bundle-symbolicname org.mortbay.jetty.util Medium Vendor Manifest bundle-docurl http://jetty.mortbay.org Low Product file name jetty-util High Product pom parent-groupid org.mortbay.jetty Medium Product Manifest originally-created-by 1.6.0_22 (Sun Microsystems Inc.) Low Product jar package name util Highest Product pom parent-artifactid project Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product pom artifactid jetty-util Highest Product pom name Jetty Utilities High Product Manifest mode development Low Product jar package name mortbay Highest Product pom groupid mortbay.jetty Highest Product Manifest url http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty-util Low Product Manifest bundle-symbolicname org.mortbay.jetty.util Medium Product Manifest bundle-docurl http://jetty.mortbay.org Low Product Manifest Bundle-Name Jetty Utilities Medium Version file version 6.1.26 High Version pom version 6.1.26 Highest Version Manifest implementation-version 6.1.26 High Version Manifest Bundle-Version 6.1.26 High
Published Vulnerabilities CVE-2009-1523 suppress
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N References:
Vulnerable Software & Versions: (show all )
CVE-2011-4461 suppress
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. CWE-310 Cryptographic Issues
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L References:
Vulnerable Software & Versions: (show all )
jsr305-3.0.2.jarDescription:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256: 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom name FindBugs-jsr305 High Vendor pom groupid google.code.findbugs Highest Vendor file name jsr305 High Vendor Manifest bundle-symbolicname org.jsr-305 Medium Vendor pom artifactid jsr305 Low Vendor pom url http://findbugs.sourceforge.net/ Highest Vendor pom groupid com.google.code.findbugs Highest Product pom name FindBugs-jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Product pom artifactid jsr305 Highest Product pom groupid google.code.findbugs Highest Product file name jsr305 High Product Manifest bundle-symbolicname org.jsr-305 Medium Product Manifest Bundle-Name FindBugs-jsr305 Medium Version file version 3.0.2 High Version Manifest Bundle-Version 3.0.2 High Version pom version 3.0.2 Highest
jul-to-slf4j-1.7.30.jarDescription:
JUL to SLF4J bridge File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/jul-to-slf4j/1.7.30/jul-to-slf4j-1.7.30.jarMD5: f2c78cb93d70dc5dea0c50f36ace09c1SHA1: d58bebff8cbf70ff52b59208586095f467656c30SHA256: bbcbfdaa72572255c4f85207a9bfdb24358dc993e41252331bd4d0913e4988b9Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:runtime
Evidence Type Source Name Value Confidence Vendor pom artifactid jul-to-slf4j Low Vendor pom name JUL to SLF4J bridge High Vendor file name jul-to-slf4j High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor jar package name slf4j Highest Vendor jar package name bridge Highest Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom parent-artifactid slf4j-parent Low Vendor pom groupid org.slf4j Highest Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Product pom url http://www.slf4j.org Medium Product pom name JUL to SLF4J bridge High Product file name jul-to-slf4j High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom parent-groupid org.slf4j Medium Product jar package name slf4j Highest Product pom artifactid jul-to-slf4j Highest Product jar package name bridge Highest Product pom groupid slf4j Highest Product Manifest Bundle-Name jul-to-slf4j Medium Product pom parent-artifactid slf4j-parent Medium Product Manifest bundle-symbolicname jul.to.slf4j Medium Version Manifest Implementation-Version 1.7.30 High Version Manifest Bundle-Version 1.7.30 High Version pom version 1.7.30 Highest Version file version 1.7.30 High
logback-core-1.2.3.jarDescription:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar
MD5: 841fc80c6edff60d947a3872a2db4d45
SHA1: 864344400c3d4d92dfeb0a305dc87d953677c03c
SHA256: 5946d837fe6f960c02a53eda7a6926ecc3c758bbdd69aa453ee429f858217f22
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:runtime
Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor pom artifactid logback-core Low Vendor pom parent-artifactid logback-parent Low Vendor jar package name ch Highest Vendor pom groupid ch.qos.logback Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor jar package name core Highest Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor jar package name logback Highest Vendor pom name Logback Core Module High Vendor jar package name qos Highest Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Product file name logback-core High Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest Bundle-Name Logback Core Module Medium Product jar package name ch Highest Product pom groupid ch.qos.logback Highest Product pom artifactid logback-core Highest Product jar package name core Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product pom parent-artifactid logback-parent Medium Product jar package name logback Highest Product pom name Logback Core Module High Product jar package name qos Highest Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest originally-created-by Apache Maven Bundle Plugin Low Version Manifest Bundle-Version 1.2.3 High Version pom version 1.2.3 Highest Version file version 1.2.3 High
Related Dependencies logback-classic-1.2.3.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar MD5: 64f7a68f931aed8e5ad8243470440f0b SHA1: 7c4f3c474fb2c041d8028740440937705ebb473a SHA256: fb53f8539e7fcb8f093a56e138112056ec1dc809ebb020b59d8a36a5ebac37e0 pkg:maven/ch.qos.logback/logback-classic@1.2.3 lombok-1.18.18.jarDescription:
Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more! License:
The MIT License: https://projectlombok.org/LICENSE File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/projectlombok/lombok/1.18.18/lombok-1.18.18.jar
MD5: 6a157cf72924f8d135dcd6c571bf0405
SHA1: 481f5bfed3ae29f656eedfe9e98c8365b8ba5c57
SHA256: 601ec46206e0f9cac2c0583b3350e79f095419c395e991c761640f929038e9cc
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:provided
Evidence Type Source Name Value Confidence Vendor pom url https://projectlombok.org Highest Vendor Manifest can-redefine-classes true Low Vendor jar package name lombok Highest Vendor pom artifactid lombok Low Vendor jar package name tostring Highest Vendor pom groupid org.projectlombok Highest Vendor file name lombok High Vendor jar package name java Highest Vendor Manifest automatic-module-name lombok Medium Vendor pom groupid projectlombok Highest Vendor pom name Project Lombok High Product pom artifactid lombok Highest Product Manifest can-redefine-classes true Low Product jar package name lombok Highest Product jar package name tostring Highest Product file name lombok High Product pom url https://projectlombok.org Medium Product jar package name java Highest Product Manifest automatic-module-name lombok Medium Product pom groupid projectlombok Highest Product pom name Project Lombok High Version pom version 1.18.18 Highest Version file version 1.18.18 High Version Manifest lombok-version 1.18.18 Medium
org-openide-filesystems-RELEASE80.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/netbeans/api/org-openide-filesystems/RELEASE80/org-openide-filesystems-RELEASE80.jarMD5: e0156cecd9b59b39d6f563147b33d06bSHA1: 49a7350f013a9eb94e77f0d612b8e48c0b277664SHA256: 122784ee11f7ee519b4ecfa08018491d6e478604406e0213e7a72b801585d10eReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor jar package name filesystems Highest Vendor file name org-openide-filesystems-RELEASE80 High Vendor Manifest openide-module-java-dependencies Java > 1.6 Low Vendor pom groupid netbeans.api Highest Vendor jar package name netbeans Highest Vendor Manifest openide-module-localizing-bundle org/openide/filesystems/Bundle.properties Low Vendor Manifest openide-module-layer org/openide/filesystems/resources/layer.xml Low Vendor Manifest openide-module-module-dependencies org.openide.util > 8.25, org.openide.util.lookup > 8.17 Low Vendor pom artifactid org-openide-filesystems Low Vendor Manifest autoupdate-show-in-client false Low Vendor jar package name openide Highest Vendor pom groupid org.netbeans.api Highest Product jar package name filesystems Highest Product pom artifactid org-openide-filesystems Highest Product file name org-openide-filesystems-RELEASE80 High Product Manifest openide-module-module-dependencies org.openide.util > 8.25, org.openide.util.lookup > 8.17 Low Product Manifest openide-module-java-dependencies Java > 1.6 Low Product pom groupid netbeans.api Highest Product Manifest autoupdate-show-in-client false Low Product jar package name netbeans Highest Product jar package name openide Highest Product Manifest openide-module-localizing-bundle org/openide/filesystems/Bundle.properties Low Product Manifest openide-module-layer org/openide/filesystems/resources/layer.xml Low Version pom version RELEASE80 Highest
