Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 3.3.2Report Generated On : Oct 23, 2018 at 14:47:44 +02:00Dependencies Scanned : 751 (577 unique)Vulnerable Dependencies : 49 Vulnerabilities Found : 157Vulnerabilities Suppressed : 2... NVD CVE 2002 : 20/10/2018 09:49:35NVD CVE 2003 : 20/10/2018 09:47:04NVD CVE 2004 : 20/10/2018 09:46:21NVD CVE 2005 : 20/10/2018 09:45:02NVD CVE 2006 : 20/10/2018 09:42:51NVD CVE 2007 : 20/10/2018 09:39:31NVD CVE 2008 : 20/10/2018 09:36:21NVD CVE 2009 : 19/10/2018 09:48:16NVD CVE 2010 : 19/10/2018 09:45:17NVD CVE 2011 : 19/10/2018 09:41:18NVD CVE 2012 : 22/10/2018 09:24:35NVD CVE 2013 : 23/10/2018 09:33:09NVD CVE 2014 : 23/10/2018 13:17:54NVD CVE 2015 : 23/10/2018 09:25:40NVD CVE 2016 : 23/10/2018 09:21:31NVD CVE 2017 : 23/10/2018 13:17:52NVD CVE 2018 : 23/10/2018 09:05:31NVD CVE Checked : 23/10/2018 14:30:07NVD CVE Modified : 23/10/2018 14:04:55VersionCheckOn : 1540297807764Display:
Showing Vulnerable Dependencies (click to show all) Dependencies ST4-4.0.8.jarDescription:
StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output.
StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization.
It evolved over years of effort developing jGuru.com.
StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org
and powers the ANTLR v3 code generator. Its distinguishing characteristic
is that unlike other engines, it strictly enforces model-view separation.
Strict separation makes websites and code generators more flexible
and maintainable; it also provides an excellent defense against malicious
template authors.
There are currently about 600 StringTemplate source downloads a month.
License:
BSD licence: http://antlr.org/license.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/ST4-4.0.8.jar
MD5: a33afc363c76608dd7f8a723f137dbf1
SHA1: 0a1c55e974f8a94d78e2348fa6ff63f4fa1fae64
SHA256: 58caabc40c9f74b0b5993fd868e0f64a50c0759094e6a251aaafad98edfc7a3b
Evidence Type Source Name Value Confidence Vendor file name ST4 High Vendor pom groupid antlr Highest Vendor pom description StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org
and powers the ANTLR v3 code generator. Its distinguishing characteristic is that un... Low Vendor pom url http://www.stringtemplate.org Highest Vendor Manifest Implementation-Vendor-Id org.antlr Medium Vendor pom artifactid ST4 Low Vendor pom name StringTemplate 4 High Product file name ST4 High Product Manifest Implementation-Title StringTemplate 4 High Product pom description StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output. StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization. It evolved over years of effort developing jGuru.com. StringTemplate also generates the stringtemplate website: http://www.stringtemplate.org
and powers the ANTLR v3 code generator. Its distinguishing characteristic is that un... Low Product pom groupid antlr Low Product pom url http://www.stringtemplate.org Medium Product pom artifactid ST4 Highest Product pom name StringTemplate 4 High Version file version 4.0.8 Highest Version Manifest Implementation-Version 4.0.8 High Version pom version 4.0.8 Highest
maven: org.antlr:ST4:4.0.8 Confidence :High amqp-client-5.2.0.jarDescription:
The RabbitMQ Java client library allows Java applications to interface with RabbitMQ. License:
ASL 2.0: http://www.apache.org/licenses/LICENSE-2.0.html
GPL v2: http://www.gnu.org/licenses/gpl-2.0.txt
MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/amqp-client-5.2.0.jar
MD5: 4b15b64a1c1e683dc9e154b55da746ee
SHA1: 5387675387ae293231f00f4cfc2b9656f510f1e2
SHA256: 1adc7ff1842557ccdc04197f59976d3667aa211406d8e19d0807288bf440f421
Evidence Type Source Name Value Confidence Vendor pom artifactid amqp-client Low Vendor manifest Bundle-Description The RabbitMQ Java client library allows Java applications to interface with RabbitMQ. Medium Vendor pom organization url http://www.rabbitmq.com Medium Vendor Manifest bundle-docurl http://www.rabbitmq.com Low Vendor pom groupid rabbitmq Highest Vendor pom name RabbitMQ Java Client High Vendor Manifest automatic-module-name com.rabbitmq.client Medium Vendor Manifest Implementation-Vendor Pivotal Software, Inc. High Vendor Manifest implementation-url http://www.rabbitmq.com Low Vendor pom description The RabbitMQ Java client library allows Java applications to interface with RabbitMQ. Medium Vendor Manifest specification-vendor AMQP Working Group (www.amqp.org) Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor Manifest bundle-symbolicname com.rabbitmq.client Medium Vendor file name amqp-client High Vendor pom organization name Pivotal Software, Inc. High Vendor pom url http://www.rabbitmq.com Highest Product manifest Bundle-Description The RabbitMQ Java client library allows Java applications to interface with RabbitMQ. Medium Product Manifest bundle-docurl http://www.rabbitmq.com Low Product pom organization name Pivotal Software, Inc. Low Product pom artifactid amqp-client Highest Product pom name RabbitMQ Java Client High Product Manifest automatic-module-name com.rabbitmq.client Medium Product pom url http://www.rabbitmq.com Medium Product Manifest implementation-url http://www.rabbitmq.com Low Product pom organization url http://www.rabbitmq.com Low Product pom description The RabbitMQ Java client library allows Java applications to interface with RabbitMQ. Medium Product Manifest Implementation-Title RabbitMQ Java Client High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product Manifest specification-title AMQP Medium Product Manifest Bundle-Name RabbitMQ Java Client Medium Product Manifest bundle-symbolicname com.rabbitmq.client Medium Product pom groupid rabbitmq Low Product file name amqp-client High Version file version 5.2.0 Highest Version Manifest Implementation-Version 5.2.0 High Version pom version 5.2.0 Highest
Related Dependencies amqp-client-5.2.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-rabbitmq/amqp-client-5.2.0.jar MD5: 4b15b64a1c1e683dc9e154b55da746ee SHA1: 5387675387ae293231f00f4cfc2b9656f510f1e2 SHA256: 1adc7ff1842557ccdc04197f59976d3667aa211406d8e19d0807288bf440f421 maven: com.rabbitmq:amqp-client:5.2.0 Confidence :Highcpe: cpe:/a:pivotal_software:rabbitmq:5.2.0 Confidence :Low suppress animal-sniffer-annotations-1.14.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/animal-sniffer-annotations-1.14.jarMD5: 9d42e46845c874f1710a9f6a741f6c14SHA1: 775b7e22fb10026eed3f86e8dc556dfafe35f2d5SHA256: 2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d
Evidence Type Source Name Value Confidence Vendor jar package name mojo Low Vendor jar package name animal_sniffer Low Vendor file name animal-sniffer-annotations High Vendor pom artifactid animal-sniffer-annotations Low Vendor pom parent-artifactid animal-sniffer-parent Low Vendor pom name Animal Sniffer Annotations High Vendor jar package name codehaus Low Vendor pom groupid codehaus.mojo Highest Vendor pom parent-groupid org.codehaus.mojo Medium Product jar package name mojo Low Product jar package name animal_sniffer Low Product pom artifactid animal-sniffer-annotations Highest Product file name animal-sniffer-annotations High Product pom groupid codehaus.mojo Low Product pom name Animal Sniffer Annotations High Product pom parent-artifactid animal-sniffer-parent Medium Product pom parent-groupid org.codehaus.mojo Low Product jar package name ignorejrerequirement Low Version file version 1.14 Highest Version pom version 1.14 Highest
maven: org.codehaus.mojo:animal-sniffer-annotations:1.14 Confidence :High antlr-runtime-3.5.2.jarDescription:
A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/antlr-runtime-3.5.2.jarMD5: 1fbbae2cb72530207c20b797bdabd029SHA1: cd9cd41361c155f3af0f653009dcecb08d8b4afdSHA256: ce3fc8ecb10f39e9a3cddcbb2ce350d272d9cd3d0b1e18e6fe73c3b9389c8734
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid antlr-master Low Vendor pom artifactid antlr-runtime Low Vendor file name antlr-runtime High Vendor pom groupid antlr Highest Vendor pom name ANTLR 3 Runtime High Vendor Manifest Implementation-Vendor-Id org.antlr Medium Vendor pom url http://www.antlr.org Highest Vendor pom parent-groupid org.antlr Medium Vendor pom description A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions. Low Vendor Manifest Implementation-Vendor ANTLR High Product pom parent-groupid org.antlr Low Product file name antlr-runtime High Product pom name ANTLR 3 Runtime High Product pom artifactid antlr-runtime Highest Product pom groupid antlr Low Product pom url http://www.antlr.org Medium Product pom parent-artifactid antlr-master Medium Product pom description A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions. Low Product Manifest Implementation-Title ANTLR 3 Runtime High Version pom version 3.5.2 Highest Version Manifest Implementation-Version 3.5.2 High Version file version 3.5.2 Highest
maven: org.antlr:antlr-runtime:3.5.2 Confidence :High antlr4-4.5.1.jarDescription:
The ANTLR 4 grammar compiler. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/antlr4-4.5.1.jarMD5: d1006ee01c7d2fc8098d1b1ee0160cedSHA1: 19a08f261dc2b7e1bc58c8f1038f766dccade74cSHA256: 59844c92d8afef5e3e0414a3a2faa88bced2b69a252b4796e214ac1c90d5e9cc
Evidence Type Source Name Value Confidence Vendor jar package name antlr Low Vendor file name antlr4 High Vendor pom groupid antlr Highest Vendor jar package name v4 Low Vendor pom name ANTLR 4 Tool High Vendor pom artifactid antlr4 Low Vendor pom description The ANTLR 4 grammar compiler. Medium Vendor central groupid org.antlr Highest Vendor pom parent-artifactid antlr4-master Low Vendor pom parent-groupid org.antlr Medium Product pom parent-groupid org.antlr Low Product file name antlr4 High Product jar package name v4 Low Product pom artifactid antlr4 Highest Product pom name ANTLR 4 Tool High Product pom groupid antlr Low Product pom description The ANTLR 4 grammar compiler. Medium Product central artifactid antlr4 Highest Product pom parent-artifactid antlr4-master Medium Version pom version 4.5.1 Highest Version file version 4.5.1 Highest Version central version 4.5.1 Highest
aopalliance-1.0.jarDescription:
AOP Alliance License:
Public Domain File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256: 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Evidence Type Source Name Value Confidence Vendor file name aopalliance High Vendor pom url http://aopalliance.sourceforge.net Highest Vendor jar package name aopalliance Low Vendor pom groupid aopalliance Highest Vendor pom description AOP Alliance Medium Vendor pom name AOP alliance High Vendor jar package name intercept Low Vendor pom artifactid aopalliance Low Vendor central groupid aopalliance Highest Product file name aopalliance High Product pom groupid aopalliance Low Product central artifactid aopalliance Highest Product pom url http://aopalliance.sourceforge.net Medium Product pom description AOP Alliance Medium Product pom name AOP alliance High Product jar package name intercept Low Product pom artifactid aopalliance Highest Version file version 1.0 Highest Version central version 1.0 Highest Version pom version 1.0 Highest
Related Dependencies aopalliance-1.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/aopalliance-1.0.jar MD5: 04177054e180d09e3998808efa0401c7 SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8 SHA256: 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08 apacheds-i18n-2.0.0-M15.jarDescription:
Internationalization of errors and other messages License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/apacheds-i18n-2.0.0-M15.jar
MD5: f5877c02fd56ade67713560e589c81b9
SHA1: 71c61c84683152ec2a6a65f3f96fe534e304fa22
SHA256: bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.directory.server Medium Vendor manifest Bundle-Description Internationalization of errors and other messages Medium Vendor jar package name directory Low Vendor jar package name apache Low Vendor pom parent-artifactid apacheds-parent Low Vendor pom name ApacheDS I18n High Vendor Manifest Implementation-Vendor-Id org.apache.directory.server Medium Vendor central groupid org.apache.directory.server Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid apacheds-i18n Low Vendor Manifest bundle-symbolicname org.apache.directory.server.i18n Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor file name apacheds-i18n High Vendor pom description Internationalization of errors and other messages Medium Vendor pom groupid apache.directory.server Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor jar package name server Low Product manifest Bundle-Description Internationalization of errors and other messages Medium Product jar package name directory Low Product pom name ApacheDS I18n High Product Manifest Bundle-Name ApacheDS I18n Medium Product Manifest Implementation-Title ApacheDS I18n High Product Manifest bundle-symbolicname org.apache.directory.server.i18n Medium Product jar package name i18n Low Product central artifactid apacheds-i18n Highest Product pom parent-artifactid apacheds-parent Medium Product file name apacheds-i18n High Product pom description Internationalization of errors and other messages Medium Product pom artifactid apacheds-i18n Highest Product Manifest bundle-docurl http://www.apache.org/ Low Product pom groupid apache.directory.server Low Product Manifest specification-title ApacheDS I18n Medium Product pom parent-groupid org.apache.directory.server Low Product jar package name server Low Version pom version 2.0.0-M15 Highest Version central version 2.0.0-M15 Highest Version Manifest Implementation-Version 2.0.0-M15 High Version file version 2.0.0.m15 Highest
apacheds-kerberos-codec-2.0.0-M15.jarDescription:
The Kerberos protocol encoder/decoder module License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/apacheds-kerberos-codec-2.0.0-M15.jar
MD5: 3118e22eac44e150c383df1d417772f4
SHA1: 1c16e4e477183641c5f0dd5cdecd27ec331bacb5
SHA256: 4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded
Evidence Type Source Name Value Confidence Vendor file name apacheds-kerberos-codec High Vendor pom parent-groupid org.apache.directory.server Medium Vendor manifest Bundle-Description The Kerberos protocol encoder/decoder module Medium Vendor Manifest bundle-symbolicname org.apache.directory.server.kerberos.codec Medium Vendor jar package name directory Low Vendor jar package name apache Low Vendor pom parent-artifactid apacheds-parent Low Vendor Manifest Implementation-Vendor-Id org.apache.directory.server Medium Vendor central groupid org.apache.directory.server Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name shared Low Vendor pom name ApacheDS Protocol Kerberos Codec High Vendor pom artifactid apacheds-kerberos-codec Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Kerberos protocol encoder/decoder module Medium Vendor pom groupid apache.directory.server Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Product file name apacheds-kerberos-codec High Product manifest Bundle-Description The Kerberos protocol encoder/decoder module Medium Product Manifest bundle-symbolicname org.apache.directory.server.kerberos.codec Medium Product jar package name directory Low Product Manifest Bundle-Name ApacheDS Protocol Kerberos Codec Medium Product Manifest Implementation-Title ApacheDS Protocol Kerberos Codec High Product jar package name shared Low Product pom name ApacheDS Protocol Kerberos Codec High Product Manifest specification-title ApacheDS Protocol Kerberos Codec Medium Product pom parent-artifactid apacheds-parent Medium Product pom description The Kerberos protocol encoder/decoder module Medium Product jar package name kerberos Low Product Manifest bundle-docurl http://www.apache.org/ Low Product pom groupid apache.directory.server Low Product pom parent-groupid org.apache.directory.server Low Product central artifactid apacheds-kerberos-codec Highest Product pom artifactid apacheds-kerberos-codec Highest Version pom version 2.0.0-M15 Highest Version central version 2.0.0-M15 Highest Version Manifest Implementation-Version 2.0.0-M15 High Version file version 2.0.0.m15 Highest
api-asn1-api-1.0.0-M20.jarDescription:
ASN.1 API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/api-asn1-api-1.0.0-M20.jar
MD5: cf4561832dab76e9f37461342ec18d17
SHA1: 5e6486ffa3125ba44dc410ead166e1d6ba8ac76d
SHA256: 484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id org.apache.directory.api Medium Vendor Manifest bundle-symbolicname org.apache.directory.api.asn1.api Medium Vendor central groupid org.apache.directory.api Highest Vendor pom groupid apache.directory.api Highest Vendor jar package name directory Low Vendor pom description ASN.1 API Medium Vendor pom artifactid api-asn1-api Low Vendor jar package name apache Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name api Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor file name api-asn1-api High Vendor pom parent-groupid org.apache.directory.api Medium Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor manifest Bundle-Description ASN.1 API Medium Vendor pom parent-artifactid api-asn1-parent Low Vendor pom name Apache Directory API ASN.1 API High Product Manifest bundle-symbolicname org.apache.directory.api.asn1.api Medium Product pom artifactid api-asn1-api Highest Product jar package name asn1 Low Product jar package name directory Low Product pom description ASN.1 API Medium Product central artifactid api-asn1-api Highest Product Manifest specification-title Apache Directory API ASN.1 API Medium Product jar package name api Low Product file name api-asn1-api High Product Manifest bundle-docurl http://www.apache.org/ Low Product pom parent-groupid org.apache.directory.api Low Product pom parent-artifactid api-asn1-parent Medium Product manifest Bundle-Description ASN.1 API Medium Product Manifest Bundle-Name Apache Directory API ASN.1 API Medium Product Manifest Implementation-Title Apache Directory API ASN.1 API High Product pom groupid apache.directory.api Low Product pom name Apache Directory API ASN.1 API High Version central version 1.0.0-M20 Highest Version file version 1.0.0.m20 Highest Version Manifest Implementation-Version 1.0.0-M20 High Version pom version 1.0.0-M20 Highest
api-util-1.0.0-M20.jarDescription:
Utilities shared across this top level project License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/api-util-1.0.0-M20.jar
MD5: 2c5a6722666882024becdd64301be492
SHA1: a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb
SHA256: fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1
Evidence Type Source Name Value Confidence Vendor pom groupid apache.directory.api Highest Vendor pom parent-artifactid api-parent Low Vendor pom parent-groupid org.apache.directory.api Medium Vendor manifest Bundle-Description Utilities shared across this top level project Medium Vendor Manifest bundle-symbolicname org.apache.directory.api.util Medium Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor pom description Utilities shared across this top level project Medium Vendor file name api-util High Vendor pom name Apache Directory LDAP API Utilities High Vendor pom artifactid api-util Low Product Manifest Bundle-Name Apache Directory LDAP API Utilities Medium Product pom parent-artifactid api-parent Medium Product manifest Bundle-Description Utilities shared across this top level project Medium Product Manifest bundle-symbolicname org.apache.directory.api.util Medium Product Manifest bundle-docurl http://www.apache.org/ Low Product pom parent-groupid org.apache.directory.api Low Product pom description Utilities shared across this top level project Medium Product pom artifactid api-util Highest Product file name api-util High Product pom groupid apache.directory.api Low Product pom name Apache Directory LDAP API Utilities High Version file version 1.0.0.m20 Highest Version pom version 1.0.0-M20 Highest
maven: org.apache.directory.api:api-util:1.0.0-M20 Confidence :Highcpe: cpe:/a:apache:directory_ldap_api:1.0.0.m30 Confidence :Low suppress Published Vulnerabilities CVE-2015-3250 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors. Vulnerable Software & Versions:
args4j-2.0.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/args4j-2.0.16.jarMD5: 6571d69d142dd2a003c4ffae6138f0eeSHA1: 9f00fb12820743b9e05c686eba543d64dd43f2b1SHA256: c361d3741c1e79550c7fa04d01c699d66e0a16f18a1749eaa1b8b0df61cd0275
Evidence Type Source Name Value Confidence Vendor pom name args4j High Vendor jar package name args4j Low Vendor pom artifactid args4j Low Vendor jar package name kohsuke Low Vendor pom parent-artifactid args4j-site Low Vendor file name args4j High Vendor pom groupid args4j Highest Vendor jar package name spi Low Product pom name args4j High Product jar package name args4j Low Product pom artifactid args4j Highest Product pom parent-artifactid args4j-site Medium Product pom groupid args4j Low Product file name args4j High Product jar package name spi Low Version pom version 2.0.16 Highest Version file version 2.0.16 Highest
maven: args4j:args4j:2.0.16 Confidence :High ascii-utf-themes-0.0.1.jarDescription:
Base elements (lines, corners, borders) and themes for frames, grids, lists (itemize, enumerate). License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/ascii-utf-themes-0.0.1.jar
MD5: 3b89c54f240c34789e673fd6d47ddc85
SHA1: 4e6354685bb4bf62742dd8f0bc2de338e048e978
SHA256: 4e020a8f7ed48e9a7d4795f719f61c2074d2831b2e392bbc6ef074177087cd10
Evidence Type Source Name Value Confidence Vendor jar package name vandermeer Low Vendor pom url vdmeer/ascii-utf-themes Highest Vendor pom artifactid ascii-utf-themes Low Vendor jar package name asciithemes Low Vendor pom name ASCII and UTF Themes High Vendor file name ascii-utf-themes High Vendor pom groupid de.vandermeer Highest Vendor pom description Base elements (lines, corners, borders) and themes for frames, grids, lists (itemize, enumerate). Medium Vendor jar package name de Low Product pom groupid de.vandermeer Low Product pom artifactid ascii-utf-themes Highest Product jar package name vandermeer Low Product jar package name asciithemes Low Product pom name ASCII and UTF Themes High Product file name ascii-utf-themes High Product pom description Base elements (lines, corners, borders) and themes for frames, grids, lists (itemize, enumerate). Medium Product pom url vdmeer/ascii-utf-themes High Version file version 0.0.1 Highest Version pom version 0.0.1 Highest
maven: de.vandermeer:ascii-utf-themes:0.0.1 Confidence :High asciitable-0.3.2.jarDescription:
An ASCII table with various render options and UTF-8 support License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/asciitable-0.3.2.jar
MD5: d12aa8902ab9626ec31bed0c60a1a45f
SHA1: 96ee630413aa5a03ac5cbb34c79c95f91f417caa
SHA256: 86e22c9e2fe4077d3b1f1daf3f91a7918ed2d41209454c01d38b088017975686
Evidence Type Source Name Value Confidence Vendor jar package name vandermeer Low Vendor pom description An ASCII table with various render options and UTF-8 support Medium Vendor pom name ASCII Table High Vendor pom url vdmeer/asciitable Highest Vendor file name asciitable High Vendor pom artifactid asciitable Low Vendor jar package name asciitable Low Vendor pom groupid de.vandermeer Highest Vendor jar package name de Low Product pom groupid de.vandermeer Low Product jar package name vandermeer Low Product pom description An ASCII table with various render options and UTF-8 support Medium Product pom url vdmeer/asciitable High Product pom name ASCII Table High Product pom artifactid asciitable Highest Product file name asciitable High Product jar package name asciitable Low Version pom version 0.3.2 Highest Version file version 0.3.2 Highest
maven: de.vandermeer:asciitable:0.3.2 Confidence :High asm-3.3.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/asm-3.3.1.jarMD5: 1ad1e8959324b0f680b8e62406955642SHA1: 1d5f20b4ea675e6fab6ab79f1cd60ec268ddc015SHA256: c2b39275f8e951bc74750080a1266cdabc39399bc5e13d642bf2d346449df7f3
Evidence Type Source Name Value Confidence Vendor pom name ASM Core High Vendor jar package name asm Low Vendor pom parent-artifactid asm-parent Low Vendor jar package name objectweb Low Vendor central groupid asm Highest Vendor file name asm High Vendor pom groupid asm Highest Vendor Manifest Implementation-Vendor France Telecom R&D High Vendor pom artifactid asm Low Product pom name ASM Core High Product jar package name asm Low Product pom artifactid asm Highest Product pom parent-artifactid asm-parent Medium Product pom groupid asm Low Product file name asm High Product Manifest Implementation-Title ASM High Product central artifactid asm Highest Version file version 3.3.1 Highest Version central version 3.3.1 Highest Version Manifest Implementation-Version 3.3.1 High Version pom version 3.3.1 Highest
asm-5.0.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/asm-5.0.4.jarMD5: c8a73cdfdf802ab0220c860d590d0f84SHA1: 0da08b8cce7bbf903602a25a3a163ae252435795SHA256: 896618ed8ae62702521a78bc7be42b7c491a08e6920a15f89a3ecdec31e9a220
Evidence Type Source Name Value Confidence Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Vendor pom name ASM Core High Vendor pom parent-artifactid asm-parent Low Vendor jar package name objectweb Low Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Vendor central groupid org.ow2.asm Highest Vendor Manifest Implementation-Vendor France Telecom R&D High Vendor jar package name asm Low Vendor pom parent-groupid org.ow2.asm Medium Vendor pom groupid ow2.asm Highest Vendor file name asm High Vendor Manifest bundle-docurl http://asm.objectweb.org Low Vendor pom artifactid asm Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Product pom name ASM Core High Product pom parent-groupid org.ow2.asm Low Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest Bundle-Name ASM Medium Product Manifest Implementation-Title ASM High Product central artifactid asm Highest Product jar package name asm Low Product pom artifactid asm Highest Product pom parent-artifactid asm-parent Medium Product file name asm High Product pom groupid ow2.asm Low Product Manifest bundle-docurl http://asm.objectweb.org Low Version central version 5.0.4 Highest Version file version 5.0.4 Highest Version Manifest Implementation-Version 5.0.4 High Version pom version 5.0.4 Highest
Related Dependencies asm-5.0.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/asm-5.0.4.jar MD5: c8a73cdfdf802ab0220c860d590d0f84 SHA1: 0da08b8cce7bbf903602a25a3a163ae252435795 SHA256: 896618ed8ae62702521a78bc7be42b7c491a08e6920a15f89a3ecdec31e9a220 avro-1.7.4.jarDescription:
Avro core components File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/avro-1.7.4.jarMD5: de02dfb1f5880c0b422f215ffcaa3379SHA1: 416e7030879814f52845b97f04bb50ecd1cef372SHA256: a01d26e9a5ed0754e8c88dbb373fba896c57df0a0c424185767a3857855bb222
Evidence Type Source Name Value Confidence Vendor pom groupid apache.avro Highest Vendor pom parent-groupid org.apache.avro Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor file name avro High Vendor Manifest Implementation-Vendor-Id org.apache.avro Medium Vendor pom artifactid avro Low Vendor pom url http://avro.apache.org Highest Vendor pom description Avro core components Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid avro-parent Low Vendor pom name Apache Avro High Product Manifest Implementation-Title Apache Avro High Product pom parent-artifactid avro-parent Medium Product pom parent-groupid org.apache.avro Low Product pom artifactid avro Highest Product pom groupid apache.avro Low Product file name avro High Product pom url http://avro.apache.org Medium Product Manifest specification-title Apache Avro Medium Product pom description Avro core components Medium Product pom name Apache Avro High Version file version 1.7.4 Highest Version Manifest Implementation-Version 1.7.4 High Version pom version 1.7.4 Highest
maven: org.apache.avro:avro:1.7.4 Confidence :High bootstrap-3.0.3.jarDescription:
WebJar for Bootstrap License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/bootstrap-3.0.3.jar
MD5: 8a2c981f25963903795453685babda0a
SHA1: 7297fe81dc0e82c44e15232014fd8e1180c0a3bc
SHA256: e84ad1718ab9f5eec39afcdeba0706497328f6e2394bab3dbb501fd367d12548
Evidence Type Source Name Value Confidence Vendor pom groupid webjars Highest Vendor pom name Bootstrap High Vendor pom url http://webjars.org Highest Vendor pom artifactid bootstrap Low Vendor file name bootstrap High Vendor pom description WebJar for Bootstrap Medium Product pom groupid webjars Low Product pom name Bootstrap High Product pom url http://webjars.org Medium Product file name bootstrap High Product pom artifactid bootstrap Highest Product pom description WebJar for Bootstrap Medium Version file version 3.0.3 Highest Version pom version 3.0.3 Highest
maven: org.webjars:bootstrap:3.0.3 Confidence :High cglib-2.2.1-v20090111.jarLicense:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cglib-2.2.1-v20090111.jar
MD5: 88af5931165ac8becab84a157c9bace0
SHA1: 07ce5e983fd0e6c78346f4c9cbfa39d83049dda2
SHA256: 42e1dfb26becbf1a633f25b47e39fcc422b85e77e4c0468d9a44f885f5fa0be2
Evidence Type Source Name Value Confidence Vendor pom groupid sonatype.sisu.inject Highest Vendor pom url http://sourceforge.net/projects/cglib/ Highest Vendor jar package name cglib Low Vendor jar package name sf Low Vendor pom parent-groupid org.sonatype.forge Medium Vendor pom name CGLIB High Vendor central groupid org.sonatype.sisu.inject Highest Vendor pom artifactid cglib Low Vendor file name cglib High Vendor jar package name net Low Vendor pom parent-artifactid forge-parent Low Product pom parent-artifactid forge-parent Medium Product pom parent-groupid org.sonatype.forge Low Product pom url http://sourceforge.net/projects/cglib/ Medium Product jar package name cglib Low Product jar package name sf Low Product pom groupid sonatype.sisu.inject Low Product pom name CGLIB High Product central artifactid cglib Highest Product pom artifactid cglib Highest Product file name cglib High Version central version 2.2.1-v20090111 Highest Version pom version 2.2.1-v20090111 Highest Version file version 2.2.1.v20090111 Highest