org-openide-util-RELEASE80.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/netbeans/api/org-openide-util/RELEASE80/org-openide-util-RELEASE80.jarMD5: d566d984d4b7141f0c1b310a9cc88989SHA1: 93d71a0289ce4881c1a8e5bca620409f87f81287SHA256: 4bd08c136ecdf665261b893da19f2660f450c7556a17970dd161c999af779b2dReferenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor Manifest openide-module-module-dependencies org.openide.util.lookup > 8.14 Low Vendor pom groupid netbeans.api Highest Vendor file name org-openide-util-RELEASE80 High Vendor Manifest autoupdate-show-in-client false Low Vendor jar package name netbeans Highest Vendor Manifest openide-module-localizing-bundle org/openide/util/Bundle.properties Low Vendor jar package name openide Highest Vendor jar package name util Highest Vendor pom artifactid org-openide-util Low Vendor Manifest openide-module-java-dependencies Java > 1.7 Low Vendor pom groupid org.netbeans.api Highest Product pom artifactid org-openide-util Highest Product Manifest openide-module-module-dependencies org.openide.util.lookup > 8.14 Low Product pom groupid netbeans.api Highest Product file name org-openide-util-RELEASE80 High Product Manifest autoupdate-show-in-client false Low Product jar package name netbeans Highest Product jar package name openide Highest Product jar package name util Highest Product Manifest openide-module-localizing-bundle org/openide/util/Bundle.properties Low Product Manifest openide-module-java-dependencies Java > 1.7 Low Version pom version RELEASE80 Highest
org-openide-util-lookup-RELEASE80.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/netbeans/api/org-openide-util-lookup/RELEASE80/org-openide-util-lookup-RELEASE80.jarMD5: c127b6177adc1c32dcdfe83f4265cb77SHA1: ae3673a0268f1e34fc7c1e8b56f805036de914bbSHA256: 955d96e2df1b5724624a317e910db51c3e29666b38c7c68c52ad773a294ffd47Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom artifactid org-openide-util-lookup Low Vendor Manifest openide-module-java-dependencies Java > 1.6 Low Vendor pom groupid netbeans.api Highest Vendor Manifest autoupdate-show-in-client false Low Vendor jar package name netbeans Highest Vendor jar package name openide Highest Vendor jar package name util Highest Vendor pom groupid org.netbeans.api Highest Vendor file name org-openide-util-lookup-RELEASE80 High Vendor Manifest openide-module-localizing-bundle org/openide/util/lookup/Bundle.properties Low Vendor jar package name lookup Highest Product Manifest openide-module-java-dependencies Java > 1.6 Low Product pom groupid netbeans.api Highest Product Manifest autoupdate-show-in-client false Low Product jar package name netbeans Highest Product jar package name openide Highest Product jar package name util Highest Product pom artifactid org-openide-util-lookup Highest Product file name org-openide-util-lookup-RELEASE80 High Product Manifest openide-module-localizing-bundle org/openide/util/lookup/Bundle.properties Low Product jar package name lookup Highest Version pom version RELEASE80 Highest
rome-1.0.0.jarDescription:
All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it
easy to work in Java with most syndication formats. Today it accepts all flavors of RSS
(0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes
a set of parsers and generators for the various flavors of feeds, as well as converters
to convert from one format to another. The parsers can give you back Java objects that
are either specific for the format you want to work with, or a generic normalized
SyndFeed object that lets you work on with the data without bothering about the
underlying format. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/net/java/dev/rome/rome/1.0.0/rome-1.0.0.jar
MD5: 18564f25636f0b2ac6c2054d60155028
SHA1: 8b4f0da455c59746435e987285b30c22b09ba18d
SHA256: 8b096b9c07b1baca0174c35b19eb3453911b2cc46f1e4c3dbb3bfa5ceb5ace59