cglib-2.2.2.jarDescription:
Code generation library License:
ASF 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cglib-2.2.2.jar
MD5: b3f681be48fce094cf01a045f5bdca6f
SHA1: a47a971686474124562bdd4a7ccbd8ac8c3e8b11
SHA256: a93e4485d274277177480c4afe6ddd8355cda1cacfe356c134e25d65193935fd
Evidence Type Source Name Value Confidence Vendor pom description Code generation library Medium Vendor central groupid cglib Highest Vendor pom groupid cglib Highest Vendor pom url http://cglib.sourceforge.net/ Highest Vendor jar package name cglib Low Vendor jar package name sf Low Vendor pom artifactid cglib Low Vendor pom name Code Generation Library High Vendor file name cglib High Vendor jar package name net Low Product pom description Code generation library Medium Product pom groupid cglib Low Product pom url http://cglib.sourceforge.net/ Medium Product jar package name cglib Low Product jar package name sf Low Product central artifactid cglib Highest Product pom artifactid cglib Highest Product pom name Code Generation Library High Product file name cglib High Version file version 2.2.2 Highest Version pom version 2.2.2 Highest Version central version 2.2.2 Highest
char-translation-0.0.2.jarDescription:
Set of translators for characters, HTML Elements, and their combinations. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/char-translation-0.0.2.jar
MD5: 27c8254bb595bb16306f99999600f0d7
SHA1: 1f8a810c0b9a5b8269288b22f842b88b1262f238
SHA256: dbc2d5310d94614a4c64d3101b3977a0d8b3e484d93c9cd858fb762c895cc39f
Evidence Type Source Name Value Confidence Vendor file name char-translation High Vendor jar package name vandermeer Low Vendor jar package name translation Low Vendor pom url vdmeer/char-translation Highest Vendor pom name Character Translation High Vendor pom groupid de.vandermeer Highest Vendor pom artifactid char-translation Low Vendor pom description Set of translators for characters, HTML Elements, and their combinations. Medium Vendor jar package name de Low Product file name char-translation High Product pom groupid de.vandermeer Low Product jar package name vandermeer Low Product jar package name translation Low Product pom artifactid char-translation Highest Product pom name Character Translation High Product pom url vdmeer/char-translation High Product pom description Set of translators for characters, HTML Elements, and their combinations. Medium Version pom version 0.0.2 Highest Version file version 0.0.2 Highest
maven: de.vandermeer:char-translation:0.0.2 Confidence :High checker-compat-qual-2.0.0.jarDescription:
Checker Qual is the set of annotations (qualifiers) and supporting classes
used by the Checker Framework to type check Java source code. Please
see artifact:
org.checkerframework:checker
License:
GNU General Public License, version 2 (GPL2), with the classpath exception: http://www.gnu.org/software/classpath/license.html
The MIT License: http://opensource.org/licenses/MIT File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/checker-compat-qual-2.0.0.jar
MD5: b6fb2610dacd211a3e2c3d8af1b60d0f
SHA1: fc89b03860d11d6213d0154a62bcd1c2f69b9efa
SHA256: a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b
Evidence Type Source Name Value Confidence Vendor jar package name checkerframework Low Vendor pom name Checker Qual High Vendor file name checker-compat-qual High Vendor central groupid org.checkerframework Highest Vendor jar package name checker Low Vendor pom description Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker Low Vendor pom url http://checkerframework.org Highest Vendor Manifest implementation-url http://checkerframework.org/ Low Vendor pom groupid checkerframework Highest Vendor pom artifactid checker-compat-qual Low Product pom name Checker Qual High Product file name checker-compat-qual High Product jar package name checker Low Product pom groupid checkerframework Low Product pom artifactid checker-compat-qual Highest Product pom description Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker Low Product pom url http://checkerframework.org Medium Product Manifest implementation-url http://checkerframework.org/ Low Product central artifactid checker-compat-qual Highest Version central version 2.0.0 Highest Version Manifest Implementation-Version 2.0.0 High Version pom version 2.0.0 Highest Version file version 2.0.0 Highest
closure-compiler-v20130603.jarDescription:
Closure Compiler is a JavaScript optimizing compiler. It parses your
JavaScript, analyzes it, removes dead code and rewrites and minimizes
what's left. It also checks syntax, variable references, and types, and
warns about common JavaScript pitfalls. It is used in many of Google's
JavaScript apps, including Gmail, Google Web Search, Google Maps, and
Google Docs.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/closure-compiler-v20130603.jar
MD5: 49ce4295fcce117f5f242170ec48bd2e
SHA1: b150c1666154435f43bc4665e202dee7c3c95eb7
SHA256: 6ca35497d82bb61fc779676c508178f79a2457d1b71466c6bae2aa7612fe7975
Evidence Type Source Name Value Confidence Vendor pom description Closure Compiler is a JavaScript optimizing compiler. It parses your JavaScript, analyzes it, removes dead code and rewrites and minimizes what's left. It also checks syntax, variable references, and types, and warns about common JavaScript pitfalls. It is used in many of Google's JavaScript apps, including Gmail, Google Web Search, Google Maps, and Google Docs. Low Vendor jar package name jscomp Low Vendor jar package name google Low Vendor pom artifactid closure-compiler Low Vendor pom groupid google.javascript Highest Vendor jar package name javascript Low Vendor file name closure-compiler-v20130603 High Vendor pom name Closure Compiler High Vendor pom url http://code.google.com/p/closure-compiler/ Highest Vendor pom organization url http://www.google.com Medium Vendor pom organization name Google High Vendor central groupid com.google.javascript Highest Product pom description Closure Compiler is a JavaScript optimizing compiler. It parses your JavaScript, analyzes it, removes dead code and rewrites and minimizes what's left. It also checks syntax, variable references, and types, and warns about common JavaScript pitfalls. It is used in many of Google's JavaScript apps, including Gmail, Google Web Search, Google Maps, and Google Docs. Low Product pom name Closure Compiler High Product central artifactid closure-compiler Highest Product jar package name jscomp Low Product pom url http://code.google.com/p/closure-compiler/ Medium Product pom artifactid closure-compiler Highest Product jar package name javascript Low Product pom groupid google.javascript Low Product pom organization url http://www.google.com Low Product file name closure-compiler-v20130603 High Product pom organization name Google Low Version central version v20130603 Highest Version file version 20130603 Medium Version file name closure-compiler-v20130603 Medium Version pom version v20130603 Highest
Published Vulnerabilities CVE-2017-17689 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-310 Cryptographic Issues
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. Vulnerable Software & Versions: (show all )
commons-beanutils-1.7.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-beanutils-1.7.0.jarMD5: 0f18acf5fa857f9959675e14d901a7ceSHA1: 5675fd96b29656504b86029551973d60fb41339bSHA256: 24bcaa20ccbdc7c856ce0c0aea144566943403e2e9f27bd9779cda1d76823ef4
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor jar package name beanutils Low Vendor Manifest extension-name org.apache.commons.beanutils Medium Vendor pom artifactid commons-beanutils Low Vendor file name commons-beanutils High Vendor jar package name commons Low Vendor jar package name apache Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor central groupid commons-beanutils Highest Vendor pom groupid commons-beanutils Highest Product pom artifactid commons-beanutils Highest Product jar package name beanutils Low Product Manifest extension-name org.apache.commons.beanutils Medium Product file name commons-beanutils High Product jar package name commons Low Product Manifest specification-title Jakarta Commons Beanutils Medium Product central artifactid commons-beanutils Highest Product pom groupid commons-beanutils Low Product Manifest Implementation-Title org.apache.commons.beanutils High Version central version 1.7.0 Highest Version file version 1.7.0 Highest Version pom version 1.7.0 Highest
Published Vulnerabilities CVE-2014-0114 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1. Vulnerable Software & Versions: (show all )
commons-beanutils-core-1.8.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-beanutils-core-1.8.0.jarMD5: a33ba25ae637909a97a60ff1d1b38857SHA1: 175dc721f87e4bc5cc0573f990e28c3cf9117508SHA256: 9038c7ddc61d3d8089eb5a52a24b430a202617d57d2d344a93b68e4eafefefde
Evidence Type Source Name Value Confidence Vendor jar package name commons Low Vendor jar package name apache Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor pom name Commons BeanUtils Core High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom url http://commons.apache.org/beanutils/ Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor jar package name beanutils Low Vendor pom artifactid commons-beanutils-core Low Vendor file name commons-beanutils-core High Vendor central groupid commons-beanutils Highest Vendor pom groupid commons-beanutils Highest Product pom parent-artifactid apache Medium Product jar package name commons Low Product pom name Commons BeanUtils Core High Product pom parent-groupid org.apache Low Product central artifactid commons-beanutils-core Highest Product pom groupid commons-beanutils Low Product Manifest Implementation-Title Commons BeanUtils Core High Product jar package name beanutils Low Product Manifest specification-title Commons BeanUtils Core Medium Product file name commons-beanutils-core High Product pom artifactid commons-beanutils-core Highest Product pom url http://commons.apache.org/beanutils/ Medium Version central version 1.8.0 Highest Version file version 1.8.0 Highest Version pom version 1.8.0 Highest Version Manifest Implementation-Version 1.8.0 High
Published Vulnerabilities CVE-2014-0114 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1. Vulnerable Software & Versions: (show all )
commons-cli-1.2.jarDescription:
Commons CLI provides a simple API for presenting, processing and validating a command line interface.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-cli-1.2.jar
MD5: bfdcae1ff93f0c07d733f03bdce28c9e
SHA1: 2bf96b7aa8b611c177d329452af1dc933e14501c
SHA256: e7cd8951956d349b568b7ccfd4f5b2529a8c113e67c32b028f52ffda371259d9
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.cli Medium Vendor pom artifactid commons-cli Low Vendor file name commons-cli High Vendor manifest Bundle-Description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Vendor pom url http://commons.apache.org/cli/ Highest Vendor pom description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-cli Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Commons CLI High Vendor Manifest bundle-docurl http://commons.apache.org/cli/ Low Product Manifest bundle-symbolicname org.apache.commons.cli Medium Product pom artifactid commons-cli Highest Product file name commons-cli High Product manifest Bundle-Description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Product pom parent-artifactid commons-parent Medium Product pom description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Product Manifest specification-title Commons CLI Medium Product pom name Commons CLI High Product pom parent-groupid org.apache.commons Low Product pom url http://commons.apache.org/cli/ Medium Product pom groupid commons-cli Low Product Manifest Bundle-Name Commons CLI Medium Product Manifest bundle-docurl http://commons.apache.org/cli/ Low Product Manifest Implementation-Title Commons CLI High Version file version 1.2 Highest Version Manifest Implementation-Version 1.2 High Version pom version 1.2 Highest
maven: commons-cli:commons-cli:1.2 Confidence :High commons-codec-1.11.jarDescription:
The Apache Commons Codec package contains simple encoder and decoders for
various formats such as Base64 and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-codec-1.11.jar
MD5: 567159b1ae257a43e1391a8f59d24cfe
SHA1: 3acb4705652e16236558f0f4f2192cc33c3bd189
SHA256: e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor Manifest automatic-module-name org.apache.commons.codec Medium Vendor pom url http://commons.apache.org/proper/commons-codec/ Highest Vendor Manifest implementation-url http://commons.apache.org/proper/commons-codec/ Low Vendor pom groupid commons-codec Highest Vendor file name commons-codec High Vendor pom artifactid commons-codec Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id commons-codec Medium Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom name Apache Commons Codec High Vendor Manifest bundle-symbolicname org.apache.commons.codec Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product pom artifactid commons-codec Highest Product Manifest automatic-module-name org.apache.commons.codec Medium Product pom groupid commons-codec Low Product Manifest implementation-url http://commons.apache.org/proper/commons-codec/ Low Product file name commons-codec High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-codec/ Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Product pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product Manifest specification-title Apache Commons Codec Medium Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Codec High Product Manifest bundle-symbolicname org.apache.commons.codec Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Implementation-Title Apache Commons Codec High Product Manifest Bundle-Name Apache Commons Codec Medium Version Manifest Implementation-Version 1.11 High Version file version 1.11 Highest Version pom version 1.11 Highest
Related Dependencies commons-codec-1.11.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-codec-1.11.jar MD5: 567159b1ae257a43e1391a8f59d24cfe SHA1: 3acb4705652e16236558f0f4f2192cc33c3bd189 SHA256: e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d maven: commons-codec:commons-codec:1.11 Confidence :High commons-collections-3.2.2.jarDescription:
Types that extend and augment the Java Collections Framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-collections-3.2.2.jar
MD5: f54a8510f834a1a57166970bfc982e94
SHA1: 8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
SHA256: eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low Vendor pom artifactid commons-collections Low Vendor file name commons-collections High Vendor manifest Bundle-Description Types that extend and augment the Java Collections Framework. Medium Vendor pom url http://commons.apache.org/collections/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-collections Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))" Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://commons.apache.org/collections/ Low Vendor Manifest bundle-symbolicname org.apache.commons.collections Medium Vendor pom description Types that extend and augment the Java Collections Framework. Medium Vendor Manifest bundle-docurl http://commons.apache.org/collections/ Low Vendor pom name Apache Commons Collections High Product Manifest implementation-build tags/COLLECTIONS_3_2_2_RC3@r1714131; 2015-11-13 00:09:45+0100 Low Product file name commons-collections High Product manifest Bundle-Description Types that extend and augment the Java Collections Framework. Medium Product pom artifactid commons-collections Highest Product pom parent-artifactid commons-parent Medium Product Manifest specification-title Apache Commons Collections Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.3))" Low Product Manifest Bundle-Name Apache Commons Collections Medium Product Manifest implementation-url http://commons.apache.org/collections/ Low Product Manifest Implementation-Title Apache Commons Collections High Product pom parent-groupid org.apache.commons Low Product Manifest bundle-symbolicname org.apache.commons.collections Medium Product pom description Types that extend and augment the Java Collections Framework. Medium Product Manifest bundle-docurl http://commons.apache.org/collections/ Low Product pom name Apache Commons Collections High Product pom url http://commons.apache.org/collections/ Medium Product pom groupid commons-collections Low Version file version 3.2.2 Highest Version Manifest Implementation-Version 3.2.2 High Version pom version 3.2.2 Highest
cpe: cpe:/a:apache:commons_collections:3.2.2 Confidence :Low suppress maven: commons-collections:commons-collections:3.2.2 Confidence :High commons-collections4-4.1.jarDescription:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-collections4-4.1.jar
MD5: 45af6a8e5b51d5945de6c7411e290bd1
SHA1: a4cf4688fe1c7e3a63aa636cc96d013af537768e
SHA256: b1fe8b5968b57d8465425357ed2d9dc695504518bed2df5b565c4b8e68c1c8a5
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid apache.commons Highest Vendor Manifest implementation-build tags/COLLECTIONS_4_1_RC2@r1716550; 2015-11-25 22:53:13+0100 Low Vendor Manifest bundle-symbolicname org.apache.commons.collections4 Medium Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Vendor manifest Bundle-Description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Vendor pom artifactid commons-collections4 Low Vendor pom url http://commons.apache.org/proper/commons-collections/ Highest Vendor pom name Apache Commons Collections High Vendor file name commons-collections4 High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest implementation-build tags/COLLECTIONS_4_1_RC2@r1716550; 2015-11-25 22:53:13+0100 Low Product pom url http://commons.apache.org/proper/commons-collections/ Medium Product pom parent-artifactid commons-parent Medium Product Manifest bundle-symbolicname org.apache.commons.collections4 Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Product manifest Bundle-Description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Product Manifest specification-title Apache Commons Collections Medium Product pom artifactid commons-collections4 Highest Product Manifest Bundle-Name Apache Commons Collections Medium Product pom description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Product Manifest Implementation-Title Apache Commons Collections High Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Collections High Product file name commons-collections4 High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Version file version 4.1 Highest Version Manifest Implementation-Version 4.1 High Version pom version 4.1 Highest
Related Dependencies commons-collections4-4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-collections4-4.1.jar MD5: 45af6a8e5b51d5945de6c7411e290bd1 SHA1: a4cf4688fe1c7e3a63aa636cc96d013af537768e SHA256: b1fe8b5968b57d8465425357ed2d9dc695504518bed2df5b565c4b8e68c1c8a5 maven: org.apache.commons:commons-collections4:4.1 Confidence :Highcpe: cpe:/a:apache:commons_collections:4.1 Confidence :Low suppress commons-compress-1.16.1.jarDescription:
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-compress-1.16.1.jar
MD5: 3409638d6b6bd23042eeac5cd97e256c
SHA1: 7b5cdabadb4cf12f5ee0f801399e70635583193f
SHA256: a20d8e45315abbe07faf952e095817b9925f38c4fc39e8a211c7d072702e97eb
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid apache.commons Highest Vendor file name commons-compress High Vendor pom description
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest implementation-build UNKNOWN@rb5204113485bf5961c5b09a289c99995974895ff; 2018-02-07 06:37:54+0000 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-compress/ Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom name Apache Commons Compress High Vendor Manifest extension-name org.apache.commons.compress Medium Vendor pom url http://commons.apache.org/proper/commons-compress/ Highest Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.commons.compress Medium Vendor pom artifactid commons-compress Low Vendor manifest Bundle-Description Apache Commons Compress software defines an API for working withcompression and archive formats. These include: bzip2, gzip, pack200,lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom url http://commons.apache.org/proper/commons-compress/ Medium Product pom parent-artifactid commons-parent Medium Product file name commons-compress High Product pom description
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Product Manifest implementation-build UNKNOWN@rb5204113485bf5961c5b09a289c99995974895ff; 2018-02-07 06:37:54+0000 Low Product Manifest implementation-url http://commons.apache.org/proper/commons-compress/ Low Product Manifest bundle-docurl http://commons.apache.org/proper/commons-compress/ Low Product pom name Apache Commons Compress High Product Manifest extension-name org.apache.commons.compress Medium Product Manifest automatic-module-name org.apache.commons.compress Medium Product Manifest bundle-symbolicname org.apache.commons.compress Medium Product pom groupid apache.commons Low Product Manifest Implementation-Title Apache Commons Compress High Product pom parent-groupid org.apache.commons Low Product Manifest Bundle-Name Apache Commons Compress Medium Product manifest Bundle-Description Apache Commons Compress software defines an API for working withcompression and archive formats. These include: bzip2, gzip, pack200,lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Version file version 1.16.1 Highest Version Manifest Implementation-Version 1.16.1 High Version pom version 1.16.1 Highest
cpe: cpe:/a:apache:commons-compress:1.16.1 Confidence :Low suppress maven: org.apache.commons:commons-compress:1.16.1 Confidence :High commons-configuration-1.6.jarDescription:
Tools to assist in the reading of configuration/preferences files in
various formats
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-configuration-1.6.jar
MD5: b099d9f9b4b99071cc52b259308df69a
SHA1: 32cadde23955d7681b0d94a2715846d20b425235
SHA256: 46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Tools to assist in the reading of configuration/preferences files in various formats Medium Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-configuration Low Vendor file name commons-configuration High Vendor Manifest bundle-docurl http://commons.apache.org/configuration/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Commons Configuration High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid commons-configuration Highest Vendor pom parent-artifactid commons-parent Low Vendor Manifest bundle-symbolicname org.apache.commons.configuration Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom url http://commons.apache.org/configuration/ Highest Vendor pom description Tools to assist in the reading of configuration/preferences files in various formats Low Product Manifest specification-title Commons Configuration Medium Product manifest Bundle-Description Tools to assist in the reading of configuration/preferences files in various formats Medium Product pom url http://commons.apache.org/configuration/ Medium Product pom artifactid commons-configuration Highest Product file name commons-configuration High Product Manifest bundle-docurl http://commons.apache.org/configuration/ Low Product Manifest Bundle-Name Commons Configuration Medium Product Manifest Implementation-Title Commons Configuration High Product pom parent-artifactid commons-parent Medium Product pom name Commons Configuration High Product Manifest bundle-symbolicname org.apache.commons.configuration Medium Product pom parent-groupid org.apache.commons Low Product pom groupid commons-configuration Low Product pom description Tools to assist in the reading of configuration/preferences files in various formats Low Version Manifest Implementation-Version 1.6 High Version file version 1.6 Highest Version pom version 1.6 Highest
maven: commons-configuration:commons-configuration:1.6 Confidence :High commons-daemon-1.0.13.jarDescription:
Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-daemon-1.0.13.jar
MD5: 686f1a2cc85f8f4e939bd3cd28c9720b
SHA1: 750856a1fdb3ddf721ccf73c3518e4211cffc3a3
SHA256: fd63b583fd3e8baeae22efacbd5a4f91c1fd97f56248e62e2615efa7b81daeaa
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code. Low Vendor pom groupid commons-daemon Highest Vendor pom description Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code. Low Vendor pom url http://commons.apache.org/daemon/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom name Commons Daemon High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.commons.daemon Medium Vendor Manifest bundle-docurl http://commons.apache.org/daemon/ Low Vendor file name commons-daemon High Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2013-02-06 19:20:07+0100 Low Vendor pom artifactid commons-daemon Low Product pom groupid commons-daemon Low Product manifest Bundle-Description Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code. Low Product pom description Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code. Low Product pom parent-artifactid commons-parent Medium Product pom artifactid commons-daemon Highest Product pom name Commons Daemon High Product Manifest Implementation-Title Commons Daemon High Product pom parent-groupid org.apache.commons Low Product Manifest Bundle-Name Commons Daemon Medium Product Manifest bundle-symbolicname org.apache.commons.daemon Medium Product Manifest specification-title Commons Daemon Medium Product Manifest bundle-docurl http://commons.apache.org/daemon/ Low Product pom url http://commons.apache.org/daemon/ Medium Product file name commons-daemon High Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2013-02-06 19:20:07+0100 Low Version file version 1.0.13 Highest Version Manifest Implementation-Version 1.0.13 High Version pom version 1.0.13 Highest
cpe: cpe:/a:apache:apache_commons_daemon:1.0.13 Confidence :Low suppress maven: commons-daemon:commons-daemon:1.0.13 Confidence :High commons-digester-1.8.jarDescription:
The Digester package lets you configure an XML->Java object mapping module
which triggers certain actions called rules whenever a particular
pattern of nested XML elements is recognized. License:
The Apache Software License, Version 2.0: /LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-digester-1.8.jar
MD5: cf89c593f0378e9509a06fce7030aeba
SHA1: dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e
SHA256: 05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56
Evidence Type Source Name Value Confidence Vendor jar package name digester Low Vendor file name commons-digester High Vendor pom description The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized. Low Vendor pom name Digester High Vendor jar package name commons Low Vendor jar package name apache Low Vendor pom organization url http://jakarta.apache.org Medium Vendor Manifest extension-name commons-digester Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor central groupid commons-digester Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid commons-digester Highest Vendor pom artifactid commons-digester Low Vendor pom organization name The Apache Software Foundation High Vendor pom url http://jakarta.apache.org/commons/digester/ Highest Product jar package name digester Low Product file name commons-digester High Product Manifest Implementation-Title org.apache.commons.digester High Product pom description The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized. Low Product pom name Digester High Product jar package name commons Low Product central artifactid commons-digester Highest Product pom organization name The Apache Software Foundation Low Product Manifest specification-title Rule based XML->Java object mapping module Medium Product Manifest extension-name commons-digester Medium Product pom organization url http://jakarta.apache.org Low Product pom artifactid commons-digester Highest Product pom url http://jakarta.apache.org/commons/digester/ Medium Product pom groupid commons-digester Low Version central version 1.8 Highest Version Manifest Implementation-Version 1.8 High Version pom version 1.8 Highest Version file version 1.8 Highest
commons-httpclient-3.1.jarDescription:
The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily. License:
Apache License: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-httpclient-3.1.jar
MD5: 8ad8c9229ef2d59ab9f59f7050e846a5
SHA1: 964cd74171f427720480efdec40a7c7f6e58426a
SHA256: dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443
Evidence Type Source Name Value Confidence Vendor pom artifactid commons-httpclient Low Vendor file name commons-httpclient High Vendor jar package name commons Low Vendor pom url http://jakarta.apache.org/httpcomponents/httpclient-3.x/ Highest Vendor jar package name apache Low Vendor manifest: org/apache/commons/httpclient Implementation-Vendor Apache Software Foundation Medium Vendor pom organization name Apache Software Foundation High Vendor central groupid commons-httpclient Highest Vendor pom name HttpClient High Vendor jar package name httpclient Low Vendor pom description The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily. Low Vendor pom organization url http://jakarta.apache.org/ Medium Vendor pom groupid commons-httpclient Highest Product manifest: org/apache/commons/httpclient Implementation-Title org.apache.commons.httpclient Medium Product file name commons-httpclient High Product jar package name commons Low Product pom groupid commons-httpclient Low Product central artifactid commons-httpclient Highest Product pom organization url http://jakarta.apache.org/ Low Product pom name HttpClient High Product jar package name httpclient Low Product pom url http://jakarta.apache.org/httpcomponents/httpclient-3.x/ Medium Product pom artifactid commons-httpclient Highest Product pom description The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily. Low Product pom organization name Apache Software Foundation Low Product manifest: org/apache/commons/httpclient Specification-Title Jakarta Commons HttpClient Medium Version central version 3.1 Highest Version file version 3.1 Highest Version pom version 3.1 Highest
Related Dependencies commons-httpclient-3.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-httpclient-3.1.jar MD5: 8ad8c9229ef2d59ab9f59f7050e846a5 SHA1: 964cd74171f427720480efdec40a7c7f6e58426a SHA256: dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443 commons-io-2.4.jarDescription:
The Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-io-2.4.jar
MD5: 7f97854dc04c119d461fed14f5d8bb96
SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad
SHA256: cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-io Low Vendor manifest Bundle-Description The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Vendor pom description
The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Vendor file name commons-io High Vendor pom name Commons IO High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-io Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-docurl http://commons.apache.org/io/ Low Vendor pom url http://commons.apache.org/io/ Highest Vendor Manifest bundle-symbolicname org.apache.commons.io Medium Vendor Manifest implementation-build tags/2.4-RC2@r1349569; 2012-06-12 18:18:20-0400 Low Product Manifest specification-title Commons IO Medium Product pom artifactid commons-io Highest Product manifest Bundle-Description The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Product pom description
The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Product file name commons-io High Product pom parent-artifactid commons-parent Medium Product pom name Commons IO High Product pom url http://commons.apache.org/io/ Medium Product Manifest Bundle-Name Commons IO Medium Product Manifest Implementation-Title Commons IO High Product pom parent-groupid org.apache.commons Low Product Manifest bundle-docurl http://commons.apache.org/io/ Low Product pom groupid commons-io Low Product Manifest bundle-symbolicname org.apache.commons.io Medium Product Manifest implementation-build tags/2.4-RC2@r1349569; 2012-06-12 18:18:20-0400 Low Version file version 2.4 Highest Version Manifest Implementation-Version 2.4 High Version pom version 2.4 Highest
Related Dependencies commons-io-2.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-io-2.4.jar MD5: 7f97854dc04c119d461fed14f5d8bb96 SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad SHA256: cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581 commons-io-2.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-io-2.4.jar MD5: 7f97854dc04c119d461fed14f5d8bb96 SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad SHA256: cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581 commons-io-2.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-io-2.4.jar MD5: 7f97854dc04c119d461fed14f5d8bb96 SHA1: b1b6ea3b7e4aa4f492509a4952029cd8e48019ad SHA256: cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581 maven: commons-io:commons-io:2.4 Confidence :High commons-jexl-2.1.1.jarDescription:
The Commons Jexl library is an implementation of the JSTL Expression Language with extensions. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-jexl-2.1.1.jar
MD5: 4ad8f5c161dd3a50e190334555675db9
SHA1: 6ecc181debade00230aa1e17666c4ea0371beaaa
SHA256: 03c9a9fae5da78ce52c0bf24467cc37355b7e23196dff4839e2c0ff018a01306
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.jexl Medium Vendor pom groupid apache.commons Highest Vendor pom url http://commons.apache.org/jexl/ Highest Vendor pom description The Commons Jexl library is an implementation of the JSTL Expression Language with extensions. Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest implementation-build COMMONS_JEXL_2_1_1-RC1@r1220732; 2011-12-19 14:53:11+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Commons JEXL High Vendor file name commons-jexl High Vendor pom artifactid commons-jexl Low Vendor manifest Bundle-Description The Commons Jexl library is an implementation of the JSTL Expression Language with extensions. Medium Vendor Manifest bundle-docurl http://commons.apache.org/jexl/ Low Product pom artifactid commons-jexl Highest Product Manifest bundle-symbolicname org.apache.commons.jexl Medium Product pom description The Commons Jexl library is an implementation of the JSTL Expression Language with extensions. Medium Product pom parent-artifactid commons-parent Medium Product Manifest specification-title Commons JEXL Medium Product Manifest implementation-build COMMONS_JEXL_2_1_1-RC1@r1220732; 2011-12-19 14:53:11+0000 Low Product pom name Commons JEXL High Product file name commons-jexl High Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom url http://commons.apache.org/jexl/ Medium Product Manifest Implementation-Title Commons JEXL High Product manifest Bundle-Description The Commons Jexl library is an implementation of the JSTL Expression Language with extensions. Medium Product Manifest Bundle-Name Commons JEXL Medium Product Manifest bundle-docurl http://commons.apache.org/jexl/ Low Version file version 2.1.1 Highest Version Manifest Implementation-Version 2.1.1 High Version pom version 2.1.1 Highest
maven: org.apache.commons:commons-jexl:2.1.1 Confidence :High commons-lang-2.6.jarDescription:
Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
SHA256: 50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid commons-lang Highest Vendor manifest Bundle-Description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor pom name Commons Lang High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom url http://commons.apache.org/lang/ Highest Vendor file name commons-lang High Vendor pom artifactid commons-lang Low Vendor Manifest bundle-docurl http://commons.apache.org/lang/ Low Vendor pom description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor Manifest bundle-symbolicname org.apache.commons.lang Medium Product pom url http://commons.apache.org/lang/ Medium Product manifest Bundle-Description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product pom artifactid commons-lang Highest Product pom name Commons Lang High Product pom parent-artifactid commons-parent Medium Product Manifest Bundle-Name Commons Lang Medium Product Manifest Implementation-Title Commons Lang High Product pom parent-groupid org.apache.commons Low Product file name commons-lang High Product Manifest specification-title Commons Lang Medium Product Manifest bundle-docurl http://commons.apache.org/lang/ Low Product pom description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product pom groupid commons-lang Low Product Manifest bundle-symbolicname org.apache.commons.lang Medium Version Manifest Implementation-Version 2.6 High Version file version 2.6 Highest Version pom version 2.6 Highest
Related Dependencies commons-lang-2.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-lang-2.6.jar MD5: 4d5c1693079575b362edf41500630bbd SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2 SHA256: 50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c maven: commons-lang:commons-lang:2.6 Confidence :High commons-lang3-3.7.jarDescription:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-lang3-3.7.jar
MD5: f1df5623d78c432b7c3d58ff491e1801
SHA1: 557edd918fd41f9260963583ebf5a61a43a6b423
SHA256: 6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name org.apache.commons.lang3 Medium Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor pom groupid apache.commons Highest Vendor pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor file name commons-lang3 High Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Vendor manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Low Vendor pom parent-artifactid commons-parent Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-lang/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom url http://commons.apache.org/proper/commons-lang/ Highest Vendor Manifest Implementation-Vendor-Id org.apache.commons Medium Vendor pom name Apache Commons Lang High Product Manifest automatic-module-name org.apache.commons.lang3 Medium Product pom artifactid commons-lang3 Highest Product Manifest Implementation-Title Apache Commons Lang High Product Manifest Bundle-Name Apache Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product file name commons-lang3 High Product Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-lang/ Medium Product Manifest specification-title Apache Commons Lang Medium Product manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product Manifest implementation-url http://commons.apache.org/proper/commons-lang/ Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name Apache Commons Lang High Version file version 3.7 Highest Version Manifest Implementation-Version 3.7 High Version pom version 3.7 Highest
maven: org.apache.commons:commons-lang3:3.7 Confidence :High commons-logging-1.2.jarDescription:
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid commons-logging Highest Vendor Manifest implementation-build tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200 Low Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor manifest Bundle-Description Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Vendor Manifest bundle-symbolicname org.apache.commons.logging Medium Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid commons-logging Low Vendor pom url http://commons.apache.org/proper/commons-logging/ Highest Vendor pom name Apache Commons Logging High Vendor file name commons-logging High Vendor pom description Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Product pom url http://commons.apache.org/proper/commons-logging/ Medium Product Manifest implementation-build tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200 Low Product pom parent-artifactid commons-parent Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Product Manifest specification-title Apache Commons Logging Medium Product manifest Bundle-Description Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Product Manifest bundle-symbolicname org.apache.commons.logging Medium Product pom artifactid commons-logging Highest Product Manifest Implementation-Title Apache Commons Logging High Product Manifest Bundle-Name Apache Commons Logging Medium Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Logging High Product file name commons-logging High Product pom groupid commons-logging Low Product pom description Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Version file version 1.2 Highest Version Manifest Implementation-Version 1.2 High Version pom version 1.2 Highest
Related Dependencies commons-logging-1.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-logging-1.2.jar MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00 SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686 SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 commons-logging-1.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-logging-1.2.jar MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00 SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686 SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 commons-logging-1.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/commons-logging-1.2.jar MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00 SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686 SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 commons-logging-1.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/commons-logging-1.2.jar MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00 SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686 SHA256: daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636 maven: commons-logging:commons-logging:1.2 Confidence :High commons-math3-3.1.1.jarDescription:
The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-math3-3.1.1.jar
MD5: 505ece0d2261b037101e6c4bdf541ca7
SHA1: 6719d757a98ff24a83d9d727bef9cec83f59b6e1
SHA256: a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor file name commons-math3 High Vendor Manifest bundle-docurl http://commons.apache.org/math/ Low Vendor pom artifactid commons-math3 Low Vendor pom name Commons Math High Vendor manifest Bundle-Description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor pom groupid apache.commons Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor pom url http://commons.apache.org/math/ Highest Vendor Manifest implementation-build tags/MATH_3_1_1_RC1@r1430928; 2013-01-09 17:13:33+0100 Low Vendor Manifest bundle-symbolicname org.apache.commons.math3 Medium Product file name commons-math3 High Product Manifest Implementation-Title Commons Math High Product Manifest specification-title Commons Math Medium Product Manifest bundle-docurl http://commons.apache.org/math/ Low Product pom url http://commons.apache.org/math/ Medium Product pom name Commons Math High Product manifest Bundle-Description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product pom parent-artifactid commons-parent Medium Product pom artifactid commons-math3 Highest Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product Manifest Bundle-Name Commons Math Medium Product Manifest implementation-build tags/MATH_3_1_1_RC1@r1430928; 2013-01-09 17:13:33+0100 Low Product Manifest bundle-symbolicname org.apache.commons.math3 Medium Version Manifest Implementation-Version 3.1.1 High Version file version 3.1.1 Highest Version pom version 3.1.1 Highest
maven: org.apache.commons:commons-math3:3.1.1 Confidence :High commons-net-3.1.jarDescription:
Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/commons-net-3.1.jar
MD5: 23c94d51e72f341fb412d6a015e16313
SHA1: 2298164a7c2484406f2aa5ac85b205d39019896f
SHA256: 34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description Apache Commons Net library contains a collection of network utilities and protocol implementations.Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Low Vendor pom name Commons Net High Vendor Manifest bundle-docurl http://commons.apache.org/net/ Low Vendor Manifest implementation-build tags/NET_3_1_RC2@r1244108; 2012-02-14 17:45:12+0000 Low Vendor pom url http://commons.apache.org/net/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid commons-net Highest Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid commons-net Low Vendor file name commons-net High Vendor pom description
Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Low Vendor Manifest bundle-symbolicname org.apache.commons.net Medium Product manifest Bundle-Description Apache Commons Net library contains a collection of network utilities and protocol implementations.Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Low Product pom name Commons Net High Product Manifest bundle-docurl http://commons.apache.org/net/ Low Product Manifest specification-title Commons Net Medium Product Manifest implementation-build tags/NET_3_1_RC2@r1244108; 2012-02-14 17:45:12+0000 Low Product pom parent-artifactid commons-parent Medium Product Manifest Bundle-Name Commons Net Medium Product pom parent-groupid org.apache.commons Low Product file name commons-net High Product pom description
Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois Low Product pom url http://commons.apache.org/net/ Medium Product pom artifactid commons-net Highest Product Manifest Implementation-Title Commons Net High Product pom groupid commons-net Low Product Manifest bundle-symbolicname org.apache.commons.net Medium Version file version 3.1 Highest Version Manifest Implementation-Version 3.1 High Version pom version 3.1 Highest
maven: commons-net:commons-net:3.1 Confidence :High crawler-commons-0.10.jarDescription:
crawler-commons is a set of reusable Java components that implement
functionality common to any web crawler.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/crawler-commons-0.10.jar
MD5: 9008c9876d7ad7e8a39a915120efe867
SHA1: 40a3cb267fd85959902fbbf4a652b6131bc06f8b
SHA256: 77dcdc049b1b9481e5a2e4adee0ce0bb70c806b8be03cad72a04df754178490c
Evidence Type Source Name Value Confidence Vendor pom organization name Crawler-Commons High Vendor pom organization url http://github.com/crawler-commons Medium Vendor pom description crawler-commons is a set of reusable Java components that implement functionality common to any web crawler. Low Vendor file name crawler-commons High Vendor pom groupid github.crawler-commons Highest Vendor pom artifactid crawler-commons Low Vendor jar package name crawlercommons Low Vendor pom name Crawler-commons High Vendor pom url crawler-commons/crawler-commons Highest Product pom organization name Crawler-Commons Low Product pom artifactid crawler-commons Highest Product pom description crawler-commons is a set of reusable Java components that implement functionality common to any web crawler. Low Product file name crawler-commons High Product pom organization url http://github.com/crawler-commons Low Product pom url crawler-commons/crawler-commons High Product pom groupid github.crawler-commons Low Product pom name Crawler-commons High Version pom version 0.10 Highest Version file version 0.10 Highest
maven: com.github.crawler-commons:crawler-commons:0.10 Confidence :High curator-client-2.7.1.jarDescription:
Low-level API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/curator-client-2.7.1.jar
MD5: 3b43933c18d1dcf15f88db73ee646396
SHA1: a591dfc085db3e9d4d480381cc7e6ae8a26b34af
SHA256: 949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname curator-client Medium Vendor file name curator-client High Vendor manifest Bundle-Description Low-level API Medium Vendor pom groupid apache.curator Highest Vendor pom name Curator Client High Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor pom parent-groupid org.apache.curator Medium Vendor pom artifactid curator-client Low Vendor pom description Low-level API Medium Vendor pom parent-artifactid apache-curator Low Product Manifest bundle-symbolicname curator-client Medium Product file name curator-client High Product pom groupid apache.curator Low Product manifest Bundle-Description Low-level API Medium Product pom name Curator Client High Product Manifest bundle-docurl http://www.apache.org/ Low Product pom artifactid curator-client Highest Product pom parent-artifactid apache-curator Medium Product Manifest Bundle-Name Curator Client Medium Product pom parent-groupid org.apache.curator Low Product pom description Low-level API Medium Version pom version 2.7.1 Highest Version file version 2.7.1 Highest
maven: org.apache.curator:curator-client:2.7.1 Confidence :High curator-framework-2.7.1.jarDescription:
High-level API that greatly simplifies using ZooKeeper. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/curator-framework-2.7.1.jar
MD5: 35bff30d2a79a8b0731269604b1327ee
SHA1: 8c7b1eeb78e43bb91ea737111ba3dec0512be876
SHA256: a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb
Evidence Type Source Name Value Confidence Vendor file name curator-framework High Vendor Manifest bundle-symbolicname curator-framework Medium Vendor pom name Curator Framework High Vendor pom groupid apache.curator Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor pom parent-groupid org.apache.curator Medium Vendor manifest Bundle-Description High-level API that greatly simplifies using ZooKeeper. Medium Vendor pom parent-artifactid apache-curator Low Vendor pom artifactid curator-framework Low Vendor pom description High-level API that greatly simplifies using ZooKeeper. Medium Product file name curator-framework High Product Manifest bundle-symbolicname curator-framework Medium Product pom groupid apache.curator Low Product pom name Curator Framework High Product Manifest bundle-docurl http://www.apache.org/ Low Product manifest Bundle-Description High-level API that greatly simplifies using ZooKeeper. Medium Product pom artifactid curator-framework Highest Product Manifest Bundle-Name Curator Framework Medium Product pom parent-artifactid apache-curator Medium Product pom parent-groupid org.apache.curator Low Product pom description High-level API that greatly simplifies using ZooKeeper. Medium Version pom version 2.7.1 Highest Version file version 2.7.1 Highest
cpe: cpe:/a:apache:zookeeper:2.7.1 Confidence :Low suppress maven: org.apache.curator:curator-framework:2.7.1 Confidence :High Published Vulnerabilities CVE-2014-0085 suppress
Severity:Low CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-255 Credentials Management
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log. Vulnerable Software & Versions: (show all )
CVE-2016-5017 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string. Vulnerable Software & Versions: (show all )
CVE-2018-8012 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-285 Improper Authorization
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader. Vulnerable Software & Versions: (show all )
curator-recipes-2.7.1.jarDescription:
All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/curator-recipes-2.7.1.jar
MD5: 156ad30fb9995b072175ae60fbb352a5
SHA1: a2c180efc6a38a4f8c9197eb35bb4eb5716cd2fa
SHA256: ce122f137e36268e30082bf1565c51d874ca926801be3ca73b3c0d522b0dfe2c
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname curator-recipes Medium Vendor pom name Curator Recipes High Vendor file name curator-recipes High Vendor pom groupid apache.curator Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor pom parent-groupid org.apache.curator Medium Vendor pom description All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). Medium Vendor manifest Bundle-Description All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). Medium Vendor pom artifactid curator-recipes Low Vendor pom parent-artifactid apache-curator Low Product Manifest bundle-symbolicname curator-recipes Medium Product pom name Curator Recipes High Product file name curator-recipes High Product pom groupid apache.curator Low Product Manifest Bundle-Name Curator Recipes Medium Product Manifest bundle-docurl http://www.apache.org/ Low Product pom description All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). Medium Product manifest Bundle-Description All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). Medium Product pom parent-artifactid apache-curator Medium Product pom parent-groupid org.apache.curator Low Product pom artifactid curator-recipes Highest Version pom version 2.7.1 Highest Version file version 2.7.1 Highest
maven: org.apache.curator:curator-recipes:2.7.1 Confidence :High cxf-core-3.1.15.jarDescription:
Apache CXF Core License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-core-3.1.15.jar
MD5: 44f7c10b757cb519794fad1a7101e836
SHA1: 5ce359b4a4da2b0bb412cce501e57cbc256d6602
SHA256: 63caaff48adcdf821ae66bf54182f1220762194fe1d75b8ed718dbfb6cdf5352
Evidence Type Source Name Value Confidence Vendor Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Vendor pom artifactid cxf-core Low Vendor Manifest bundle-docurl http://cxf.apache.org Low Vendor pom description Apache CXF Core Medium Vendor file name cxf-core High Vendor pom url http://cxf.apache.org Highest Vendor pom name Apache CXF Core High Vendor pom parent-groupid org.apache.cxf Medium Vendor Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor manifest Bundle-Description Apache CXF Core Medium Vendor pom groupid apache.cxf Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-artifactid cxf-parent Low Product Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Product Manifest bundle-docurl http://cxf.apache.org Low Product pom description Apache CXF Core Medium Product file name cxf-core High Product pom parent-groupid org.apache.cxf Low Product pom name Apache CXF Core High Product pom artifactid cxf-core Highest Product pom parent-artifactid cxf-parent Medium Product Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Product manifest Bundle-Description Apache CXF Core Medium Product pom url http://cxf.apache.org Medium Product Manifest Bundle-Name Apache CXF Core Medium Product pom groupid apache.cxf Low Version Manifest Implementation-Version 3.1.15 High Version file version 3.1.15 Highest Version pom version 3.1.15 Highest
Related Dependencies cxf-rt-ws-addr-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-ws-addr-3.1.15.jar MD5: 4bd994ef2d7fa58562e01795de0b1f95 SHA1: 5556ce068f986dd0a5d221f34e5382e593c4845d SHA256: a734282d6ff1f53b32b78e6c4d026590d857169cfa37e59c3db78c3b97a98172 cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-transports-http-jetty-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-transports-http-jetty-3.1.15.jar MD5: 7b8a83ddfa3dcacaf75d6546641e1795 SHA1: 3f88090d24bf43dd31765adefe8458c806203d51 SHA256: 79f087900077524088cc3f1fa6141a9eec2648f4d498500d0cc3419f5bf04f8b cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-frontend-jaxrs-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-frontend-jaxrs-3.1.15.jar MD5: 8532fd390daf981eb1a034b7bd6a7a12 SHA1: cff8490d2f527714ba543026d30a2251a61598ad SHA256: fa02d5bc9b68ac467d25e06e866dd4eb89176c990b64c4bb18829d71dac15c31 cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-databinding-jaxb-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-databinding-jaxb-3.1.15.jar MD5: 57f0ffc4262dd5e44c7ece172f3cee91 SHA1: 7f7265297aa8cbc3c55a38d5658514fa5931bebd SHA256: 5ce52466555fac014785e22827c85522b184e5becd3bb8ff33091fefad3b6fd5 cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-ws-policy-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-ws-policy-3.1.15.jar MD5: c0f54f1d687d4535458d6966d59653c2 SHA1: 78bf5cbca721f51da90ecd5a11db811c16747935 SHA256: f085dbe193d6740652e2ded492e45a4db688c03fed0f72efaf9eac03f4e43188 cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-wsdl-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-wsdl-3.1.15.jar MD5: 94de211261057bc7f08b7fc189438e52 SHA1: cb088e3a76b0bb77c33443832cc2d7ba9863214c SHA256: 5476de058191d84452609645ad8f695a08a71b2008a8704a06d1a707e59c6a4b cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-bindings-xml-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-bindings-xml-3.1.15.jar MD5: a789ad1fde86577ff965026cab928988 SHA1: 31e93dcd6d88f43a62891a651a86841ac95ffdf2 SHA256: 4f85f38655025c2263863661eacfc12343d3a09fd682a6b2297cc2df48214f7d cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-transports-http-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-transports-http-3.1.15.jar MD5: 9b14bc9836d6dd7b1114c38e6e8be3b0 SHA1: 54f1572a7fed6aa5a6242871b22a2c8b4064c6c6 SHA256: 71c32661f29e6689da3b77a28d76e508515b7329e2204e583193949f546e432b cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-bindings-soap-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-bindings-soap-3.1.15.jar MD5: 9f25877226b60bc371f803add1c5d085 SHA1: 0db45f4ebffc7ffbd649d1d6afcb4393b2aa8bcd SHA256: f1fdf0f91d2f510d0f59bd61bea635d2c8145310a620b9301f2cb00cb0e28fff cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-frontend-jaxws-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-frontend-jaxws-3.1.15.jar MD5: 3a3a0791b346fbe67030282507d64b00 SHA1: 593f7d0cf351c84f15654ee32a0881979ecc6043 SHA256: 93960bdc5b73a51e3a9024b02427e0809e0e307b0dac1e92098ae95fa28ba0db cpe: cpe:/a:apache:cxf:3.1.15 cxf-rt-frontend-simple-3.1.15.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/cxf-rt-frontend-simple-3.1.15.jar MD5: 1cdcc88a330bb4a66ec94367bdb8524f SHA1: 79dc08ad09f360a0a9eb27f97ca0c614af6c6b01 SHA256: 720597d9c1475cdc8cbbc9513a8927d113104af052d81b2d095b6f2702740ac3 cpe: cpe:/a:apache:cxf:3.1.15 Published Vulnerabilities CVE-2018-8039 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-254 7PK - Security Features
It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks. Vulnerable Software & Versions: (show all )
dom4j-1.6.1.jarDescription:
dom4j: the flexible XML framework for Java File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/dom4j-1.6.1.jarMD5: 4d8f51d3fe3900efc6e395be48030d6dSHA1: 5d3ccc056b6f056dbf0dddfdf43894b9065a8f94SHA256: 593552ffea3c5823c6602478b5002a7c525fd904a3c44f1abe4065c22edfac73
Evidence Type Source Name Value Confidence Vendor pom artifactid dom4j Low Vendor pom parent-groupid org.zenframework.z8.dependencies Medium Vendor file name dom4j High Vendor Manifest specification-vendor MetaStuff Ltd. Low Vendor pom groupid zenframework.z8.dependencies.commons Highest Vendor pom name Zenframework Z8 Dependencies - Commons - dom4j-1.6.1 High Vendor pom organization url http://sourceforge.net/projects/dom4j Medium Vendor pom name dom4j High Vendor central groupid dom4j High Vendor Manifest Implementation-Vendor MetaStuff Ltd. High Vendor central groupid org.zenframework.z8.dependencies.commons High Vendor pom description dom4j: the flexible XML framework for Java Medium Vendor pom artifactid dom4j-1.6.1 Low Vendor pom parent-artifactid z8-dependencies Low Vendor pom url http://dom4j.org Highest Vendor Manifest extension-name dom4j Medium Vendor jar package name dom4j Low Vendor pom groupid dom4j Highest Vendor pom organization name MetaStuff Ltd. High Product pom organization name MetaStuff Ltd. Low Product Manifest specification-title dom4j : XML framework for Java Medium Product Manifest Implementation-Title org.dom4j High Product file name dom4j High Product central artifactid dom4j-1.6.1 High Product pom parent-groupid org.zenframework.z8.dependencies Low Product pom url http://dom4j.org Medium Product pom name Zenframework Z8 Dependencies - Commons - dom4j-1.6.1 High Product pom groupid dom4j Low Product pom name dom4j High Product pom artifactid dom4j-1.6.1 Highest Product pom groupid zenframework.z8.dependencies.commons Low Product pom description dom4j: the flexible XML framework for Java Medium Product pom organization url http://sourceforge.net/projects/dom4j Low Product central artifactid dom4j High Product pom artifactid dom4j Highest Product pom parent-artifactid z8-dependencies Medium Product Manifest extension-name dom4j Medium Version file version 1.6.1 Highest Version Manifest Implementation-Version 1.6.1 High Version central version 2.0 High Version pom version 2.0 Highest Version pom version 1.6.1 Highest Version central version 1.6.1 High