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor jar package name atom Highest Vendor pom name ROME, RSS and atOM utilitiEs for Java High Vendor Manifest bundle-docurl http://rome.dev.java.net Low Vendor Manifest embed-transitive true Low Vendor jar package name rss Highest Vendor file name rome High Vendor Manifest embed-directory META-INF/lib Low Vendor pom organization name ROME Project High Vendor pom groupid net.java.dev.rome Highest Vendor Manifest bundle-symbolicname net.java.dev.rome Medium Vendor jar package name syndication Highest Vendor pom url https://rome.dev.java.net/ Highest Vendor pom artifactid rome Low Vendor pom organization url http://rome.dev.java.net Medium Product jar package name atom Highest Product pom name ROME, RSS and atOM utilitiEs for Java High Product pom artifactid rome Highest Product pom organization name ROME Project Low Product Manifest bundle-docurl http://rome.dev.java.net Low Product Manifest embed-transitive true Low Product pom url https://rome.dev.java.net/ Medium Product jar package name rss Highest Product file name rome High Product pom organization url http://rome.dev.java.net Low Product Manifest embed-directory META-INF/lib Low Product pom groupid net.java.dev.rome Highest Product jar package name syndication Highest Product Manifest bundle-symbolicname net.java.dev.rome Medium Product Manifest Bundle-Name ROME, RSS and atOM utilitiEs for Java Medium Version Manifest Bundle-Version 1.0.0 High Version pom version 1.0.0 Highest Version file version 1.0.0 High
slf4j-api-1.7.30.jarDescription:
The slf4j API File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/slf4j/slf4j-api/1.7.30/slf4j-api-1.7.30.jarMD5: f8be00da99bc4ab64c79ab1e2be7cb7cSHA1: b5a4b6d16ab13e34a88fae84c35cd5d68cac922cSHA256: cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:runtime
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name org.slf4j Medium Vendor file name slf4j-api High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor jar package name slf4j Highest Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom parent-artifactid slf4j-parent Low Vendor pom groupid org.slf4j Highest Vendor pom artifactid slf4j-api Low Vendor pom name SLF4J API Module High Product Manifest Implementation-Title slf4j-api High Product pom url http://www.slf4j.org Medium Product Manifest automatic-module-name org.slf4j Medium Product file name slf4j-api High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom parent-groupid org.slf4j Medium Product jar package name slf4j Highest Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Bundle-Name slf4j-api Medium Product pom groupid slf4j Highest Product pom artifactid slf4j-api Highest Product pom parent-artifactid slf4j-parent Medium Product pom name SLF4J API Module High Version Manifest Implementation-Version 1.7.30 High Version Manifest Bundle-Version 1.7.30 High Version pom version 1.7.30 Highest Version file version 1.7.30 High
spotbugs-annotations-3.1.9.jarDescription:
Annotations the SpotBugs tool supports License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/com/github/spotbugs/spotbugs-annotations/3.1.9/spotbugs-annotations-3.1.9.jar
MD5: 56a1a81d69b6a111161bbce0e6dea26a
SHA1: 2ef5127efcc1a899aab8c66d449a631c9a99c469
SHA256: 68c7c46b4299e94837e236ae742f399901a950fe910fe3ca710026753b5dd2e1
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor pom name SpotBugs Annotations High Vendor pom url https://spotbugs.github.io/ Highest Vendor file name spotbugs-annotations High Vendor pom groupid com.github.spotbugs Highest Vendor pom artifactid spotbugs-annotations Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest automatic-module-name com.github.spotbugs.annotations Medium Vendor Manifest bundle-symbolicname spotbugs-annotations Medium Vendor pom groupid github.spotbugs Highest Product pom name SpotBugs Annotations High Product file name spotbugs-annotations High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom url https://spotbugs.github.io/ Medium Product Manifest Bundle-Name spotbugs-annotations Medium Product Manifest automatic-module-name com.github.spotbugs.annotations Medium Product Manifest bundle-symbolicname spotbugs-annotations Medium Product pom artifactid spotbugs-annotations Highest Product pom groupid github.spotbugs Highest Version file version 3.1.9 High Version Manifest Bundle-Version 3.1.9 High Version pom version 3.1.9 Highest
spring-core-5.3.1.jarDescription:
Spring Core License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-core/5.3.1/spring-core-5.3.1.jar
MD5: df36706fc74458c9c28e97aca7fae409
SHA1: 47af5b161749cd249fc074b4f140e011a3337efd
SHA256: 6ee995055163c59703be237be59f0565acb97c9d42c5d60df2bf3a4b4c6ef6e9
Referenced In Project/Scope: NorthernWind :: Frontend :: Webapp :: Spring MVC:compile
Evidence Type Source Name Value Confidence Vendor jar package name springframework Highest Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor Manifest automatic-module-name spring.core Medium Vendor pom url spring-projects/spring-framework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom groupid springframework Highest Vendor jar package name core Highest Vendor pom artifactid spring-core Low Vendor pom groupid org.springframework Highest Vendor hint analyzer vendor SpringSource Highest Vendor file name spring-core High Vendor hint analyzer vendor vmware Highest Vendor jar package name io Highest Vendor hint analyzer vendor pivotal software Highest Product jar package name springframework Highest Product pom artifactid spring-core Highest Product Manifest automatic-module-name spring.core Medium Product pom name Spring Core High Product pom organization name Spring IO Low Product pom groupid springframework Highest Product jar package name core Highest Product Manifest Implementation-Title spring-core High Product file name spring-core High Product pom organization url https://spring.io/projects/spring-framework Low Product hint analyzer product springsource_spring_framework Highest Product pom url spring-projects/spring-framework High Product jar package name io Highest Version pom version 5.3.1 Highest Version file version 5.3.1 High Version Manifest Implementation-Version 5.3.1 High
Related Dependencies spring-webmvc-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-webmvc/5.3.1/spring-webmvc-5.3.1.jar MD5: c0c5785e768fababd9414a66545d022b SHA1: 17493978f251b7e51393cdf19f4f51af9c1f04f2 SHA256: 565b5e4503a4a427bd46520a432e39233b1d93d307c85d050afa29904b7e836b pkg:maven/org.springframework/spring-webmvc@5.3.1 spring-web-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-web/5.3.1/spring-web-5.3.1.jar MD5: 2c074c8766b7fb749bdad2332d61d7f5 SHA1: 4e1e1d1c6b5a00597162db84132414c409bcf615 SHA256: 925f3b82035f31b410309154c3ae1e48ffa5204280275bdc9390d91312ad4fb4 pkg:maven/org.springframework/spring-web@5.3.1 spring-expression-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-expression/5.3.1/spring-expression-5.3.1.jar MD5: d465932c5f36eed42ae9958fed2a098c SHA1: aee660842a21fbf49f6e5921aa07974f1650c498 SHA256: 897f79c85ba4fb3ed7a086a982c909d5aba9161c4d8707b00868fa27403256b8 pkg:maven/org.springframework/spring-expression@5.3.1 spring-aspects-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-aspects/5.3.1/spring-aspects-5.3.1.jar MD5: f364d6228c719936bc8751e997cb861d SHA1: 968c9205f85589b5c102b3232f499fa90ec28a48 SHA256: 962195358fdd97d30204d5ad75dd9339c3f1db7e008ab106b524197a4889ac96 pkg:maven/org.springframework/spring-aspects@5.3.1 spring-beans-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-beans/5.3.1/spring-beans-5.3.1.jar MD5: 8218016c1dfa50b56eb65bb7415db575 SHA1: a4bb5ffad5564e4a0e25955e3a40b1c6158385b2 SHA256: 86f7c1cdac78f5fe6e2547d8faef52e8c3528526563b542c4922479f5422c440 pkg:maven/org.springframework/spring-beans@5.3.1 spring-context-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-context/5.3.1/spring-context-5.3.1.jar MD5: bd13eda44ac28f87d752abaf0bbd5325 SHA1: 736836c8098981ddabd309a0c15f967594da62bc SHA256: 5adcc88fc791d012e0993e2f5d3770e03c2432df5a561c63bfa9e1dc6ac93501 pkg:maven/org.springframework/spring-context@5.3.1 spring-jcl-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-jcl/5.3.1/spring-jcl-5.3.1.jar MD5: 5a4890886c1d3540e3b52a0ae3f6b850 SHA1: 1158888aa7517f8997eb43afe47776d9d2de8a38 SHA256: 31081cbd5bdfb2cc80d50f11d59deb6a410b1f21593af9e20f6ec6b4c0fe220d pkg:maven/org.springframework/spring-jcl@5.3.1 spring-aop-5.3.1.jarFile Path: /Volumes/Users/fritz/LocalData/Business/Tidalwave/Projects/WorkAreas/tidalwave.bitbucket.io/repository/org/springframework/spring-aop/5.3.1/spring-aop-5.3.1.jar MD5: f08cd6faaf67d097bc4fbdf9684f325c SHA1: 25c310880484082ffba3130deb8e10c5afb29f10 SHA256: a1f67fe0a11341c7da562053a74457191ead48db8ee49b7713f65c383c8b9526 pkg:maven/org.springframework/spring-aop@5.3.1