error_prone_annotations-2.1.3.jarLicense:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/error_prone_annotations-2.1.3.jar
MD5: 97504b36cf871722d81a4b9e114f2a16
SHA1: 39b109f2cd352b2d71b52a3b5a1a9850e1dc304b
SHA256: 03d0329547c13da9e17c634d1049ea2ead093925e290567e1a364fd6b1fc7ff8
Evidence Type Source Name Value Confidence Vendor pom artifactid error_prone_annotations Low Vendor jar package name google Low Vendor pom parent-artifactid error_prone_parent Low Vendor file name error_prone_annotations High Vendor pom parent-groupid com.google.errorprone Medium Vendor jar package name errorprone Low Vendor jar package name annotations Low Vendor pom groupid google.errorprone Highest Vendor pom name error-prone annotations High Product pom artifactid error_prone_annotations Highest Product pom parent-artifactid error_prone_parent Medium Product pom parent-groupid com.google.errorprone Low Product file name error_prone_annotations High Product pom groupid google.errorprone Low Product jar package name errorprone Low Product jar package name annotations Low Product pom name error-prone annotations High Version file version 2.1.3 Highest Version pom version 2.1.3 Highest
maven: com.google.errorprone:error_prone_annotations:2.1.3 Confidence :High gson-2.2.4.jarDescription:
Google Gson library License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/gson-2.2.4.jar
MD5: 2f54fc24807a4cad7297012dd8cebf3d
SHA1: a60a5e993c98c864010053cb901b7eab25306568
SHA256: c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb
Evidence Type Source Name Value Confidence Vendor central groupid com.google.code.gson Highest Vendor pom groupid google.code.gson Highest Vendor jar package name google Low Vendor pom url http://code.google.com/p/google-gson/ Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor manifest Bundle-Description Google Gson library Medium Vendor jar package name internal Low Vendor pom organization name Google, Inc. High Vendor pom name Gson High Vendor Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Vendor pom artifactid gson Low Vendor file name gson High Vendor pom organization url http://www.google.com Medium Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom description Google Gson library Medium Vendor jar package name gson Low Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom organization url http://www.google.com Low Product manifest Bundle-Description Google Gson library Medium Product jar package name internal Low Product pom name Gson High Product central artifactid gson Highest Product Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Product pom organization name Google, Inc. Low Product file name gson High Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product pom url http://code.google.com/p/google-gson/ Medium Product pom description Google Gson library Medium Product jar package name gson Low Version pom version 2.2.4 Highest Version central version 2.2.4 Highest Version file version 2.2.4 Highest
guava-25.0-jre.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/guava-25.0-jre.jar
MD5: a8e597a21ea6a9bc661d038b52b01b93
SHA1: 7319c34fa5866a85b6bad445adad69d402323129
SHA256: 3fd4341776428c7e0e5c18a7c10de129475b69ab9d30aeafbb5c277bb6074fa9
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Low Vendor pom groupid google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor pom parent-groupid com.google.guava Medium Vendor pom artifactid guava Low Vendor file name guava High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor Manifest automatic-module-name com.google.common Medium Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Low Vendor pom parent-artifactid guava-parent Low Product Manifest bundle-symbolicname com.google.guava Medium Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Low Product pom name Guava: Google Core Libraries for Java High Product Manifest bundle-docurl https://github.com/google/guava/ Low Product pom parent-groupid com.google.guava Low Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product pom parent-artifactid guava-parent Medium Product file name guava High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product Manifest automatic-module-name com.google.common Medium Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Low Product pom groupid google.guava Low Version file version 25.0 Highest Version pom version 25.0-jre Highest
maven: com.google.guava:guava:25.0-jre Confidence :High guice-3.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 5 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/guice-3.0.jar
MD5: ca1c7ba366884cfcd2cfb48d2395c400
SHA1: 9d84f15fe35e2c716a02979fb62f50a29f38aefa
SHA256: 1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22
Evidence Type Source Name Value Confidence Vendor jar package name google Low Vendor pom groupid google.inject Highest Vendor pom parent-groupid com.google.inject Medium Vendor jar package name inject Low Vendor manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 5 and above Medium Vendor jar package name internal Low Vendor pom name Google Guice - Core Library High Vendor Manifest bundle-symbolicname com.google.inject Medium Vendor pom artifactid guice Low Vendor Manifest bundle-docurl http://code.google.com/p/google-guice/ Low Vendor central groupid com.google.inject Highest Vendor pom parent-artifactid guice-parent Low Vendor file name guice High Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5,JavaSE-1.6 Low Product pom parent-artifactid guice-parent Medium Product pom groupid google.inject Low Product pom artifactid guice Highest Product pom parent-groupid com.google.inject Low Product central artifactid guice Highest Product Manifest Bundle-Name guice Medium Product jar package name inject Low Product manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 5 and above Medium Product jar package name internal Low Product pom name Google Guice - Core Library High Product Manifest bundle-symbolicname com.google.inject Medium Product Manifest bundle-docurl http://code.google.com/p/google-guice/ Low Product file name guice High Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5,JavaSE-1.6 Low Version pom version 3.0 Highest Version central version 3.0 Highest Version file version 3.0 Highest
guice-servlet-3.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 5 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/guice-servlet-3.0.jar
MD5: c9f66a5f6a0d840d9057b30853f25b85
SHA1: 610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9
SHA256: 9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.inject.servlet Medium Vendor pom parent-artifactid extensions-parent Low Vendor pom name Google Guice - Extensions - Servlet High Vendor jar package name google Low Vendor pom parent-groupid com.google.inject.extensions Medium Vendor jar package name inject Low Vendor manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 5 and above Medium Vendor central groupid com.google.inject.extensions Highest Vendor pom groupid google.inject.extensions Highest Vendor jar package name servlet Low Vendor file name guice-servlet High Vendor Manifest bundle-docurl http://code.google.com/p/google-guice/ Low Vendor pom artifactid guice-servlet Low Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5,JavaSE-1.6 Low Product Manifest bundle-symbolicname com.google.inject.servlet Medium Product pom name Google Guice - Extensions - Servlet High Product Manifest Bundle-Name guice-servlet Medium Product jar package name inject Low Product manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 5 and above Medium Product pom artifactid guice-servlet Highest Product pom parent-groupid com.google.inject.extensions Low Product pom groupid google.inject.extensions Low Product jar package name servlet Low Product central artifactid guice-servlet Highest Product pom parent-artifactid extensions-parent Medium Product file name guice-servlet High Product Manifest bundle-docurl http://code.google.com/p/google-guice/ Low Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5,JavaSE-1.6 Low Version pom version 3.0 Highest Version central version 3.0 Highest Version file version 3.0 Highest
h2-1.4.197.jarDescription:
H2 Database Engine License:
MPL 2.0 or EPL 1.0: http://h2database.com/html/license.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/h2-1.4.197.jar
MD5: f9893acfa22b7fe1492dd9c515af2e5b
SHA1: bb391050048ca8ae3e32451b5a3714ecd3596a46
SHA256: 37f5216e14af2772930dff9b8734353f0a80e89ba3f33e065441de6537c5e842
Evidence Type Source Name Value Confidence Vendor pom artifactid h2 Low Vendor jar package name h2 Low Vendor pom groupid h2database Highest Vendor pom url http://www.h2database.com Highest Vendor pom description H2 Database Engine Medium Vendor pom name H2 Database Engine High Vendor Manifest provide-capability osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory Low Vendor central groupid com.h2database Highest Vendor Manifest bundle-symbolicname org.h2 Medium Vendor file name h2 High Vendor Manifest implementation-url http://www.h2database.com Low Product central artifactid h2 Highest Product pom description H2 Database Engine Medium Product pom name H2 Database Engine High Product pom groupid h2database Low Product Manifest Implementation-Title H2 Database Engine High Product file name h2 High Product Manifest Bundle-Name H2 Database Engine Medium Product pom url http://www.h2database.com Medium Product Manifest provide-capability osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory Low Product Manifest bundle-symbolicname org.h2 Medium Product Manifest implementation-url http://www.h2database.com Low Product pom artifactid h2 Highest Version pom version 1.4.197 Highest Version file version 1.4.197 Highest Version Manifest Implementation-Version 1.4.197 High Version central version 1.4.197 Highest
Published Vulnerabilities CVE-2018-10054 suppress
Severity:Medium CVSS Score: 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. Vulnerable Software & Versions:
CVE-2018-14335 suppress
Severity:Medium CVSS Score: 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N) CWE: CWE-275 Permission Issues
An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files (outside of their permissions) via a symlink to a fake database file. Vulnerable Software & Versions:
hadoop-client-2.2.0.jarDescription:
Apache Hadoop Client File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-client-2.2.0.jarMD5: 1e95dbd1290e541f4753cf6ae305ad84SHA1: 8bc8c12f1991d1145e40011c8a8935798948246eSHA256: a55d2a6afd3c0f3ec43b7853d9fe44ff56fb5c89f2ac59cb50c1867757ccf72e
Evidence Type Source Name Value Confidence Vendor pom description Apache Hadoop Client Medium Vendor pom artifactid hadoop-client Low Vendor pom name Apache Hadoop Client High Vendor file name hadoop-client High Vendor pom parent-groupid org.apache.hadoop Medium Vendor pom parent-artifactid hadoop-project-dist Low Vendor pom groupid apache.hadoop Highest Product pom description Apache Hadoop Client Medium Product pom groupid apache.hadoop Low Product pom parent-groupid org.apache.hadoop Low Product pom name Apache Hadoop Client High Product pom artifactid hadoop-client Highest Product file name hadoop-client High Product pom parent-artifactid hadoop-project-dist Medium Version file version 2.2.0 Highest Version pom version 2.2.0 Highest
Related Dependencies hadoop-mapreduce-client-app-2.2.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-mapreduce-client-app-2.2.0.jar MD5: 8d94c030b5f1175eec517ebd17605147 SHA1: 9e5bdd970000b330382128350a957609cbcfe348 SHA256: 04ba27656c102dfc10a49c815b36fede94e3e7ea5cf48149291ebd757452b9c1 cpe: cpe:/a:apache:hadoop:2.2.0 Published Vulnerabilities CVE-2014-0229 suppress
Severity:Medium CVSS Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDatanode HDFS admin commands, which allows remote authenticated users to cause a denial of service (DataNodes shutdown) or perform unnecessary operations by issuing a command. Vulnerable Software & Versions: (show all )
CVE-2014-3627 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-59 Improper Link Resolution Before File Access ('Link Following')
The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive, which is not properly handled during localization, related to distributed cache. Vulnerable Software & Versions: (show all )
CVE-2016-5001 suppress
Severity:Low CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in the token. Vulnerable Software & Versions: (show all )
CVE-2016-6811 suppress
Severity:High CVSS Score: 9.0 (AV:N/AC:L/Au:S/C:C/I:C/A:C) CWE: CWE-264 Permissions, Privileges, and Access Controls
In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Vulnerable Software & Versions: (show all )
CVE-2017-15713 suppress
Severity:Medium CVSS Score: 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host. Vulnerable Software & Versions: (show all )
CVE-2017-3161 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter. Vulnerable Software & Versions:
CVE-2017-3162 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0. Vulnerable Software & Versions:
hadoop-mapreduce-client-core-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-mapreduce-client-core-2.7.4.jarMD5: 7bf3a032acb82ce47d9708c18e32c40dSHA1: d65431f1fc78577d8fb0db1a5330f26dfe3436d0SHA256: 0594de6f97ea0105fd977ab4e86398199a514141380ca254999d49210e125cf0
Evidence Type Source Name Value Confidence Vendor file name hadoop-mapreduce-client-core High Vendor jar package name mapreduce Low Vendor pom name hadoop-mapreduce-client-core High Vendor pom parent-groupid org.apache.hadoop Medium Vendor jar package name apache Low Vendor jar package name hadoop Low Vendor pom artifactid hadoop-mapreduce-client-core Low Vendor pom parent-artifactid hadoop-mapreduce-client Low Vendor pom groupid apache.hadoop Highest Product file name hadoop-mapreduce-client-core High Product pom parent-artifactid hadoop-mapreduce-client Medium Product pom groupid apache.hadoop Low Product jar package name mapreduce Low Product pom parent-groupid org.apache.hadoop Low Product pom name hadoop-mapreduce-client-core High Product jar package name hadoop Low Product pom artifactid hadoop-mapreduce-client-core Highest Version file version 2.7.4 Highest Version pom version 2.7.4 Highest
Related Dependencies hadoop-hdfs-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-hdfs-2.7.4.jar MD5: e18f429b60662b724cad080b834717a3 SHA1: 3e1414e3ae47e97f66b2eb904d3ec6c50a3e29d0 SHA256: 1f3c14c446cf1692b085952b5e186ee817d7aa3011440a38da86140fe1e3d815 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-common-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-common-2.7.4.jar MD5: ac17600d1fb51ada7fd2e677ce708005 SHA1: 9afa8d2004a0bbd930d1ac10d221d927917067be SHA256: 9c5cd1d114cba1547ab17b7e8dc8bb5759b35448c354e0589398e27fb7f4a978 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-yarn-client-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-yarn-client-2.7.4.jar MD5: 368dc220f6a89d8c1fc2ecdd1cc1a1fd SHA1: 94040d1929d60bcbdf142f8edd645f6b10a319cc SHA256: 0b77382b23fc3534f402af465c371522ffbaf065081f8cbc5e4a4e61e7f21ee9 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-mapreduce-client-jobclient-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-mapreduce-client-jobclient-2.7.4.jar MD5: a14b2c627a143967063eea7b5e661f47 SHA1: 6e1438b952eb0fad79dfac07459ecdae0bfef188 SHA256: 043f72cef74f6466d4348f94c404a4a6946a98ad5da652a6db548035f12f7717 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-yarn-api-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-yarn-api-2.7.4.jar MD5: f76ab1def6d8891d7c1afc3ab21029f7 SHA1: 12dd62408001b48ffacb7b905ba2315bbd7a6758 SHA256: e6c52b8681a16e9fca678cafc12c217fc97c3e6b3903b1b747549f491c8b1beb cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-auth-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-auth-2.7.4.jar MD5: 13dc9913ede3dfc6d95f3a7c5dffd659 SHA1: a2d5d89a6acfb11dd1a125e86b84fcef549483ae SHA256: fc925a97e34de51527912cced4fef3397dc8987d027e9ffedefeaf8b5056a239 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-yarn-server-common-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-yarn-server-common-2.7.4.jar MD5: 5026f93767c09db7e41894012343243c SHA1: 23eac36a00a754caf63d8cb1dd6373ea7d5322f8 SHA256: 74a567219692eb245842e4cdcd65e9ed0001b0f2bd1ea94fb16781d3894b5495 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-mapreduce-client-common-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-mapreduce-client-common-2.7.4.jar MD5: 4e693e98da332ce3bc5454bd5d5181ca SHA1: 5ef603580ada9e5c1c99069697d3dee0bf686507 SHA256: bf222538301b993e8b96b3b0f63e4b57c5001c44da7cd5e4be523d58970d81c7 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-yarn-server-nodemanager-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-yarn-server-nodemanager-2.7.4.jar MD5: 6d39592433269ea7496a4aa1827a37b8 SHA1: 960e9f00299f0757ca9a4b7298426f016bc9c0fb SHA256: aa8a8900392aaf42d8f5a7883813e8c0d4dd067073dd29133313753a02a676a6 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-annotations-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-annotations-2.7.4.jar MD5: 6fe58898886aebb11e761f75bdc3f237 SHA1: d8e0a3abcc3fb46e1418b99d6d1328a95d9bd7b1 SHA256: 195e4f2444d8f3245d4c6e4ba89fa7fe4a2a4c793f7c55d6edee27d430ec6a03 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-yarn-common-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-yarn-common-2.7.4.jar MD5: df580b6251cfe03488c7eeeaaf3c09a3 SHA1: e25002b6c480e5e17a1f6a17f3ff4cedf04cd807 SHA256: 234ec53aad3881438ef04d6a573fd14edda3b7dc5d73219d1504d317f1b200e7 cpe: cpe:/a:apache:hadoop:2.7.4 hadoop-mapreduce-client-shuffle-2.7.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/hadoop-mapreduce-client-shuffle-2.7.4.jar MD5: e196cced9f2bd3d84a2b784b3d875938 SHA1: 0835e2e5c63113a6e457b036b724d247f142ce5a SHA256: 332b1326465cafd2039c25b027e1ae41ec69fea8fabd97610db7f7fb02811659 cpe: cpe:/a:apache:hadoop:2.7.4 maven: org.apache.hadoop:hadoop-mapreduce-client-core:2.7.4 Confidence :Highcpe: cpe:/a:apache:hadoop:2.7.4 Confidence :Highest suppress Published Vulnerabilities CVE-2017-15718 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-255 Credentials Management
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications. Vulnerable Software & Versions: (show all )
htmlparser-1.6.jarDescription:
HTML Parser is a Java library used to parse HTML in either a linear or nested fashion. Primarily used for transformation or extraction, it features filters, visitors, custom tags and easy to use JavaBeans. It is a fast, robust and well tested package. License:
Common Public License: http://opensource.org/licenses/cpl1.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/htmlparser-1.6.jar
MD5: 1b023d0dd96e641db76f46ddbb19d6ca
SHA1: 9e8b3f44195ba40fcf1fe7d7b787786c0e83edfe
SHA256: 00ec0f610f0b7f5e00f8f3d41dc108cace3036a504be439bd1072d693de2f8a7
Evidence Type Source Name Value Confidence Vendor pom artifactid htmlparser Low Vendor pom groupid htmlparser Highest Vendor jar package name htmlparser Low Vendor pom description HTML Parser is a Java library used to parse HTML in either a linear or nested fashion. Primarily used for transformation or extraction, it features filters, visitors, custom tags and easy to use JavaBeans. It is a fast, robust and well tested package. Low Vendor pom url http://htmlparser.org Highest Vendor file name htmlparser High Vendor pom name HTML Parser High Vendor central groupid org.htmlparser Highest Product central artifactid htmlparser Highest Product pom groupid htmlparser Low Product pom description HTML Parser is a Java library used to parse HTML in either a linear or nested fashion. Primarily used for transformation or extraction, it features filters, visitors, custom tags and easy to use JavaBeans. It is a fast, robust and well tested package. Low Product pom url http://htmlparser.org Medium Product pom artifactid htmlparser Highest Product file name htmlparser High Product pom name HTML Parser High Version file version 1.6 Highest Version pom version 1.6 Highest Version central version 1.6 Highest
htrace-core-3.1.0-incubating.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/htrace-core-3.1.0-incubating.jarMD5: c49a4662d691a09eed10e0a35dd73299SHA1: f73606e7c9ede5802335c290bf47490ad6d51df3SHA256: d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d
Evidence Type Source Name Value Confidence Vendor pom url http://incubator.apache.org/projects/htrace.html Highest Vendor pom parent-groupid org.apache.htrace Medium Vendor pom name htrace-core High Vendor pom groupid apache.htrace Highest Vendor jar package name apache Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor file name htrace-core High Vendor pom artifactid htrace-core Low Vendor central groupid org.apache.htrace Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor jar package name htrace Low Vendor pom parent-artifactid htrace Low Vendor Manifest Implementation-Vendor-Id org.apache.htrace Medium Vendor jar package name fasterxml Low Product central artifactid htrace-core Highest Product pom name htrace-core High Product Manifest specification-title htrace-core Medium Product pom parent-artifactid htrace Medium Product pom parent-groupid org.apache.htrace Low Product pom groupid apache.htrace Low Product file name htrace-core High Product pom url http://incubator.apache.org/projects/htrace.html Medium Product jar package name htrace Low Product jar package name jackson Low Product pom artifactid htrace-core Highest Product jar package name fasterxml Low Product Manifest Implementation-Title htrace-core High Version pom version 3.1.0-incubating Highest Version file version 3.1.0 Highest Version Manifest Implementation-Version 3.1.0-incubating High Version central version 3.1.0-incubating Highest
httpclient-4.5.5.jarDescription:
Apache HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/httpclient-4.5.5.jarMD5: 97e7e5b135476b7d25a5ab31e1ea4922SHA1: 1603dfd56ebcd583ccdf337b6c3984ac55d89e58SHA256: 7e97724443ad2a25ad8c73183431d47cc7946271bcbbdfa91a8a17522a566573
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-18 11:52:14+0000 Low Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
Apache HttpComponents Client
Medium Product Manifest implementation-url http://hc.apache.org/httpcomponents-client Low Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-18 11:52:14+0000 Low Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom description
Apache HttpComponents Client
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid httpclient Highest Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
maven: org.apache.httpcomponents:httpclient:4.5.5 Confidence :Highcpe: cpe:/a:apache:httpclient:4.5.5 Confidence :Low suppress httpcore-4.4.9.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/httpcore-4.4.9.jarMD5: b89455507839c09d6119661defd2166aSHA1: a86ce739e5a7175b4b234c290a00a5fdb80957a0SHA256: 1b4a1c0b9b4222eda70108d3c6e2befd4a6be3d9f78ff53dd7a94966fdf51fc5
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-12 03:41:36+0000 Low Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Vendor pom description
Apache HttpComponents Core (blocking I/O)
Medium Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-12 03:41:36+0000 Low Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product pom description
Apache HttpComponents Core (blocking I/O)
Medium Version Manifest Implementation-Version 4.4.9 High Version pom version 4.4.9 Highest Version file version 4.4.9 Highest
maven: org.apache.httpcomponents:httpcore:4.4.9 Confidence :High httpcore-nio-4.4.9.jarDescription:
Apache HttpComponents Core (non-blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/httpcore-nio-4.4.9.jarMD5: 82f897e19f09775fa65e9631a638cb58SHA1: efd20e1f401d7464ffa7cce114f0bbbed8252a73SHA256: 366c7def45fb27816bb2d1ec4017fb1a5855940669123177234c4091ee269fdb
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-12 03:41:36+0000 Low Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore NIO High Vendor pom artifactid httpcore-nio Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore-nio High Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2018-01-12 03:41:36+0000 Low Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Product pom artifactid httpcore-nio Highest Product pom groupid apache.httpcomponents Low Product Manifest specification-title HttpComponents Apache HttpCore NIO Medium Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom name Apache HttpCore NIO High Product Manifest Implementation-Title HttpComponents Apache HttpCore NIO High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product file name httpcore-nio High Version Manifest Implementation-Version 4.4.9 High Version pom version 4.4.9 Highest Version file version 4.4.9 Highest
maven: org.apache.httpcomponents:httpcore-nio:4.4.9 Confidence :High icu4j-61.1.jarDescription:
International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
providing Unicode and Globalization support
License:
Unicode/ICU License: http://source.icu-project.org/repos/icu/trunk/icu4j/main/shared/licenses/LICENSE File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/icu4j-61.1.jar
MD5: 07e6b698917de94886bf0dfb4d042fc0
SHA1: 28d33b5e44e72edcc66a5da7a34a42147f38d987
SHA256: 55c98eb1838b2a4bb9a07dc36bd378532d64d0cdcb7ceee914236866a7de4464
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.ibm.icu Medium Vendor file name icu4j High Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor pom description International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support Low Vendor central groupid com.ibm.icu Highest Vendor pom url http://icu-project.org/ Highest Vendor Manifest bundle-copyright © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html#License Low Vendor manifest Bundle-Description International Components for Unicode for Java Medium Vendor pom name ICU4J High Vendor Manifest Implementation-Vendor-Id org.unicode Medium Vendor jar package name ibm Low Vendor pom groupid ibm.icu Highest Vendor jar package name icu Low Vendor Manifest Implementation-Vendor Unicode, Inc. High Vendor pom artifactid icu4j Low Product Manifest bundle-symbolicname com.ibm.icu Medium Product file name icu4j High Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product pom description International Component for Unicode for Java (ICU4J) is a mature, widely used Java library providing Unicode and Globalization support Low Product Manifest bundle-copyright © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html#License Low Product central artifactid icu4j Highest Product manifest Bundle-Description International Components for Unicode for Java Medium Product pom name ICU4J High Product Manifest Bundle-Name ICU4J Medium Product pom artifactid icu4j Highest Product pom groupid ibm.icu Low Product Manifest Implementation-Title International Components for Unicode for Java High Product pom url http://icu-project.org/ Medium Product Manifest specification-title International Components for Unicode for Java Medium Product jar package name icu Low Version Manifest Implementation-Version 61.1 High Version file version 61.1 Highest Version central version 61.1 Highest Version pom version 61.1 Highest
j2objc-annotations-1.1.jarDescription:
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/j2objc-annotations-1.1.jar
MD5: 49ae3204bb0bb9b2ac77062641f4a6d7
SHA1: ed28ded51a8b1c6b112568def5f4b455e6809019
SHA256: 2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6
Evidence Type Source Name Value Confidence Vendor pom url google/j2objc/ Highest Vendor file name j2objc-annotations High Vendor pom description A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation. Low Vendor jar package name google Low Vendor jar package name j2objc Low Vendor pom name J2ObjC Annotations High Vendor pom artifactid j2objc-annotations Low Vendor jar package name annotations Low Vendor pom groupid google.j2objc Highest Product file name j2objc-annotations High Product pom description A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation. Low Product jar package name j2objc Low Product pom name J2ObjC Annotations High Product pom groupid google.j2objc Low Product jar package name annotations Low Product pom artifactid j2objc-annotations Highest Product pom url google/j2objc/ High Version file version 1.1 Highest Version pom version 1.1 Highest
maven: com.google.j2objc:j2objc-annotations:1.1 Confidence :High jackson-annotations-2.9.0.jarDescription:
Core annotations used for value types, used by Jackson data binding package.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-annotations-2.9.0.jar
MD5: c09faa1b063681cf45706c6df50685b6
SHA1: 07c10d545325e3a6e72e06381afe469fd40eb701
SHA256: 45d32ac61ef8a744b464c54c2b3414be571016dd46bfc2bec226761cf7ae457a
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor pom parent-artifactid jackson-parent Low Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name Jackson-annotations High Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom artifactid jackson-annotations Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description Core annotations used for value types, used by Jackson data binding package. Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom description Core annotations used for value types, used by Jackson data binding package.
Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor file name jackson-annotations High Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest implementation-build-date 2017-07-30 03:53:23+0000 Low Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest Implementation-Title Jackson-annotations High Product Manifest Bundle-Name Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom name Jackson-annotations High Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom parent-artifactid jackson-parent Medium Product manifest Bundle-Description Core annotations used for value types, used by Jackson data binding package. Medium Product Manifest specification-title Jackson-annotations Medium Product pom description Core annotations used for value types, used by Jackson data binding package.
Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product file name jackson-annotations High Product Manifest implementation-build-date 2017-07-30 03:53:23+0000 Low Version pom version 2.9.0 Highest Version Manifest Implementation-Version 2.9.0 High Version file version 2.9.0 Highest
Related Dependencies jackson-annotations-2.9.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jackson-annotations-2.9.0.jar MD5: c09faa1b063681cf45706c6df50685b6 SHA1: 07c10d545325e3a6e72e06381afe469fd40eb701 SHA256: 45d32ac61ef8a744b464c54c2b3414be571016dd46bfc2bec226761cf7ae457a jackson-annotations-2.9.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/jackson-annotations-2.9.0.jar MD5: c09faa1b063681cf45706c6df50685b6 SHA1: 07c10d545325e3a6e72e06381afe469fd40eb701 SHA256: 45d32ac61ef8a744b464c54c2b3414be571016dd46bfc2bec226761cf7ae457a maven: com.fasterxml.jackson.core:jackson-annotations:2.9.0 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.9.0 Confidence :Low suppress jackson-core-2.9.5.jarDescription:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-core-2.9.5.jar
MD5: ec59f24f7f8d9acf53301c562722adf2
SHA1: a22ac51016944b06fd9ffbc9541c6e7ce5eea117
SHA256: a2bebaa325ad25455b02149c67e6052367a7d7fc1ce77de000eed284a5214eac
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build-date 2018-03-26 15:03:46+0000 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom url FasterXML/jackson-core Highest Vendor file name jackson-core High Vendor pom artifactid jackson-core Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest automatic-module-name com.fasterxml.jackson.core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest implementation-build-date 2018-03-26 15:03:46+0000 Low Product pom parent-groupid com.fasterxml.jackson Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product file name jackson-core High Product Manifest Implementation-Title Jackson-core High Product pom url FasterXML/jackson-core High Product Manifest specification-title Jackson-core Medium Product pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product pom name Jackson-core High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Jackson-core Medium Product pom artifactid jackson-core Highest Product Manifest automatic-module-name com.fasterxml.jackson.core Medium Product pom parent-artifactid jackson-base Medium Version pom version 2.9.5 Highest Version Manifest Implementation-Version 2.9.5 High Version file version 2.9.5 Highest
Related Dependencies jackson-dataformat-cbor-2.9.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-dataformat-cbor-2.9.5.jar MD5: 68188c61832f3a26da3c29a03b11df12 SHA1: e3ceeb7bbfcc3d36a1abcc5ed9544d5298e65f39 SHA256: e386a80e0ad71200e84fe5e4d0b28c6739af74e924a4d81ff2e33073020970dc jackson-jaxrs-json-provider-2.9.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-jaxrs-json-provider-2.9.5.jar MD5: 6a9363e199bb5abd32f0d497fc3f872a SHA1: c80c1d72c0823a31ffb1bde032ef276f3dc19aef SHA256: 26af65ee8a17c6751d51f90e241dd3974df0ba85bc6ba48709e58b509c3219e6 jackson-module-jaxb-annotations-2.9.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-module-jaxb-annotations-2.9.5.jar MD5: 1dc3dd1fb26f1d3dbf0da3938d6312df SHA1: 187555dec071c79f1cf797cb0862c06bd02fafd6 SHA256: eed08585b2a9b6d64f8dba5ab813813dde1a8df5e7f7e744a3a70d83925bcfc2 jackson-jaxrs-base-2.9.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-jaxrs-base-2.9.5.jar MD5: a02b7925e75e8f2003ca074e13d970f9 SHA1: 38269f2904f15eaf08efacdb2a0b7d987fb24ee4 SHA256: d81b4b71778bdca92f4c8b66db08d3e1e3b3fa5b0e4fe349d2f8b59a310cbdd2 cpe: cpe:/a:fasterxml:jackson:2.9.5 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-core:2.9.5 Confidence :High jackson-core-asl-1.9.13.jarDescription:
Jackson is a high-performance JSON processor (parser, generator)
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-core-asl-1.9.13.jar
MD5: 319c49a4304e3fa9fe3cd8dcfc009d37
SHA1: 3c304d70f42f832e0a86d45bd437f692129299a4
SHA256: 440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a
Evidence Type Source Name Value Confidence Vendor pom organization url http://fasterxml.com Medium Vendor file name jackson-core-asl High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Vendor pom artifactid jackson-core-asl Low Vendor jar package name codehaus Low Vendor Manifest Implementation-Vendor http://fasterxml.com High Vendor central groupid org.codehaus.jackson Highest Vendor pom organization name FasterXML High Vendor pom url http://jackson.codehaus.org Highest Vendor Manifest bundle-symbolicname jackson-core-asl Medium Vendor jar package name jackson Low Vendor pom name Jackson High Vendor pom description Jackson is a high-performance JSON processor (parser, generator)
Medium Vendor Manifest specification-vendor http://www.ietf.org/rfc/rfc4627.txt Low Vendor pom groupid codehaus.jackson Highest Product pom url http://jackson.codehaus.org Medium Product file name jackson-core-asl High Product pom organization name FasterXML Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Product central artifactid jackson-core-asl Highest Product Manifest specification-title JSON - JavaScript Object Notation Medium Product pom artifactid jackson-core-asl Highest Product Manifest Implementation-Title Jackson JSON processor High Product pom groupid codehaus.jackson Low Product Manifest Bundle-Name Jackson JSON processor Medium Product Manifest bundle-symbolicname jackson-core-asl Medium Product jar package name jackson Low Product pom organization url http://fasterxml.com Low Product pom name Jackson High Product pom description Jackson is a high-performance JSON processor (parser, generator)
Medium Version Manifest Implementation-Version 1.9.13 High Version pom version 1.9.13 Highest Version file version 1.9.13 Highest Version central version 1.9.13 Highest
Related Dependencies jackson-jaxrs-1.9.13.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-jaxrs-1.9.13.jar MD5: 8481e1904d9bfe974157a6af04b4445e SHA1: 534d72d2b9d6199dd531dfb27083dd4844082bba SHA256: 1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb maven: org.codehaus.jackson:jackson-jaxrs:1.9.13 ✓ jackson-mapper-asl-1.9.13.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-mapper-asl-1.9.13.jar MD5: 1750f9c339352fc4b728d61b57171613 SHA1: 1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7 SHA256: 74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2 maven: org.codehaus.jackson:jackson-mapper-asl:1.9.13 ✓ jackson-xc-1.9.13.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-xc-1.9.13.jar MD5: 49f6a735bae30745dcf5ecec27090720 SHA1: e3480072bc95c202476ffa1de99ff7ee9149f29c SHA256: 2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7 maven: org.codehaus.jackson:jackson-xc:1.9.13 ✓ jackson-databind-2.9.5.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jackson-databind-2.9.5.jar
MD5: 34b37affbf74f5d199be10622ddc83cd
SHA1: 3490508379d065fe3fcb80042b62f630f7588606
SHA256: 0fb4e079c118e752cc94c15ad22e6782b0dfc5dc09145f4813fb39d82e686047
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name com.fasterxml.jackson.databind Medium Vendor pom description General data-binding functionality for Jackson: works on core streaming API Medium Vendor Manifest implementation-build-date 2018-03-26 15:13:41+0000 Low Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name jackson-databind High Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor file name jackson-databind High Vendor pom artifactid jackson-databind Low Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest automatic-module-name com.fasterxml.jackson.databind Medium Product pom description General data-binding functionality for Jackson: works on core streaming API Medium Product pom parent-groupid com.fasterxml.jackson Low Product Manifest implementation-build-date 2018-03-26 15:13:41+0000 Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest Bundle-Name jackson-databind Medium Product pom name jackson-databind High Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom artifactid jackson-databind Highest Product Manifest specification-title jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Product file name jackson-databind High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product pom parent-artifactid jackson-base Medium Version pom version 2.9.5 Highest Version Manifest Implementation-Version 2.9.5 High Version file version 2.9.5 Highest
maven: com.fasterxml.jackson.core:jackson-databind:2.9.5 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.9.5 Confidence :Low suppress cpe: cpe:/a:fasterxml:jackson-databind:2.9.5 Confidence :Low suppress java-xmlbuilder-0.4.jarDescription:
XML Builder is a utility that creates simple XML documents using relatively sparse Java code License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/java-xmlbuilder-0.4.jar
MD5: 0fa474213a6a0282cd9264f6e0dd3658
SHA1: ac5962e48cdee3a0a6e1f8e00fcb594747ac5aaf
SHA256: 681e53c4ffd59fa12068803b259e3a83d43f07a47c112e748a187dee179eb31f
Evidence Type Source Name Value Confidence Vendor jar package name base64 Low Vendor pom name java-xmlbuilder High Vendor jar package name iharder Low Vendor file name java-xmlbuilder High Vendor pom artifactid java-xmlbuilder Low Vendor pom url http://code.google.com/p/java-xmlbuilder/ Highest Vendor pom groupid jamesmurty.utils Highest Vendor pom description XML Builder is a utility that creates simple XML documents using relatively sparse Java code Medium Vendor jar package name net Low Product jar package name base64 Low Product pom name java-xmlbuilder High Product jar package name iharder Low Product pom groupid jamesmurty.utils Low Product pom artifactid java-xmlbuilder Highest Product file name java-xmlbuilder High Product pom url http://code.google.com/p/java-xmlbuilder/ Medium Product pom description XML Builder is a utility that creates simple XML documents using relatively sparse Java code Medium Version pom version 0.4 Highest Version file version 0.4 Highest
maven: com.jamesmurty.utils:java-xmlbuilder:0.4 Confidence :High javassist-3.12.1.GA.jarDescription:
Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
simple. It is a class library for editing bytecodes in Java.
License:
MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javassist-3.12.1.GA.jar
MD5: 30d9d95456d43005da78d7281accccd1
SHA1: 526633327faa61aee448a519e8a4d53ec3057885
SHA256: 3f5780dacb4b28ad147100f74361bb338a45069d8034b24735bb8292d2856614
Evidence Type Source Name Value Confidence Vendor pom name Javassist High Vendor pom groupid javassist Highest Vendor file name javassist High Vendor pom url http://www.javassist.org/ Highest Vendor pom artifactid javassist Low Vendor pom description Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java. Low Vendor Manifest specification-vendor Shigeru Chiba, Tokyo Institute of Technology Low Product Manifest specification-title Javassist Medium Product pom artifactid javassist Highest Product pom name Javassist High Product pom groupid javassist Low Product file name javassist High Product pom url http://www.javassist.org/ Medium Product pom description Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java. Low Version pom version 3.12.1.GA Highest Version file version 3.12.1 Highest
maven: javassist:javassist:3.12.1.GA Confidence :High javax.annotation-api-1.2.jarDescription:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256: 5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Evidence Type Source Name Value Confidence Vendor Manifest extension-name javax.annotation Medium Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor pom description Common Annotations for the JavaTM Platform API Medium Vendor pom groupid javax.annotation Highest Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Vendor file name javax.annotation-api High Vendor pom organization name GlassFish Community High Vendor pom parent-groupid net.java Medium Vendor pom organization url https://glassfish.java.net Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest bundle-docurl https://glassfish.java.net Low Vendor manifest Bundle-Description Java(TM) Common Annotations 1.2 API Design Specification Medium Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor pom artifactid javax.annotation-api Low Vendor pom parent-artifactid jvnet-parent Low Vendor pom name ${extension.name} API High Product Manifest extension-name javax.annotation Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product pom description Common Annotations for the JavaTM Platform API Medium Product pom organization url https://glassfish.java.net Low Product pom artifactid javax.annotation-api Highest Product pom groupid javax.annotation Low Product pom organization name GlassFish Community Low Product file name javax.annotation-api High Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-docurl https://glassfish.java.net Low Product manifest Bundle-Description Java(TM) Common Annotations 1.2 API Design Specification Medium Product pom parent-groupid net.java Low Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Product pom parent-artifactid jvnet-parent Medium Product pom name ${extension.name} API High Version file version 1.2 Highest Version Manifest Implementation-Version 1.2 High Version pom version 1.2 Highest
Related Dependencies javax.annotation-api-1.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/javax.annotation-api-1.2.jar MD5: 75fe320d2b3763bd6883ae1ede35e987 SHA1: 479c1e06db31c432330183f5cae684163f186146 SHA256: 5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04 maven: javax.annotation:javax.annotation-api:1.2 Confidence :High javax.inject-1.jarDescription:
The javax.inject API License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Evidence Type Source Name Value Confidence Vendor file name javax.inject-1 High Vendor pom description The javax.inject API Medium Vendor pom name javax.inject High Vendor pom groupid javax.inject Highest Vendor pom url http://code.google.com/p/atinject/ Highest Vendor jar package name inject Low Vendor jar package name javax Low Vendor pom artifactid javax.inject Low Vendor central groupid javax.inject Highest Product file name javax.inject-1 High Product pom groupid javax.inject Low Product central artifactid javax.inject Highest Product pom description The javax.inject API Medium Product pom name javax.inject High Product pom url http://code.google.com/p/atinject/ Medium Product jar package name inject Low Product pom artifactid javax.inject Highest Version pom version 1 Highest Version central version 1 Highest Version file version 1 Medium
Related Dependencies javax.inject-1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/javax.inject-1.jar MD5: 289075e48b909e9e74e6c915b3631d2e SHA1: 6975da39a7040257bd51d21a231b76c915872d38 SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff javax.persistence-2.2.0.jarDescription:
javax.persistence build based upon git transaction 06e0f48 License:
Eclipse Public License v1.0: http://www.eclipse.org/legal/epl-v10.html
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javax.persistence-2.2.0.jar
MD5: 22e2b0d74b49db8fe2139615f06258cf
SHA1: 1c151c4dab60a89b5acc34f61132fc669f0b9e2e
SHA256: 93cf6600de75e027985f765929dfd0788e9677fcb961a7372b4ca3d06c57d58f
Evidence Type Source Name Value Confidence Vendor pom groupid eclipse.persistence Highest Vendor pom organization name Eclipse.org - EclipseLink Project High Vendor Manifest Implementation-Vendor Eclipse.org - EclipseLink Project High Vendor pom name Javax Persistence High Vendor jar package name persistence Low Vendor file name javax.persistence High Vendor pom description javax.persistence build based upon git transaction cfcdce1 Medium Vendor Manifest specification-vendor Oracle Low Vendor pom organization url http://www.eclipse.org/eclipselink Medium Vendor Manifest (hint) specification-vendor sun Low Vendor pom artifactid javax.persistence Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname javax.persistence Medium Vendor Manifest extension-name javax.persistence Medium Vendor jar package name javax Low Vendor pom description javax.persistence build based upon git transaction 06e0f48 Medium Vendor central groupid org.eclipse.persistence High Vendor pom url http://www.eclipse.org/eclipselink Highest Product pom name Javax Persistence High Product Manifest Bundle-Name Java Persistence API 2.2 Medium Product jar package name persistence Low Product file name javax.persistence High Product pom description javax.persistence build based upon git transaction cfcdce1 Medium Product central artifactid javax.persistence High Product pom organization url http://www.eclipse.org/eclipselink Low Product pom url http://www.eclipse.org/eclipselink Medium Product pom artifactid javax.persistence Highest Product pom organization name Eclipse.org - EclipseLink Project Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname javax.persistence Medium Product pom groupid eclipse.persistence Low Product Manifest extension-name javax.persistence Medium Product pom description javax.persistence build based upon git transaction 06e0f48 Medium Version file version 2.2.0 Highest Version Manifest Implementation-Version 2.2.0 High
javax.servlet-api-3.1.0.jarDescription:
Java(TM) Servlet 3.1 API Design Specification License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javax.servlet-api-3.1.0.jar
MD5: 79de69e9f5ed8c7fcb8342585732bbf7
SHA1: 3cd63d075497751784b2fa84be59432f4905bf7c
SHA256: af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482
Evidence Type Source Name Value Confidence Vendor pom name Java Servlet API High Vendor pom artifactid javax.servlet-api Low Vendor pom groupid javax.servlet Highest Vendor Manifest bundle-symbolicname javax.servlet-api Medium Vendor file name javax.servlet-api High Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom organization name GlassFish Community High Vendor pom parent-groupid net.java Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor pom url http://servlet-spec.java.net Highest Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest bundle-docurl https://glassfish.dev.java.net Low Vendor Manifest extension-name javax.servlet Medium Vendor pom organization url https://glassfish.dev.java.net Medium Vendor pom parent-artifactid jvnet-parent Low Vendor manifest Bundle-Description Java(TM) Servlet 3.1 API Design Specification Medium Product pom artifactid javax.servlet-api Highest Product pom name Java Servlet API High Product pom url http://servlet-spec.java.net Medium Product Manifest bundle-symbolicname javax.servlet-api Medium Product file name javax.servlet-api High Product pom groupid javax.servlet Low Product pom organization name GlassFish Community Low Product Manifest Bundle-Name Java Servlet API Medium Product pom organization url https://glassfish.dev.java.net Low Product Manifest bundle-docurl https://glassfish.dev.java.net Low Product Manifest extension-name javax.servlet Medium Product pom parent-groupid net.java Low Product pom parent-artifactid jvnet-parent Medium Product manifest Bundle-Description Java(TM) Servlet 3.1 API Design Specification Medium Version file version 3.1.0 Highest Version Manifest Implementation-Version 3.1.0 High Version pom version 3.1.0 Highest
maven: javax.servlet:javax.servlet-api:3.1.0 Confidence :High javax.ws.rs-api-2.0.1.jarDescription:
Java API for RESTful Web Services (JAX-RS) License:
CDDL 1.1: http://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/javax.ws.rs-api-2.0.1.jar
MD5: edcd111cf4d3ba8ac8e1f326efc37a17
SHA1: 104e9c2b5583cfcfeac0402316221648d6d8ea6b
SHA256: 38607d626f2288d8fbc1b1f8a62c369e63806d9a313ac7cbc5f9d6c94f4b466d
Evidence Type Source Name Value Confidence Vendor pom name javax.ws.rs-api High Vendor manifest Bundle-Description Java API for RESTful Web Services (JAX-RS) Medium Vendor Manifest bundle-symbolicname javax.ws.rs-api Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor Manifest extension-name javax.ws.rs Medium Vendor pom url http://jax-rs-spec.java.net Highest Vendor pom parent-groupid net.java Medium Vendor pom groupid javax.ws.rs Highest Vendor pom artifactid javax.ws.rs-api Low Vendor file name javax.ws.rs-api High Vendor pom organization url http://www.oracle.com/ Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom parent-artifactid jvnet-parent Low Vendor pom organization name Oracle Corporation High Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product pom organization url http://www.oracle.com/ Low Product pom name javax.ws.rs-api High Product manifest Bundle-Description Java API for RESTful Web Services (JAX-RS) Medium Product Manifest bundle-symbolicname javax.ws.rs-api Medium Product Manifest extension-name javax.ws.rs Medium Product Manifest Bundle-Name javax.ws.rs-api Medium Product pom artifactid javax.ws.rs-api Highest Product pom organization name Oracle Corporation Low Product pom parent-groupid net.java Low Product file name javax.ws.rs-api High Product pom url http://jax-rs-spec.java.net Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-artifactid jvnet-parent Medium Product pom groupid javax.ws.rs Low Product Manifest bundle-docurl http://www.oracle.com/ Low Version pom version 2.0.1 Highest Version Manifest Implementation-Version 2.0.1 High Version file version 2.0.1 Highest
Related Dependencies javax.ws.rs-api-2.0.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/javax.ws.rs-api-2.0.1.jar MD5: edcd111cf4d3ba8ac8e1f326efc37a17 SHA1: 104e9c2b5583cfcfeac0402316221648d6d8ea6b SHA256: 38607d626f2288d8fbc1b1f8a62c369e63806d9a313ac7cbc5f9d6c94f4b466d cpe: cpe:/a:ws_project:ws:2.0.1 Confidence :Low suppress maven: javax.ws.rs:javax.ws.rs-api:2.0.1 Confidence :High jaxb-api-2.2.11.jarDescription:
JAXB (JSR 222) API License:
CDDL 1.1: https://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: https://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-api-2.2.11.jar
MD5: 5983d1e2ec1a9b0604575cd9e9582591
SHA1: 32274d4244967ff43e7a5d967743d94ed3d2aea7
SHA256: 273d82f8653b53ad9d00ce2b2febaef357e79a273560e796ff3fcfec765f8910
Evidence Type Source Name Value Confidence Vendor pom artifactid jaxb-api Low Vendor Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom description JAXB (JSR 222) API Medium Vendor pom parent-groupid net.java Medium Vendor pom name Java Architecture for XML Binding High Vendor Manifest bundle-symbolicname jaxb-api Medium Vendor file name jaxb-api High Vendor pom organization url http://www.oracle.com/ Medium Vendor manifest Bundle-Description JAXB (JSR 222) API Medium Vendor Manifest extension-name javax.xml.bind Medium Vendor pom url http://jaxb.java.net/ Highest Vendor pom groupid javax.xml.bind Highest Vendor pom parent-artifactid jvnet-parent Low Vendor pom organization name Oracle Corporation High Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product pom organization url http://www.oracle.com/ Low Product Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Product pom artifactid jaxb-api Highest Product pom groupid javax.xml.bind Low Product pom description JAXB (JSR 222) API Medium Product pom url http://jaxb.java.net/ Medium Product pom name Java Architecture for XML Binding High Product Manifest Bundle-Name jaxb-api Medium Product pom organization name Oracle Corporation Low Product Manifest bundle-symbolicname jaxb-api Medium Product file name jaxb-api High Product Manifest specification-title Java Architecture for XML Binding Medium Product pom parent-groupid net.java Low Product manifest Bundle-Description JAXB (JSR 222) API Medium Product Manifest extension-name javax.xml.bind Medium Product pom parent-artifactid jvnet-parent Medium Product Manifest bundle-docurl http://www.oracle.com/ Low Version file version 2.2.11 Highest Version pom version 2.2.11 Highest
maven: javax.xml.bind:jaxb-api:2.2.11 Confidence :High jaxb-core-2.2.11.jarDescription:
Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-core-2.2.11.jar
MD5: c5eca4e58a75eabe3379926803421bab
SHA1: c3f87d654f8d5943cd08592f3f758856544d279a
SHA256: b13da0c655a3d590a2a945553648c407e6347648c9f7a3f811b7b3a8a1974baa
Evidence Type Source Name Value Confidence Vendor pom artifactid jaxb-core Low Vendor pom parent-artifactid jaxb-bundles Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor file name jaxb-core High Vendor pom description Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. Medium Vendor Manifest (hint) Implementation-Vendor sun High Vendor jar (hint) package name oracle Low Vendor Manifest bundle-symbolicname com.sun.xml.bind.jaxb-core Medium Vendor jar package name bind Low Vendor pom name Old JAXB Core High Vendor Manifest Implementation-Vendor Oracle High Vendor manifest Bundle-Description Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. Medium Vendor pom groupid sun.xml.bind Highest Vendor jar package name xml Low Vendor Manifest Implementation-Vendor-Id com.oracle Medium Vendor central groupid com.sun.xml.bind Highest Vendor jar package name sun Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name Old JAXB Core Medium Product Manifest Implementation-Title JAXB Implementation High Product central artifactid jaxb-core Highest Product pom artifactid jaxb-core Highest Product file name jaxb-core High Product pom description Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. Medium Product pom parent-groupid com.sun.xml.bind.mvn Low Product Manifest bundle-symbolicname com.sun.xml.bind.jaxb-core Medium Product jar package name bind Low Product pom name Old JAXB Core High Product pom groupid sun.xml.bind Low Product pom parent-artifactid jaxb-bundles Medium Product manifest Bundle-Description Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies. Medium Product jar package name xml Low Product Manifest specification-title Java Architecture for XML Binding Medium Product Manifest bundle-docurl http://www.oracle.com/ Low Version file version 2.2.11 Highest Version Manifest Implementation-Version 2.2.11 High Version central version 2.2.11 Highest Version pom version 2.2.11 Highest
jaxb-impl-2.2.11.jarDescription:
Old JAXB Runtime module. Contains sources required for runtime processing. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-impl-2.2.11.jar
MD5: bea06b3ee5ef2c338beac9187b7782f3
SHA1: a49ce57aee680f9435f49ba6ef427d38c93247a6
SHA256: f91793a96f185a2fc004c86a37086f060985854ce6b19935e03c4de51e3201d2
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid jaxb-bundles Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor Manifest (hint) Implementation-Vendor sun High Vendor jar (hint) package name oracle Low Vendor jar package name bind Low Vendor pom description Old JAXB Runtime module. Contains sources required for runtime processing. Medium Vendor file name jaxb-impl High Vendor Manifest originally-created-by Apache Maven 3.0.4 Low Vendor Manifest Implementation-Vendor Oracle High Vendor pom artifactid jaxb-impl Low Vendor pom groupid sun.xml.bind Highest Vendor jar package name xml Low Vendor pom name Old JAXB Runtime High Vendor Manifest bundle-symbolicname com.sun.xml.bind.jaxb-impl Medium Vendor Manifest Implementation-Vendor-Id com.oracle Medium Vendor central groupid com.sun.xml.bind Highest Vendor jar package name sun Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor manifest Bundle-Description Old JAXB Runtime module. Contains sources required for runtime processing. Medium Product Manifest Implementation-Title JAXB Implementation High Product Manifest Bundle-Name Old JAXB Runtime Medium Product pom parent-groupid com.sun.xml.bind.mvn Low Product jar package name bind Low Product pom description Old JAXB Runtime module. Contains sources required for runtime processing. Medium Product file name jaxb-impl High Product Manifest originally-created-by Apache Maven 3.0.4 Low Product pom groupid sun.xml.bind Low Product pom parent-artifactid jaxb-bundles Medium Product jar package name xml Low Product central artifactid jaxb-impl Highest Product pom name Old JAXB Runtime High Product Manifest bundle-symbolicname com.sun.xml.bind.jaxb-impl Medium Product Manifest specification-title Java Architecture for XML Binding Medium Product jar package name v2 Low Product pom artifactid jaxb-impl Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product manifest Bundle-Description Old JAXB Runtime module. Contains sources required for runtime processing. Medium Version file version 2.2.11 Highest Version Manifest Implementation-Version 2.2.11 High Version central version 2.2.11 Highest Version pom version 2.2.11 Highest
jersey-client-1.19.4.jarDescription:
Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jersey-client-1.19.4.jar
MD5: 38e569bc5ff0615d82fac507da373973
SHA1: 9b1f3cf3fdd02d313018f1a67c42106e6ce9f60d
SHA256: 639c825c5db580f8115bf49ffc893093526d2ed1079fbc929b6a5fbd0b2eda40
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.sun.jersey Medium Vendor pom artifactid jersey-client Low Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom parent-groupid com.sun.jersey Medium Vendor Manifest bundle-symbolicname com.sun.jersey.client Medium Vendor pom parent-artifactid jersey-project Low Vendor file name jersey-client High Vendor pom name jersey-client High Vendor manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor pom groupid sun.jersey Highest Product Manifest Bundle-Name jersey-client Medium Product pom groupid sun.jersey Low Product pom parent-artifactid jersey-project Medium Product Manifest Implementation-Title jersey-client High Product Manifest bundle-symbolicname com.sun.jersey.client Medium Product file name jersey-client High Product pom parent-groupid com.sun.jersey Low Product pom artifactid jersey-client Highest Product pom name jersey-client High Product manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Product Manifest bundle-docurl http://www.oracle.com/ Low Version file version 1.19.4 Highest Version Manifest Implementation-Version 1.19.4 High Version pom version 1.19.4 Highest
maven: com.sun.jersey:jersey-client:1.19.4 Confidence :High jersey-core-1.9.jarDescription:
Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jersey-core-1.9.jar
MD5: 73d196595f5e410a37c0a4337350ceb7
SHA1: 8341846f18187013bb9e27e46b7ee00a6395daf4
SHA256: 2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.sun.jersey Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom parent-groupid com.sun.jersey Medium Vendor pom parent-artifactid jersey-project Low Vendor file name jersey-core High Vendor Manifest bundle-symbolicname com.sun.jersey.jersey-core Medium Vendor pom artifactid jersey-core Low Vendor manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor pom groupid sun.jersey Highest Vendor pom name jersey-core High Product pom groupid sun.jersey Low Product pom parent-artifactid jersey-project Medium Product file name jersey-core High Product Manifest Implementation-Title jersey-core High Product Manifest Bundle-Name jersey-core Medium Product pom artifactid jersey-core Highest Product pom parent-groupid com.sun.jersey Low Product Manifest bundle-symbolicname com.sun.jersey.jersey-core Medium Product manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Product Manifest bundle-docurl http://www.oracle.com/ Low Product pom name jersey-core High Version pom version 1.9 Highest Version Manifest Implementation-Version 1.9 High Version file version 1.9 Highest
maven: com.sun.jersey:jersey-core:1.9 Confidence :High jersey-guice-1.9.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jersey-guice-1.9.jarMD5: a81140d246f420c1e2eabe649417c5b1SHA1: 5963c28c47df7e5d6ad34cec80c071c368777f7bSHA256: 544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34
Evidence Type Source Name Value Confidence Vendor pom name jersey-guice High Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom parent-groupid com.sun.jersey.contribs Medium Vendor pom parent-artifactid jersey-contribs Low Vendor pom groupid sun.jersey.contribs Highest Vendor file name jersey-guice High Vendor pom artifactid jersey-guice Low Vendor Manifest Implementation-Vendor-Id com.sun.jersey.contribs Medium Product pom artifactid jersey-guice Highest Product pom parent-artifactid jersey-contribs Medium Product pom name jersey-guice High Product pom groupid sun.jersey.contribs Low Product file name jersey-guice High Product pom parent-groupid com.sun.jersey.contribs Low Product Manifest Implementation-Title jersey-guice High Version pom version 1.9 Highest Version Manifest Implementation-Version 1.9 High Version file version 1.9 Highest
maven: com.sun.jersey.contribs:jersey-guice:1.9 Confidence :High jersey-json-1.9.jarDescription:
Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jersey-json-1.9.jar
MD5: 17ca6b0d49ed8db159b7827b6defa6b6
SHA1: 1aa73e1896bcc7013fed247157d7f676226eb432
SHA256: cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.sun.jersey Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom parent-groupid com.sun.jersey Medium Vendor pom parent-artifactid jersey-project Low Vendor file name jersey-json High Vendor pom artifactid jersey-json Low Vendor Manifest bundle-symbolicname com.sun.jersey.jersey-json Medium Vendor pom name jersey-json High Vendor manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor pom groupid sun.jersey Highest Product pom groupid sun.jersey Low Product pom parent-artifactid jersey-project Medium Product Manifest Implementation-Title jersey-json High Product pom artifactid jersey-json Highest Product file name jersey-json High Product Manifest bundle-symbolicname com.sun.jersey.jersey-json Medium Product pom parent-groupid com.sun.jersey Low Product Manifest Bundle-Name jersey-json Medium Product pom name jersey-json High Product manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Product Manifest bundle-docurl http://www.oracle.com/ Low Version pom version 1.9 Highest Version Manifest Implementation-Version 1.9 High Version file version 1.9 Highest
maven: com.sun.jersey:jersey-json:1.9 Confidence :High jersey-server-1.9.jarDescription:
Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jersey-server-1.9.jar
MD5: 0c98f6cca5df8197b310a0d1d89bb34a
SHA1: 3a6ea7cc5e15c824953f9f3ece2201b634d90d18
SHA256: 3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.sun.jersey Medium Vendor file name jersey-server High Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom parent-groupid com.sun.jersey Medium Vendor pom parent-artifactid jersey-project Low Vendor pom artifactid jersey-server Low Vendor pom name jersey-server High Vendor manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Vendor Manifest bundle-symbolicname com.sun.jersey.jersey-server Medium Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor pom groupid sun.jersey Highest Product pom groupid sun.jersey Low Product pom parent-artifactid jersey-project Medium Product file name jersey-server High Product Manifest Implementation-Title jersey-server High Product pom parent-groupid com.sun.jersey Low Product pom name jersey-server High Product Manifest Bundle-Name jersey-server Medium Product pom artifactid jersey-server Highest Product manifest Bundle-Description Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. Low Product Manifest bundle-symbolicname com.sun.jersey.jersey-server Medium Product Manifest bundle-docurl http://www.oracle.com/ Low Version pom version 1.9 Highest Version Manifest Implementation-Version 1.9 High Version file version 1.9 Highest
maven: com.sun.jersey:jersey-server:1.9 Confidence :High jettison-1.1.jarDescription:
A StAX implementation for JSON. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jettison-1.1.jarMD5: fc80e0aabd516c54739262c3d618303aSHA1: 1a01a2a1218fcf9faa2cc2a6ced025bdea687262SHA256: 377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description A StAX implementation for JSON. Medium Vendor pom description A StAX implementation for JSON. Medium Vendor file name jettison High Vendor Manifest bundle-symbolicname org.codehaus.jettison.jettison Medium Vendor pom name Jettison High Vendor pom groupid codehaus.jettison Highest Vendor pom artifactid jettison Low Product manifest Bundle-Description A StAX implementation for JSON. Medium Product Manifest Implementation-Title Jettison High Product pom description A StAX implementation for JSON. Medium Product file name jettison High Product Manifest bundle-symbolicname org.codehaus.jettison.jettison Medium Product Manifest Bundle-Name jettison Medium Product pom artifactid jettison Highest Product pom name Jettison High Product pom groupid codehaus.jettison Low Version Manifest Implementation-Version 1.1 High Version file version 1.1 Highest Version pom version 1.1 Highest
maven: org.codehaus.jettison:jettison:1.1 Confidence :High jetty-6.1.26.jarDescription:
Jetty server core License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-6.1.26.jar
MD5: 12b65438bbaf225102d0396c21236052
SHA1: 2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0
SHA256: 21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5
Evidence Type Source Name Value Confidence Vendor pom groupid mortbay.jetty Highest Vendor manifest Bundle-Description Jetty server core Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor pom parent-groupid org.mortbay.jetty Medium Vendor Manifest originally-created-by 1.6.0_22 (Sun Microsystems Inc.) Low Vendor file name jetty High Vendor pom artifactid jetty Low Vendor Manifest bundle-symbolicname org.mortbay.jetty.server Medium Vendor Manifest url http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty Low Vendor pom description Jetty server core Medium Vendor Manifest bundle-docurl http://jetty.mortbay.org Low Vendor pom name Jetty Server High Vendor pom parent-artifactid project Low Product manifest Bundle-Description Jetty server core Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest originally-created-by 1.6.0_22 (Sun Microsystems Inc.) Low Product file name jetty High Product pom groupid mortbay.jetty Low Product pom parent-groupid org.mortbay.jetty Low Product pom artifactid jetty Highest Product Manifest bundle-symbolicname org.mortbay.jetty.server Medium Product Manifest url http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty Low Product Manifest Bundle-Name Jetty Server Medium Product pom description Jetty server core Medium Product Manifest bundle-docurl http://jetty.mortbay.org Low Product pom parent-artifactid project Medium Product pom name Jetty Server High Version pom version 6.1.26 Highest Version file version 6.1.26 Highest
Related Dependencies jetty-sslengine-6.1.26.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-sslengine-6.1.26.jar MD5: d3bea45d6939e57fccf450a914fe4e1a SHA1: 60367999cee49a3b09fa86bdcb52310b6c896014 SHA256: 9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87 jetty-util-6.1.26.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-util-6.1.26.jar MD5: 450fedce4f7f8ad3761577b10a664200 SHA1: e5642fe0399814e1687d55a3862aa5a3417226a9 SHA256: 9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047 cpe: cpe:/a:mortbay_jetty:jetty:6.1.26 Confidence :Low suppress maven: org.mortbay.jetty:jetty:6.1.26 Confidence :Highcpe: cpe:/a:mortbay:jetty:6.1.26 Confidence :Low suppress cpe: cpe:/a:jetty:jetty:6.1.26 Confidence :Low suppress Published Vulnerabilities CVE-2011-4461 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-310 Cryptographic Issues
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Vulnerable Software & Versions: (show all )
jetty-http-9.2.22.v20170606.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-http-9.2.22.v20170606.jar
MD5: 53772f65a4f6a5fa96a5cda55c448363
SHA1: ba2028c83e4d54a86ee8d765659d56058b205da8
SHA256: 78e7a7381037abe4a739387ea55d977a3e53c31d48b97195740ff2e2edf35303
Evidence Type Source Name Value Confidence Vendor pom name Jetty :: Http Utility High Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor file name jetty-http High Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.http Medium Vendor pom parent-groupid org.eclipse.jetty Medium Vendor pom artifactid jetty-http Low Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom name Jetty :: Http Utility High Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product file name jetty-http High Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest Bundle-Name Jetty :: Http Utility Medium Product pom parent-groupid org.eclipse.jetty Low Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product pom artifactid jetty-http Highest Product Manifest url http://www.eclipse.org/jetty Low Product Manifest bundle-symbolicname org.eclipse.jetty.http Medium Version Manifest Implementation-Version 9.2.22.v20170606 High Version file version 9.2.22.v20170606 Highest Version pom version 9.2.22.v20170606 Highest
Related Dependencies jetty-continuation-9.2.22.v20170606.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-continuation-9.2.22.v20170606.jar MD5: 90561906c1f1b0b324a03a4240457051 SHA1: 36ed80863cf80376a1931efd0a06835f56c2e0be SHA256: 7d6d0c391a7ff5088a204692f785e58960a803639fc0251f62b44f40fa431834 jetty-server-9.2.22.v20170606.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-server-9.2.22.v20170606.jar MD5: 63870c71bf0a4b5a27af94283effc457 SHA1: 0f7d36a5ee7e68a7bbd0f404af90b4c1269c65c1 SHA256: 0511ed658eac69d74c83a8d7b597d3e27053347dd887da6e81574f7fe7cfce46 jetty-util-9.2.22.v20170606.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-util-9.2.22.v20170606.jar MD5: 9c078eef99cee9321ee4d02e1c84647c SHA1: 747d17f6cd662f87d5ab5e08b572a1f1ce85ccb9 SHA256: 0feed515eff6da777b98dce080be39f0509a754b47f38b1991bf1784de3b1e01 jetty-security-9.2.22.v20170606.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-security-9.2.22.v20170606.jar MD5: 84a61770bf6e3551cb94382321e18612 SHA1: 00489ec37fcbe2e7ed5d36f010cdc197c42e1181 SHA256: 79efe0c23455b77259f6f3a925bfa0f758ea0f50d13cfc632ac9bbd39563fc5d maven: org.eclipse.jetty:jetty-http:9.2.22.v20170606 Confidence :Highcpe: cpe:/a:jetty:jetty:9.2.22.v20170606 Confidence :Low suppress cpe: cpe:/a:eclipse:jetty:9.2.22.v20170606 Confidence :Low suppress Published Vulnerabilities CVE-2017-7656 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-284 Improper Access Control
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. Vulnerable Software & Versions: (show all )
CVE-2017-7657 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-190 Integer Overflow or Wraparound
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-19 Data Processing Errors
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. Vulnerable Software & Versions: (show all )
CVE-2017-9735 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. Vulnerable Software & Versions:
jetty-io-9.2.22.v20170606.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jetty-io-9.2.22.v20170606.jar
MD5: 083116d9dadfdf9e82ccd733e0332d5b
SHA1: 4995c060104afeab9cedf9e4d0cfb1cacfeece8b
SHA256: 21e8797c0d1fca20509ee44cf3b013ae09c184dae1806e8995d844f857ca6799
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.eclipse.jetty.io Medium Vendor pom name Jetty :: IO Utility High Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom parent-groupid org.eclipse.jetty Medium Vendor file name jetty-io High Vendor pom artifactid jetty-io Low Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product Manifest bundle-symbolicname org.eclipse.jetty.io Medium Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom name Jetty :: IO Utility High Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product pom artifactid jetty-io Highest Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product pom parent-groupid org.eclipse.jetty Low Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest url http://www.eclipse.org/jetty Low Product file name jetty-io High Product Manifest Bundle-Name Jetty :: IO Utility Medium Version Manifest Implementation-Version 9.2.22.v20170606 High Version file version 9.2.22.v20170606 Highest Version pom version 9.2.22.v20170606 Highest
maven: org.eclipse.jetty:jetty-io:9.2.22.v20170606 Confidence :High joda-time-2.3.jarDescription:
Date and time library to replace JDK date handling License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/joda-time-2.3.jar
MD5: ff85fe8f3ab26b36092475a95f43fb7e
SHA1: 56498efd17752898cfcc3868c1b6211a07b12b8f
SHA256: 602fd8006641f8b3afd589acbd9c9b356712bdcf0f9323557ec8648cd234983b
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Joda.org Low Vendor Manifest bundle-symbolicname joda-time Medium Vendor Manifest bundle-docurl http://www.joda.org/joda-time/ Low Vendor pom organization url http://www.joda.org Medium Vendor pom url http://www.joda.org/joda-time/ Highest Vendor Manifest Implementation-Vendor-Id org.joda Medium Vendor Manifest Implementation-Vendor Joda.org High Vendor pom description Date and time library to replace JDK date handling Medium Vendor pom organization name Joda.org High Vendor Manifest extension-name joda-time Medium Vendor pom groupid joda-time Highest Vendor pom artifactid joda-time Low Vendor file name joda-time High Vendor pom name Joda-Time High Product Manifest Bundle-Name Joda-Time Medium Product Manifest bundle-symbolicname joda-time Medium Product Manifest bundle-docurl http://www.joda.org/joda-time/ Low Product pom artifactid joda-time Highest Product pom description Date and time library to replace JDK date handling Medium Product pom organization name Joda.org Low Product Manifest extension-name joda-time Medium Product Manifest Implementation-Title org.joda.time High Product Manifest specification-title Joda-Time Medium Product pom organization url http://www.joda.org Low Product pom url http://www.joda.org/joda-time/ Medium Product file name joda-time High Product pom groupid joda-time Low Product pom name Joda-Time High Version pom version 2.3 Highest Version Manifest Implementation-Version 2.3 High Version file version 2.3 Highest
maven: joda-time:joda-time:2.3 Confidence :High jquery-2.0.3-1.jarDescription:
WebJar for jQuery License:
MIT License: https://github.com/jquery/jquery/blob/master/MIT-LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jquery-2.0.3-1.jar
MD5: 732cfed87e366dd90b2a975ad74366bb
SHA1: 9be7beefd7c17933d68640da261e3e05d46f3b45
SHA256: a43d569f4ec10a9383719bec2185d10959623345688b5be28ca8ea3856a82d17
Evidence Type Source Name Value Confidence Vendor pom groupid webjars Highest Vendor pom name jquery High Vendor pom url http://webjars.org Highest Vendor pom artifactid jquery Low Vendor pom description WebJar for jQuery Medium Vendor file name jquery High Product pom groupid webjars Low Product pom name jquery High Product pom description WebJar for jQuery Medium Product pom url http://webjars.org Medium Product file name jquery High Product pom artifactid jquery Highest Version file version 2.0.3.1 Highest Version pom version 2.0.3-1 Highest
maven: org.webjars:jquery:2.0.3-1 Confidence :High jquery-selectors-0.0.3.jarLicense:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jquery-selectors-0.0.3.jar
MD5: a2f60c4f980351d48d9415fb01fdf1b7
SHA1: 00b658478b70ef120c434054d7a07790e2aff3bb
SHA256: 7191f3a436b2302841d927ef5b95a1aaac4df514836174ff7f7963384b95978f
Evidence Type Source Name Value Confidence Vendor pom parent-groupid de.agilecoders.maven Medium Vendor pom groupid de.agilecoders.wicket Highest Vendor file name jquery-selectors High Vendor Manifest implementation-build 37738a9d719a5f2b1ca24ccf117e07b2eb5ee01f Low Vendor pom artifactid jquery-selectors Low Vendor pom parent-artifactid maven-parent-pom Low Vendor Manifest Implementation-Vendor-Id de.agilecoders.wicket Medium Vendor Manifest Implementation-Vendor AgileCoders High Product pom artifactid jquery-selectors Highest Product pom parent-groupid de.agilecoders.maven Low Product file name jquery-selectors High Product Manifest implementation-build 37738a9d719a5f2b1ca24ccf117e07b2eb5ee01f Low Product Manifest Implementation-Title jquery-selectors High Product pom groupid de.agilecoders.wicket Low Product pom parent-artifactid maven-parent-pom Medium Version pom version 0.0.3 Highest Version Manifest Implementation-Version 0.0.3 High Version file version 0.0.3 Highest
maven: de.agilecoders.wicket:jquery-selectors:0.0.3 Confidence :High jquery-ui-1.10.2-1.jarDescription:
WebJar for jQuery UI License:
MIT License: https://github.com/jquery/jquery-ui/blob/master/MIT-LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jquery-ui-1.10.2-1.jar
MD5: 8514b666fa516423c426cb4857c94745
SHA1: 4767035496f7b4ecf2cfb9aea39003dc2eeecd59
SHA256: 277d7a47ba2cd0912eae32aeb662896264e2e3b4d0d10815c4d1433fc6e435b5
Evidence Type Source Name Value Confidence Vendor file name jquery-ui High Vendor pom name jQuery UI High Vendor pom artifactid jquery-ui Low Vendor pom description WebJar for jQuery UI Medium Vendor pom groupid webjars Highest Vendor pom url http://webjars.org Highest Product file name jquery-ui High Product pom name jQuery UI High Product pom groupid webjars Low Product pom description WebJar for jQuery UI Medium Product pom artifactid jquery-ui Highest Product pom url http://webjars.org Medium Version file version 1.10.2.1 Highest Version pom version 1.10.2-1 Highest
maven: org.webjars:jquery-ui:1.10.2-1 Confidence :High jquerypp-1.0.1.jarDescription:
WebJar for jQuery++ License:
MIT License: https://github.com/jupiterjs/jquerypp/blob/master/license.md File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jquerypp-1.0.1.jar
MD5: 653b09bd62701f3544f1a8e9a28d4625
SHA1: 8ad527112c0d70fc140475d0f04802c3567c77fe
SHA256: 834febdee3ae60e13178ed1f945c0fb5141b1534c4799584bf25939c0730f828
Evidence Type Source Name Value Confidence Vendor file name jquerypp High Vendor pom name jQuery++ High Vendor pom groupid webjars Highest Vendor pom url http://webjars.org Highest Vendor pom artifactid jquerypp Low Vendor pom description WebJar for jQuery++ Medium Product file name jquerypp High Product pom groupid webjars Low Product pom name jQuery++ High Product pom description WebJar for jQuery++ Medium Product pom url http://webjars.org Medium Product pom artifactid jquerypp Highest Version pom version 1.0.1 Highest Version file version 1.0.1 Highest
maven: org.webjars:jquerypp:1.0.1 Confidence :High jsch-0.1.54.jarDescription:
JSch is a pure Java implementation of SSH2 License:
Revised BSD: http://www.jcraft.com/jsch/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jsch-0.1.54.jar
MD5: 56a6c6fc5819e21c665355b39b9097d8
SHA1: da3584329a263616e277e15462b387addd1b208d
SHA256: 92eb273a3316762478fdd4fe03a0ce1842c56f496c9c12fe1235db80450e1fdb
Evidence Type Source Name Value Confidence Vendor pom organization url http://www.jcraft.com/ Medium Vendor pom name JSch High Vendor jar package name jsch Low Vendor file name jsch High Vendor pom description JSch is a pure Java implementation of SSH2 Medium Vendor pom artifactid jsch Low Vendor pom organization name JCraft,Inc. High Vendor pom url http://www.jcraft.com/jsch/ Highest Vendor pom groupid jcraft Highest Vendor jar package name jcraft Low Product pom organization name JCraft,Inc. Low Product pom name JSch High Product jar package name jsch Low Product file name jsch High Product pom organization url http://www.jcraft.com/ Low Product pom description JSch is a pure Java implementation of SSH2 Medium Product pom groupid jcraft Low Product pom artifactid jsch Highest Product pom url http://www.jcraft.com/jsch/ Medium Version file version 0.1.54 Highest Version pom version 0.1.54 Highest
cpe: cpe:/a:jcraft:jsch:0.1.54 Confidence :Low suppress maven: com.jcraft:jsch:0.1.54 Confidence :High jsp-api-2.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jsp-api-2.1.jarMD5: b8a34113a3a1ce29c8c60d7141f5a704SHA1: 63f943103f250ef1f3a4d5e94d145a0f961f5316SHA256: 545f4e7dc678ffb4cf8bd0fd40b4a4470a409a787c0ea7d0ad2f08d56112987b
Evidence Type Source Name Value Confidence Vendor Manifest extension-name javax.servlet.jsp Medium Vendor pom groupid javax.servlet.jsp Highest Vendor file name jsp-api High Vendor jar package name jsp Low Vendor jar package name servlet Low Vendor central groupid javax.servlet.jsp Highest Vendor Manifest Implementation-Vendor Sun Microsystems, Inc. High Vendor pom artifactid jsp-api Low Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor jar package name javax Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Product Manifest extension-name javax.servlet.jsp Medium Product file name jsp-api High Product jar package name jsp Low Product pom artifactid jsp-api Highest Product jar package name servlet Low Product pom groupid javax.servlet.jsp Low Product Manifest specification-title JavaServer Pages(TM) Specification Medium Product jar package name el Low Product central artifactid jsp-api Highest Version file version 2.1 Highest Version Manifest Implementation-Version 2.1 High Version pom version 2.1 Highest Version central version 2.1 Highest
jsr305-3.0.0.jarDescription:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jsr305-3.0.0.jar
MD5: 195d5db8981fbec5fa18d5df9fad95ed
SHA1: 5871fb60dc68d67da54a663c3fd636a10a532948
SHA256: bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a
Evidence Type Source Name Value Confidence Vendor file name jsr305 High Vendor central groupid com.google.code.findbugs High Vendor pom url http://findbugs.sourceforge.net/ Highest Vendor pom description JSR305 Annotations for Findbugs Medium Vendor pom groupid google.code.findbugs Highest Vendor pom url https://code.google.com/p/jsr-305/ Highest Vendor jar package name javax Low Vendor pom artifactid jsr305 Low Vendor jar package name annotation Low Vendor pom name FindBugs-jsr305 High Product file name jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Product central artifactid jsr305 High Product pom description JSR305 Annotations for Findbugs Medium Product pom groupid google.code.findbugs Low Product pom url https://code.google.com/p/jsr-305/ Medium Product pom artifactid jsr305 Highest Product jar package name annotation Low Product pom name FindBugs-jsr305 High Version pom version 3.0.0 Highest Version file name jsr305 Medium Version central version 3.0.0 High Version pom version 2.0.3 Highest Version file version 3.0.0 Highest Version central version 2.0.3 High
juniversalchardet-1.0.3.jarDescription:
Java port of universalchardet License:
Mozilla Public License 1.1 (MPL 1.1): http://www.mozilla.org/MPL/MPL-1.1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/juniversalchardet-1.0.3.jar
MD5: d9ea0a9a275336c175b343f2e4cd8f27
SHA1: cd49678784c46aa8789c060538e0154013bb421b
SHA256: 757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76
Evidence Type Source Name Value Confidence Vendor file name juniversalchardet High Vendor pom groupid googlecode.juniversalchardet Highest Vendor pom url http://juniversalchardet.googlecode.com/ Highest Vendor jar package name prober Low Vendor jar package name universalchardet Low Vendor jar package name mozilla Low Vendor pom name juniversalchardet High Vendor pom description Java port of universalchardet Medium Vendor pom artifactid juniversalchardet Low Product file name juniversalchardet High Product pom url http://juniversalchardet.googlecode.com/ Medium Product jar package name prober Low Product pom groupid googlecode.juniversalchardet Low Product jar package name universalchardet Low Product pom artifactid juniversalchardet Highest Product pom name juniversalchardet High Product pom description Java port of universalchardet Medium Version file version 1.0.3 Highest Version pom version 1.0.3 Highest
Related Dependencies juniversalchardet-1.0.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/juniversalchardet-1.0.3.jar MD5: d9ea0a9a275336c175b343f2e4cd8f27 SHA1: cd49678784c46aa8789c060538e0154013bb421b SHA256: 757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76 juniversalchardet-1.0.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/juniversalchardet-1.0.3.jar MD5: d9ea0a9a275336c175b343f2e4cd8f27 SHA1: cd49678784c46aa8789c060538e0154013bb421b SHA256: 757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76 maven: com.googlecode.juniversalchardet:juniversalchardet:1.0.3 Confidence :High leveldbjni-all-1.8.jarDescription:
An uber jar which contains all the leveldbjni platform libraries and dependencies License:
http://www.opensource.org/licenses/BSD-3-Clause File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/leveldbjni-all-1.8.jar
MD5: 6944e9bc03c7938868e53c96726ae914
SHA1: 707350a2eeb1fa2ed77a32ddb3893ed308e941db
SHA256: c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl http://fusesource.com/ Low Vendor pom name ${project.artifactId} High Vendor pom description An uber jar which contains all the leveldbjni platform libraries and dependencies Medium Vendor manifest Bundle-Description An uber jar which contains all the leveldbjni platform libraries and dependencies Medium Vendor pom artifactid leveldbjni-all Low Vendor pom parent-artifactid leveldbjni-project Low Vendor file name leveldbjni-all High Vendor pom parent-groupid org.fusesource.leveldbjni Medium Vendor pom groupid fusesource.leveldbjni Highest Vendor Manifest bundle-symbolicname org.fusesource.leveldbjni.leveldbjni-all Medium Vendor Manifest bundle-nativecode META-INF/native/windows32/leveldbjni.dll;osname=Win32;processor=x86,META-INF/native/windows64/leveldbjni.dll;osname=Win32;processor=x86-64,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86-64,META-INF/native/linux32/libleveldbjni.so;osname=Linux;processor=x86,META-INF/native/linux64/libleveldbjni.so;osname=Linux;processor=x86-64 Low Product pom artifactid leveldbjni-all Highest Product pom parent-artifactid leveldbjni-project Medium Product pom groupid fusesource.leveldbjni Low Product pom name ${project.artifactId} High Product manifest Bundle-Description An uber jar which contains all the leveldbjni platform libraries and dependencies Medium Product Manifest Bundle-Name leveldbjni-all Medium Product Manifest bundle-symbolicname org.fusesource.leveldbjni.leveldbjni-all Medium Product pom parent-groupid org.fusesource.leveldbjni Low Product Manifest Implementation-Title LevelDB JNI High Product Manifest bundle-docurl http://fusesource.com/ Low Product pom description An uber jar which contains all the leveldbjni platform libraries and dependencies Medium Product file name leveldbjni-all High Product Manifest bundle-nativecode META-INF/native/windows32/leveldbjni.dll;osname=Win32;processor=x86,META-INF/native/windows64/leveldbjni.dll;osname=Win32;processor=x86-64,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86-64,META-INF/native/linux32/libleveldbjni.so;osname=Linux;processor=x86,META-INF/native/linux64/libleveldbjni.so;osname=Linux;processor=x86-64 Low Version Manifest Implementation-Version 1.8 High Version pom version 1.8 Highest Version file version 1.8 Highest
maven: org.fusesource.leveldbjni:leveldbjni-all:1.8 Confidence :Highcpe: cpe:/a:id:id-software:1.8 Confidence :Low suppress log4j-1.2.17.jarDescription:
Apache Log4j 1.2 License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/log4j-1.2.17.jar
MD5: 04a41f0a068986f0f73485cf507c0f40
SHA1: 5af35056b4d257e4b64b9e8069c0746e8b08629f
SHA256: 1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9
Evidence Type Source Name Value Confidence Vendor pom name Apache Log4j High Vendor pom url http://logging.apache.org/log4j/1.2/ Highest Vendor Manifest bundle-symbolicname log4j Medium Vendor pom organization url http://www.apache.org Medium Vendor pom artifactid log4j Low Vendor manifest: org.apache.log4j Implementation-Vendor "Apache Software Foundation" Medium Vendor Manifest bundle-docurl http://logging.apache.org/log4j/1.2 Low Vendor pom description Apache Log4j 1.2 Medium Vendor pom organization name Apache Software Foundation High Vendor file name log4j High Vendor pom groupid log4j Highest Vendor manifest Bundle-Description Apache Log4j 1.2 Medium Product pom name Apache Log4j High Product manifest: org.apache.log4j Implementation-Title log4j Medium Product pom artifactid log4j Highest Product Manifest bundle-symbolicname log4j Medium Product pom organization url http://www.apache.org Low Product Manifest bundle-docurl http://logging.apache.org/log4j/1.2 Low Product pom groupid log4j Low Product pom description Apache Log4j 1.2 Medium Product pom url http://logging.apache.org/log4j/1.2/ Medium Product Manifest Bundle-Name Apache Log4j Medium Product file name log4j High Product manifest Bundle-Description Apache Log4j 1.2 Medium Product pom organization name Apache Software Foundation Low Version file version 1.2.17 Highest Version pom version 1.2.17 Highest
cpe: cpe:/a:apache:log4j:1.2.17 Confidence :Low suppress maven: log4j:log4j:1.2.17 Confidence :High maven-parent-config-0.3.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/maven-parent-config-0.3.4.jarMD5: aaf25e6f75341a109323d00ed823c596SHA1: b2ac776e18fda81b7e1487d32e13a5618281c4d8SHA256: 9a087f524b7d8f049b49c88e9b097b3101eea624ad04a93c638de63701fa81e4
Evidence Type Source Name Value Confidence Vendor pom artifactid maven-parent-config Low Vendor file name maven-parent-config High Vendor pom groupid de.agilecoders.maven Highest Vendor pom parent-artifactid maven-parent Low Product file name maven-parent-config High Product pom parent-artifactid maven-parent Medium Product pom artifactid maven-parent-config Highest Product pom groupid de.agilecoders.maven Low Version file version 0.3.4 Highest Version pom version 0.3.4 Highest
maven: de.agilecoders.maven:maven-parent-config:0.3.4 Confidence :High modernizr-2.6.2-1.jarDescription:
WebJar for Modernizr License:
MIT License: http://en.wikipedia.org/wiki/MIT_License File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/modernizr-2.6.2-1.jar
MD5: 6fb51714f12c1cc66763fd5467abfdb4
SHA1: 86cc31cc6a32f81be5074f9fa27cf53d5e210198
SHA256: 7076ac7d1e598173386608a207bde0ac0a9bc51f86c4e92583281a69d0abfb63
Evidence Type Source Name Value Confidence Vendor pom description WebJar for Modernizr Medium Vendor file name modernizr High Vendor pom groupid webjars Highest Vendor pom url http://webjars.org Highest Vendor pom artifactid modernizr Low Vendor pom name Modernizr High Product pom groupid webjars Low Product pom artifactid modernizr Highest Product pom description WebJar for Modernizr Medium Product file name modernizr High Product pom name Modernizr High Product pom url http://webjars.org Medium Version file version 2.6.2.1 Highest Version pom version 2.6.2-1 Highest
maven: org.webjars:modernizr:2.6.2-1 Confidence :High neethi-3.1.1.jarDescription:
Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/neethi-3.1.1.jar
MD5: 13dd27a2bd870dfb01d67a086a8c1948
SHA1: 3a942a7921e66bb0081b16cf8f8a68e456b91de1
SHA256: 7f8c00d9bbfbaa97a97a461cdeadb20054b956acb7536782703ca5a9a330ff22
Evidence Type Source Name Value Confidence Vendor file name neethi High Vendor Manifest bundle-symbolicname org.apache.neethi Medium Vendor manifest Bundle-Description Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities. Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor pom url http://ws.apache.org/neethi/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom organization url http://www.apache.org/ Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.neethi Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor pom name Apache Neethi High Vendor pom description Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities. Low Vendor pom artifactid neethi Low Vendor pom organization name The Apache Software Foundation High Product Manifest Bundle-Name Apache Neethi Medium Product file name neethi High Product pom parent-artifactid apache Medium Product Manifest bundle-symbolicname org.apache.neethi Medium Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org/ Low Product pom artifactid neethi Highest Product manifest Bundle-Description Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities. Low Product Manifest specification-title Apache Neethi Medium Product pom parent-groupid org.apache Low Product Manifest Implementation-Title Apache Neethi High Product Manifest bundle-docurl http://www.apache.org/ Low Product pom name Apache Neethi High Product pom groupid apache.neethi Low Product pom url http://ws.apache.org/neethi/ Medium Product pom description Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities. Low Version Manifest Implementation-Version 3.1.1 High Version file version 3.1.1 Highest Version pom version 3.1.1 Highest
maven: org.apache.neethi:neethi:3.1.1 Confidence :Highcpe: cpe:/a:apache:apache_test:3.1.1 Confidence :Low suppress netty-3.6.2.Final.jarDescription:
The Netty project is an effort to provide an asynchronous event-driven
network application framework and tools for rapid development of
maintainable high performance and high scalability protocol servers and
clients. In other words, Netty is a NIO client server framework which
enables quick and easy development of network applications such as protocol
servers and clients. It greatly simplifies and streamlines network
programming such as TCP and UDP socket server.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/netty-3.6.2.Final.jar
MD5: 65546c0885e83ba36f1f4d9ff9f8c776
SHA1: 69be11c61427f0604a30539755add84ad9e37e5e
SHA256: d4ff9f0a2959633e062edd0e678d8187bbe95ad19195384ac524fd41f00f5a44
Evidence Type Source Name Value Confidence Vendor pom artifactid netty Low Vendor pom groupid io.netty Highest Vendor manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor Manifest bundle-symbolicname org.jboss.netty Medium Vendor pom name The Netty Project High Vendor pom organization name The Netty Project High Vendor pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor pom url http://netty.io/ Highest Vendor Manifest bundle-docurl http://netty.io/ Low Vendor file name netty High Vendor pom organization url http://netty.io/ Medium Product Manifest Bundle-Name The Netty Project Medium Product manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product pom artifactid netty Highest Product pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product Manifest bundle-symbolicname org.jboss.netty Medium Product pom groupid io.netty Low Product pom name The Netty Project High Product pom organization name The Netty Project Low Product pom url http://netty.io/ Medium Product pom organization url http://netty.io/ Low Product Manifest bundle-docurl http://netty.io/ Low Product file name netty High Version pom version 3.6.2.Final Highest Version file version 3.6.2 Highest
Published Vulnerabilities CVE-2014-0193 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames. Vulnerable Software & Versions: (show all )
CVE-2014-3488 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message. Vulnerable Software & Versions: (show all )
CVE-2015-2156 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-20 Improper Input Validation
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters. Vulnerable Software & Versions: (show all )
netty-all-4.0.23.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/netty-all-4.0.23.Final.jarMD5: 4725826ca7ba3713db6748ee8f3906c3SHA1: 0294104aaf1781d6a56a07d561e792c5d0c95f45SHA256: 50510e9c9874b539b98ef931fe7eeeb002f6b5b1976ea37669b9493426294561
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid netty-parent Low Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor pom groupid io.netty Highest Vendor pom artifactid netty-all Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor file name netty-all High Vendor pom name Netty/All-in-One High Product pom groupid io.netty Low Product pom parent-artifactid netty-parent Medium Product pom artifactid netty-all Highest Product file name netty-all High Product pom name Netty/All-in-One High Product Manifest Implementation-Title Netty/All-in-One High Version file version 4.0.23 Highest Version Manifest Implementation-Version 4.0.23.Final High Version pom version 4.0.23.Final Highest
Published Vulnerabilities CVE-2015-2156 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-20 Improper Input Validation
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters. Vulnerable Software & Versions: (show all )
CVE-2016-4970 suppress
Severity:High CVSS Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop). Vulnerable Software & Versions: (show all )
objenesis-2.6.jarDescription:
A library for instantiating Java objects License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/objenesis-2.6.jar
MD5: 5ffac3f51405ca9b2915970a224b3e8f
SHA1: 639033469776fd37c08358c6b92a4761feb2af4b
SHA256: 5e168368fbc250af3c79aa5fef0c3467a2d64e5a7bd74005f25d8399aeb0708d
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.objenesis Medium Vendor pom url http://objenesis.org Highest Vendor Manifest specification-vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita Low Vendor manifest Bundle-Description A library for instantiating Java objects Medium Vendor pom parent-artifactid objenesis-parent Low Vendor jar package name objenesis Low Vendor pom groupid objenesis Highest Vendor Manifest Implementation-Vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita High Vendor central groupid org.objenesis Highest Vendor file name objenesis High Vendor Manifest bundle-symbolicname org.objenesis Medium Vendor Manifest Implementation-Vendor-Id org.objenesis Medium Vendor jar package name instantiator Low Vendor pom description A library for instantiating Java objects Medium Vendor pom artifactid objenesis Low Vendor pom name Objenesis High Vendor Manifest implementation-url http://objenesis.org Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom groupid objenesis Low Product Manifest Implementation-Title Objenesis High Product pom parent-artifactid objenesis-parent Medium Product manifest Bundle-Description A library for instantiating Java objects Medium Product Manifest specification-title Objenesis Medium Product pom parent-groupid org.objenesis Low Product Manifest Bundle-Name Objenesis Medium Product pom artifactid objenesis Highest Product pom url http://objenesis.org Medium Product file name objenesis High Product Manifest bundle-symbolicname org.objenesis Medium Product jar package name instantiator Low Product pom description A library for instantiating Java objects Medium Product central artifactid objenesis Highest Product pom name Objenesis High Product Manifest implementation-url http://objenesis.org Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Version Manifest Implementation-Version 2.6 High Version file version 2.6 Highest Version pom version 2.6 Highest Version central version 2.6 Highest
ormlite-core-5.1.jarDescription:
Lightweight Object Relational Model (ORM) for persisting objects to SQL databases. License:
ISC License: http://ormlite.com/docs/license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/ormlite-core-5.1.jar
MD5: 3b5473635934ea282d4fc7a3f562fd72
SHA1: bf7a747016c99ac01577d3268a4ac9c24e94d5de
SHA256: 0a62a2e4d873006d6d4c510441cc3ee3bb58083276b3f97bc4feb13673b16499
Evidence Type Source Name Value Confidence Vendor pom groupid j256.ormlite Highest Vendor pom name ORMLite Core High Vendor pom artifactid ormlite-core Low Vendor pom description Lightweight Object Relational Model (ORM) for persisting objects to SQL databases. Medium Vendor file name ormlite-core High Vendor pom url http://ormlite.sourceforge.net/ Highest Product pom artifactid ormlite-core Highest Product pom name ORMLite Core High Product pom description Lightweight Object Relational Model (ORM) for persisting objects to SQL databases. Medium Product file name ormlite-core High Product pom url http://ormlite.sourceforge.net/ Medium Product pom groupid j256.ormlite Low Version pom version 5.1 Highest Version file version 5.1 Highest
maven: com.j256.ormlite:ormlite-core:5.1 Confidence :High ormlite-jdbc-5.1.jarDescription:
Lightweight Object Relational Model (ORM) JDBC classes License:
ISC License: http://ormlite.com/docs/license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/ormlite-jdbc-5.1.jar
MD5: 458cf324931829af2092b22af75bf926
SHA1: 8c5fac7d12ee7d3c82a4eb01534779fc66f75d4a
SHA256: 5e921c6b729dab93c60839e181765ab3afdbcf7e77401b1c7feac401acd40862
Evidence Type Source Name Value Confidence Vendor pom groupid j256.ormlite Highest Vendor pom artifactid ormlite-jdbc Low Vendor file name ormlite-jdbc High Vendor pom name ORMLite JDBC High Vendor pom description Lightweight Object Relational Model (ORM) JDBC classes Medium Vendor pom url http://ormlite.sourceforge.net/ Highest Product file name ormlite-jdbc High Product pom name ORMLite JDBC High Product pom artifactid ormlite-jdbc Highest Product pom description Lightweight Object Relational Model (ORM) JDBC classes Medium Product pom url http://ormlite.sourceforge.net/ Medium Product pom groupid j256.ormlite Low Version pom version 5.1 Highest Version file version 5.1 Highest
maven: com.j256.ormlite:ormlite-jdbc:5.1 Confidence :High paranamer-2.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/paranamer-2.3.jarMD5: e3060bebfe449abeb277e77c4c3388cbSHA1: 4a85963a752c0a2f715c3924bfc686865e7e1bc6SHA256: e93f50ae4d0de11080677f44ab268691266fed2b3ff7bc6fd97636febae7d8fe
Evidence Type Source Name Value Confidence Vendor jar package name thoughtworks Low Vendor jar package name paranamer Low Vendor pom artifactid paranamer Low Vendor pom name ParaNamer Core High Vendor pom groupid thoughtworks.paranamer Highest Vendor file name paranamer High Vendor pom parent-artifactid paranamer-parent Low Vendor pom parent-groupid com.thoughtworks.paranamer Medium Product jar package name paranamer Low Product pom name ParaNamer Core High Product pom groupid thoughtworks.paranamer Low Product file name paranamer High Product pom parent-groupid com.thoughtworks.paranamer Low Product pom artifactid paranamer Highest Product pom parent-artifactid paranamer-parent Medium Version pom version 2.3 Highest Version file version 2.3 Highest
maven: com.thoughtworks.paranamer:paranamer:2.3 Confidence :High protobuf-java-2.5.0.jarDescription:
Protocol Buffers are a way of encoding structured data in an efficient yet
extensible format.
License:
New BSD license: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/protobuf-java-2.5.0.jar
MD5: a44473b98947e2a54c54e0db1387d137
SHA1: a10732c76bfacdbd633a7eb0f7968b1059a65dfa
SHA256: e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74
Evidence Type Source Name Value Confidence Vendor file name protobuf-java High Vendor Manifest bundle-symbolicname com.google.protobuf Medium Vendor pom parent-groupid com.google Medium Vendor pom description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Low Vendor pom name Protocol Buffer Java API High Vendor Manifest bundle-docurl http://code.google.com/p/protobuf Low Vendor manifest Bundle-Description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Medium Vendor pom artifactid protobuf-java Low Vendor pom url http://code.google.com/p/protobuf Highest Vendor pom groupid google.protobuf Highest Vendor pom parent-artifactid google Low Product Manifest bundle-symbolicname com.google.protobuf Medium Product pom description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Low Product pom name Protocol Buffer Java API High Product manifest Bundle-Description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Medium Product pom artifactid protobuf-java Highest Product pom parent-groupid com.google Low Product pom groupid google.protobuf Low Product pom parent-artifactid google Medium Product file name protobuf-java High Product Manifest Bundle-Name Protocol Buffer Java API Medium Product Manifest bundle-docurl http://code.google.com/p/protobuf Low Product pom url http://code.google.com/p/protobuf Medium Version file version 2.5.0 Highest Version pom version 2.5.0 Highest
Related Dependencies protobuf-java-2.5.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/protobuf-java-2.5.0.jar MD5: a44473b98947e2a54c54e0db1387d137 SHA1: a10732c76bfacdbd633a7eb0f7968b1059a65dfa SHA256: e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74 Published Vulnerabilities CVE-2015-5237 suppress
Severity:Medium CVSS Score: 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. Vulnerable Software & Versions: (show all )
reflections-0.9.8.jarDescription:
Reflections - a Java runtime metadata analysis File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/reflections-0.9.8.jarMD5: 46192a2539fbe9e1fb69f8e5764e3aaaSHA1: f723abb59bf512952bfc503838f70f81487a6993SHA256: 790492c3d177c4121d7ed84edad57c591569d124a58a5c503420004e7a95f9d6
Evidence Type Source Name Value Confidence Vendor pom artifactid reflections Low Vendor pom parent-groupid org.reflections Medium Vendor pom description Reflections - a Java runtime metadata analysis Medium Vendor pom url http://code.google.com/p/reflections/ Highest Vendor file name reflections High Vendor pom name Reflections High Vendor pom parent-artifactid reflections-parent Low Vendor pom groupid reflections Highest Vendor jar package name reflections Low Product pom url http://code.google.com/p/reflections/ Medium Product pom description Reflections - a Java runtime metadata analysis Medium Product file name reflections High Product pom artifactid reflections Highest Product pom parent-artifactid reflections-parent Medium Product pom groupid reflections Low Product pom name Reflections High Product pom parent-groupid org.reflections Low Version file version 0.9.8 Highest Version pom version 0.9.8 Highest
maven: org.reflections:reflections:0.9.8 Confidence :High servlet-api-2.5-20081211.jarDescription:
Servlet Specification API License:
http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/servlet-api-2.5-20081211.jar
MD5: 083898d794cc261853922ca941aee390
SHA1: 22bff70037e1e6fa7e6413149489552ee2064702
SHA256: 068756096996fe00f604ac3b6672d6f663dc777ea4a83056e240d0456e77e472
Evidence Type Source Name Value Confidence Vendor pom groupid mortbay.jetty Highest Vendor pom description Servlet Specification API Medium Vendor Manifest bundle-docurl http://www.mortbay.com Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor pom parent-groupid org.mortbay.jetty Medium Vendor pom name Servlet Specification API High Vendor pom artifactid servlet-api Low Vendor manifest Bundle-Description Servlet Specification API Medium Vendor Manifest originally-created-by 1.5.0_13 (Sun Microsystems Inc.) Low Vendor Manifest bundle-symbolicname org.mortbay.jetty.servlet-api Medium Vendor file name servlet-api High Vendor pom parent-artifactid jetty-parent Low Vendor Manifest Implementation-Vendor JCP High Product pom parent-artifactid jetty-parent Medium Product pom description Servlet Specification API Medium Product Manifest bundle-docurl http://www.mortbay.com Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product pom name Servlet Specification API High Product Manifest Bundle-Name Servlet Specification API Medium Product pom groupid mortbay.jetty Low Product manifest Bundle-Description Servlet Specification API Medium Product Manifest originally-created-by 1.5.0_13 (Sun Microsystems Inc.) Low Product pom parent-groupid org.mortbay.jetty Low Product Manifest bundle-symbolicname org.mortbay.jetty.servlet-api Medium Product file name servlet-api High Product pom artifactid servlet-api Highest Version file version 2.5.20081211 Highest Version pom version 2.5-20081211 Highest
cpe: cpe:/a:mortbay:jetty:2.5.200812 Confidence :Low suppress maven: org.mortbay.jetty:servlet-api:2.5-20081211 Confidence :Highcpe: cpe:/a:mortbay_jetty:jetty:2.5.200812 Confidence :Low suppress cpe: cpe:/a:jetty:jetty:2.5.200812 Confidence :Low suppress Published Vulnerabilities CVE-2005-3747 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758. Vulnerable Software & Versions: (show all )
CVE-2007-5615 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-94 Improper Control of Generation of Code ('Code Injection')
CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Vulnerable Software & Versions:
CVE-2009-1523 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI. Vulnerable Software & Versions: (show all )
CVE-2009-1524 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character. Vulnerable Software & Versions: (show all )
CVE-2011-4461 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-310 Cryptographic Issues
Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. Vulnerable Software & Versions: (show all )
servlet-api-2.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/servlet-api-2.5.jarMD5: 69ca51af4e9a67a1027a7f95b52c3e8fSHA1: 5959582d97d8b61f4d154ca9e495aafd16726e34SHA256: c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc
Evidence Type Source Name Value Confidence Vendor pom artifactid servlet-api-2.5 Low Vendor central groupid javax.servlet High Vendor Manifest extension-name servlet-api Medium Vendor pom parent-groupid org.zenframework.z8.dependencies Medium Vendor pom groupid javax.servlet Highest Vendor pom groupid zenframework.z8.dependencies.servlet Highest Vendor central groupid org.zenframework.z8.dependencies.servlet High Vendor pom artifactid servlet-api Low Vendor Manifest specification-vendor Sun Microsystems Inc Low Vendor file name servlet-api High Vendor jar package name servlet Low Vendor Manifest Implementation-Vendor Sun Microsystems Inc High Vendor pom parent-artifactid z8-dependencies Low Vendor jar package name javax Low Vendor pom name Zenframework Z8 Dependencies - Servlet - servlet-api-2.5 High Product central artifactid servlet-api High Product pom artifactid servlet-api-2.5 Highest Product Manifest extension-name servlet-api Medium Product pom parent-groupid org.zenframework.z8.dependencies Low Product pom groupid javax.servlet Low Product Manifest specification-title A component of the Glassfish Application Server Medium Product file name servlet-api High Product central artifactid servlet-api-2.5 High Product jar package name servlet Low Product pom artifactid servlet-api Highest Product pom parent-artifactid z8-dependencies Medium Product pom groupid zenframework.z8.dependencies.servlet Low Product pom name Zenframework Z8 Dependencies - Servlet - servlet-api-2.5 High Product Manifest Implementation-Title High Version central version 2.0 High Version Manifest Implementation-Version 2.5 High Version file version 2.5 Highest Version pom version 2.0 Highest Version pom version 2.5 Highest Version central version 2.5 High
skb-interfaces-0.0.1.jarDescription:
Set of interfaces used by other SKB projects. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/skb-interfaces-0.0.1.jar
MD5: 7e9fa0690b39a5ffa26ddaeb33793609
SHA1: 78940adb54f8dbcebb9b6166ebd0ff52ca124b32
SHA256: b38707ea1b09fc1a8229b925fd171efa597741a69664de2cba9f68e44fed3667
Evidence Type Source Name Value Confidence Vendor jar package name vandermeer Low Vendor jar package name skb Low Vendor pom url http://www.vandermeer.de/projects/skb/java/core/interfaces Highest Vendor file name skb-interfaces High Vendor pom groupid de.vandermeer Highest Vendor pom artifactid skb-interfaces Low Vendor pom name SKB Interfaces High Vendor pom description Set of interfaces used by other SKB projects. Medium Vendor jar package name de Low Product pom groupid de.vandermeer Low Product pom artifactid skb-interfaces Highest Product jar package name vandermeer Low Product jar package name skb Low Product pom url http://www.vandermeer.de/projects/skb/java/core/interfaces Medium Product file name skb-interfaces High Product pom name SKB Interfaces High Product pom description Set of interfaces used by other SKB projects. Medium Product jar package name interfaces Low Version file version 0.0.1 Highest Version pom version 0.0.1 Highest
maven: de.vandermeer:skb-interfaces:0.0.1 Confidence :High slf4j-api-1.7.25.jarDescription:
The slf4j API File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/slf4j-api-1.7.25.jarMD5: caafe376afb7086dcbee79f780394ca3SHA1: da76ca59f6a57ee3102f8f9bd9cee742973efa8aSHA256: 18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom artifactid slf4j-api Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom parent-artifactid slf4j-parent Low Vendor manifest Bundle-Description The slf4j API Medium Vendor pom description The slf4j API Medium Vendor pom name SLF4J API Module High Vendor file name slf4j-api High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Bundle-Name slf4j-api Medium Product pom parent-groupid org.slf4j Low Product pom description The slf4j API Medium Product Manifest Implementation-Title slf4j-api High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom artifactid slf4j-api Highest Product manifest Bundle-Description The slf4j API Medium Product pom name SLF4J API Module High Product file name slf4j-api High Product pom groupid slf4j Low Version file version 1.7.25 Highest Version Manifest Implementation-Version 1.7.25 High Version pom version 1.7.25 Highest
Related Dependencies slf4j-log4j12-1.7.25.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/slf4j-log4j12-1.7.25.jar MD5: 7f16ba3b1ab6a781c3f6887eae7b608d SHA1: 110cefe2df103412849d72ef7a67e4e91e4266b4 SHA256: ddb343954deb6f046f862606c534178730c02ed23d0b7f6ca1012c1e3fa74273 slf4j-api-1.7.25.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-rabbitmq/slf4j-api-1.7.25.jar MD5: caafe376afb7086dcbee79f780394ca3 SHA1: da76ca59f6a57ee3102f8f9bd9cee742973efa8a SHA256: 18c4a0095d5c1da6b817592e767bb23d29dd2f560ad74df75ff3961dbde25b79 maven: org.slf4j:slf4j-api:1.7.25 Confidence :Highcpe: cpe:/a:slf4j:slf4j:1.7.25 Confidence :Low suppress snappy-java-1.0.4.1.jarDescription:
snappy-java: A fast compression/decompression library License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/snappy-java-1.0.4.1.jar
MD5: 3fad0dcafbced1e3475e3ad7bdd3236b
SHA1: f88b89a5a21a466aeb0ecf0c063605bd584b4947
SHA256: 52533e94f79beacb9862bac33fa2e2fc724a8cfb2a739c33ae4ea10515f2bb86
Evidence Type Source Name Value Confidence Vendor pom organization url http://www.xerial.org/ Medium Vendor pom organization name xerial.org High Vendor pom name Snappy for Java High Vendor pom url http://code.google.com/p/snappy-java/ Highest Vendor file name snappy-java High Vendor Manifest bundle-docurl http://www.xerial.org/ Low Vendor pom description snappy-java: A fast compression/decompression library Medium Vendor Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Vendor pom artifactid snappy-java Low Vendor manifest Bundle-Description snappy-java: A fast compression/decompression library Medium Vendor pom groupid xerial.snappy Highest Product pom name Snappy for Java High Product file name snappy-java High Product Manifest bundle-docurl http://www.xerial.org/ Low Product Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Product manifest Bundle-Description snappy-java: A fast compression/decompression library Medium Product pom organization name xerial.org Low Product pom organization url http://www.xerial.org/ Low Product pom groupid xerial.snappy Low Product Manifest Bundle-Name org.xerial.snappy.snappy-java Medium Product pom url http://code.google.com/p/snappy-java/ Medium Product pom artifactid snappy-java Highest Product pom description snappy-java: A fast compression/decompression library Medium Version file version 1.0.4.1 Highest Version pom version 1.0.4.1 Highest
maven: org.xerial.snappy:snappy-java:1.0.4.1 Confidence :High spring-core-4.0.9.RELEASE.jarDescription:
Spring Core License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-core-4.0.9.RELEASE.jar
MD5: 34374caaee3214e46c500e00edcd54d8
SHA1: a7aea1dd2c5cde050d2d62833ec397d899a00854
SHA256: 8597062cf4ca7fe33780892c1fd7824d4d471b0403cc8a8ac90ef52eb0ee8e7e
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor pom description Spring Core Medium Vendor hint analyzer vendor vmware High Vendor hint analyzer vendor pivotal software High Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url http://projects.spring.io/spring-framework Medium Vendor pom artifactid spring-core Low Vendor jar package name springframework Low Vendor pom url spring-projects/spring-framework Highest Vendor hint analyzer vendor pivotal software Highest Vendor central groupid org.springframework Highest Vendor hint analyzer vendor SpringSource High Vendor pom groupid springframework Highest Product Manifest Implementation-Title spring-core High Product file name spring-core High Product pom description Spring Core Medium Product pom artifactid spring-core Highest Product pom organization url http://projects.spring.io/spring-framework Low Product pom name Spring Core High Product pom groupid springframework Low Product central artifactid spring-core Highest Product pom organization name Spring IO Low Product pom url spring-projects/spring-framework High Product hint analyzer product springsource_spring_framework High Version Manifest Implementation-Version 4.0.9.RELEASE High Version pom version 4.0.9.RELEASE Highest Version central version 4.0.9.RELEASE Highest
Related Dependencies spring-beans-4.0.9.RELEASE.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-beans-4.0.9.RELEASE.jar MD5: 43e6481f6d988745e258fdc8e7a42ff2 SHA1: 295ecbf61e2313b4472947a1b3084022ba09e524 SHA256: 9342697788453bb1e6d295f50514220c7e79e0164230d23ac556dcff6f7b3016 cpe: cpe:/a:pivotal_software:spring_framework:4.0.9 maven: org.springframework:spring-beans:4.0.9.RELEASE ✓ spring-aop-4.0.9.RELEASE.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-aop-4.0.9.RELEASE.jar MD5: 13c223f841457cb850543c05bf4acfe4 SHA1: f1a538c0ba95442ccf9a5e897d9a9895a637c539 SHA256: 338240634411e8f58580b2b14b126d7fc3ef6f211b5e451ba6a339e783a4c70e cpe: cpe:/a:pivotal_software:spring_framework:4.0.9 maven: org.springframework:spring-aop:4.0.9.RELEASE ✓ spring-expression-4.0.9.RELEASE.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-expression-4.0.9.RELEASE.jar MD5: 1a5f95b7bdbfc3f87be037f0a55c51b6 SHA1: 256abd04e9c25f84ef98b18e4b89051b8ec68ba2 SHA256: e38de00df35273a7e93df93432d5a6c6244590c04b8a11f72ec1ded06e798b45 cpe: cpe:/a:pivotal_software:spring_framework:4.0.9 maven: org.springframework:spring-expression:4.0.9.RELEASE ✓ spring-context-4.0.9.RELEASE.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-context-4.0.9.RELEASE.jar MD5: 68045a9926940486c096465f24998a6d SHA1: 13015a0ff2a9bed4686a0f1d8d85a2ae57034e3a SHA256: 41562f8a29cde8206a18d0963e80227f64eb33f36f23aacbdd4878203936f12f cpe: cpe:/a:pivotal_software:spring_framework:4.0.9 maven: org.springframework:spring-context:4.0.9.RELEASE ✓ spring-web-4.0.9.RELEASE.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/spring-web-4.0.9.RELEASE.jar MD5: fe6dfca581234a6590162a6cb2dd17ef SHA1: eacab4077490a94eb0d8e24bedc457bced1c19b3 SHA256: a9d8836e808942db6a362bcbf5cfbb69f01be0b0351ba4abcd72462b21c55de4 cpe: cpe:/a:pivotal_software:spring_framework:4.0.9 maven: org.springframework:spring-web:4.0.9.RELEASE ✓ Published Vulnerabilities CVE-2015-5211 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-20 Improper Input Validation
Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflected File Download (RFD) attack. The attack involves a malicious user crafting a URL with a batch script extension that results in the response being downloaded rather than rendered and also includes some input reflected in the response. Vulnerable Software & Versions: (show all )
CVE-2016-5007 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-264 Permissions, Privileges, and Access Controls
Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for mapping requests to controllers respectively. Differences in the strictness of the pattern matching mechanisms, for example with regards to space trimming in path segments, can lead Spring Security to not recognize certain paths as not protected that are in fact mapped to Spring MVC controllers that should be protected. The problem is compounded by the fact that the Spring Framework provides richer features with regards to pattern matching as well as by the fact that pattern matching in each Spring Security and the Spring Framework can easily be customized creating additional differences. Vulnerable Software & Versions: (show all )
CVE-2018-1270 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-358 Improperly Implemented Security Check for Standard
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. Vulnerable Software & Versions: (show all )
CVE-2018-1271 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack. Vulnerable Software & Versions: (show all )
CVE-2018-1272 suppress
Severity:Medium CVSS Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote client, and then uses that input to make a multipart request to another server (server B), it can be exposed to an attack, where an extra multipart is inserted in the content of the request from server A, causing server B to use the wrong value for a part it expects. This could to lead privilege escalation, for example, if the part content represents a username or user roles. Vulnerable Software & Versions: (show all )
stax2-api-3.1.4.jarDescription:
tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.
License:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/stax2-api-3.1.4.jar
MD5: c08e89de601b0a78f941b2c29db565c3
SHA1: ac19014b1e6a7c08aad07fe114af792676b685b7
SHA256: 86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Vendor pom artifactid stax2-api Low Vendor pom organization url http://fasterxml.com Medium Vendor pom name Stax2 API High Vendor pom description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Vendor Manifest bundle-docurl http://fasterxml.com Low Vendor pom url http://wiki.fasterxml.com/WoodstoxStax2 Highest Vendor Manifest bundle-symbolicname stax2-api Medium Vendor pom groupid codehaus.woodstox Highest Vendor file name stax2-api High Vendor pom organization name fasterxml.com High Product pom name Stax2 API High Product Manifest bundle-docurl http://fasterxml.com Low Product pom organization name fasterxml.com Low Product Manifest bundle-symbolicname stax2-api Medium Product file name stax2-api High Product manifest Bundle-Description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Product pom description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Product pom url http://wiki.fasterxml.com/WoodstoxStax2 Medium Product pom organization url http://fasterxml.com Low Product pom groupid codehaus.woodstox Low Product Manifest Bundle-Name Stax2 API Medium Product pom artifactid stax2-api Highest Version pom version 3.1.4 Highest Version file version 3.1.4 Highest
Related Dependencies stax2-api-3.1.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/stax2-api-3.1.4.jar MD5: c08e89de601b0a78f941b2c29db565c3 SHA1: ac19014b1e6a7c08aad07fe114af792676b685b7 SHA256: 86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e stax2-api-3.1.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/stax2-api-3.1.4.jar MD5: c08e89de601b0a78f941b2c29db565c3 SHA1: ac19014b1e6a7c08aad07fe114af792676b685b7 SHA256: 86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e maven: org.codehaus.woodstox:stax2-api:3.1.4 Confidence :High t-digest-3.2.jarDescription:
Data structure which allows accurate estimation of quantiles and related rank statistics License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/t-digest-3.2.jar
MD5: 4b8777b2b4e278aace50b2c068ce7c63
SHA1: 2ab94758b0276a8a26102adf8d528cf6d0567b9a
SHA256: 03db291a8887b474f90db67bfb1f92d084e990150037e231babbb374ee11d7c3
Evidence Type Source Name Value Confidence Vendor file name t-digest High Vendor pom groupid tdunning Highest Vendor pom artifactid t-digest Low Vendor jar package name math Low Vendor jar package name tdunning Low Vendor jar package name stats Low Vendor pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Vendor pom url tdunning/t-digest Highest Vendor pom name T-Digest High Product file name t-digest High Product jar package name math Low Product pom groupid tdunning Low Product pom url tdunning/t-digest High Product jar package name stats Low Product pom artifactid t-digest Highest Product pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Product pom name T-Digest High Version file version 3.2 Highest Version pom version 3.2 Highest
maven: com.tdunning:t-digest:3.2 Confidence :High tika-core-1.19.1.jarDescription:
This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also
includes the core facades for the Tika API.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/tika-core-1.19.1.jar
MD5: c69747bc68274128fb7b8db0a6e3795a
SHA1: c1f075aa01586c2c28a249ad60bcfb733b69b866
SHA256: 2015261cecdbcb2a9596e418ed2e6d4bb98fb2bd690b360840677c38b5198e25
Evidence Type Source Name Value Confidence Vendor pom organization url http://www.apache.org Medium Vendor Manifest bundle-docurl http://tika.apache.org/ Low Vendor Manifest Implementation-Vendor-Id org.apache.tika Medium Vendor pom parent-artifactid tika-parent Low Vendor pom name Apache Tika core High Vendor Manifest automatic-module-name org.apache.tika.core Medium Vendor pom parent-groupid org.apache.tika Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor Manifest implementation-url http://tika.apache.org/ Low Vendor Manifest bundle-symbolicname org.apache.tika.core Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor pom groupid apache.tika Highest Vendor manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor pom artifactid tika-core Low Vendor pom url http://tika.apache.org/ Highest Vendor file name tika-core High Vendor pom organization name The Apache Software Foundation High Product Manifest bundle-docurl http://tika.apache.org/ Low Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org Low Product pom parent-groupid org.apache.tika Low Product pom name Apache Tika core High Product Manifest automatic-module-name org.apache.tika.core Medium Product pom url http://tika.apache.org/ Medium Product pom artifactid tika-core Highest Product pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest implementation-url http://tika.apache.org/ Low Product Manifest bundle-symbolicname org.apache.tika.core Medium Product pom groupid apache.tika Low Product Manifest Implementation-Title Apache Tika core High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom parent-artifactid tika-parent Medium Product Manifest Bundle-Name Apache Tika core Medium Product manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest specification-title Apache Tika core Medium Product file name tika-core High Version file version 1.19.1 Highest Version Manifest Implementation-Version 1.19.1 High Version pom version 1.19.1 Highest
cpe: cpe:/a:apache:tika:1.19.1 Confidence :Low suppress maven: org.apache.tika:tika-core:1.19.1 Confidence :High typeaheadjs-0.9.3.jarDescription:
WebJar for typeahead.js License:
MIT: https://github.com/twitter/typeahead.js/blob/master/LICENSE File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/typeaheadjs-0.9.3.jar
MD5: ed3081f15195e21c9b0a76f9bef9e405
SHA1: f7c38c931dcdb7bff0e309f9dcdd6f4281200440
SHA256: 36f4ee8f639bf7ed8f155d4c24a1d5d10c9f13104909be7486825c7555ba6974
Evidence Type Source Name Value Confidence Vendor pom artifactid typeaheadjs Low Vendor pom description WebJar for typeahead.js Medium Vendor pom groupid webjars Highest Vendor pom url http://webjars.org Highest Vendor pom name typeahead.js High Vendor file name typeaheadjs High Product pom groupid webjars Low Product pom artifactid typeaheadjs Highest Product pom description WebJar for typeahead.js Medium Product pom name typeahead.js High Product file name typeaheadjs High Product pom url http://webjars.org Medium Version file version 0.9.3 Highest Version pom version 0.9.3 Highest
maven: org.webjars:typeaheadjs:0.9.3 Confidence :High warc-hadoop-0.1.0.jarDescription:
Java library for working with WARC (Web Archive) files in Hadoop MapReduce License:
The MIT License: http://opensource.org/licenses/MIT File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/warc-hadoop-0.1.0.jar
MD5: 9955c8f618c29f2013d23e3f81030132
SHA1: 5a2417e9519c52c872cbd51189664fff1d874f52
SHA256: 7c4b4a02e74a00b35086772898654349e6bce0e00d0388e335143dac933cb055
Evidence Type Source Name Value Confidence Vendor central groupid com.martinkl.warc Highest Vendor file name warc-hadoop High Vendor pom name WARC Input and Output Formats for Hadoop High Vendor jar package name martinkl Low Vendor pom artifactid warc-hadoop Low Vendor jar package name warc Low Vendor pom groupid martinkl.warc Highest Vendor pom url ept/warc-hadoop Highest Vendor pom description Java library for working with WARC (Web Archive) files in Hadoop MapReduce Medium Product file name warc-hadoop High Product pom name WARC Input and Output Formats for Hadoop High Product pom artifactid warc-hadoop Highest Product pom url ept/warc-hadoop High Product jar package name warc Low Product central artifactid warc-hadoop Highest Product pom groupid martinkl.warc Low Product pom description Java library for working with WARC (Web Archive) files in Hadoop MapReduce Medium Version file version 0.1.0 Highest Version pom version 0.1.0 Highest Version central version 0.1.0 Highest
webarchive-commons-1.1.5.jarLicense:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/webarchive-commons-1.1.5.jar
MD5: d0fe6b35ec17fd60ed6bbc455d48ac6c
SHA1: fdb1064a537e598cab385f3eaf8e54c89a49fa35
SHA256: 537db6f6450df5ef2d94bc0a11fb158bb75c0c2fb9855e62045fc6eab4ddf0ea
Evidence Type Source Name Value Confidence Vendor pom groupid netpreserve.commons Highest Vendor pom organization url http://netpreserve.org/ Medium Vendor pom artifactid webarchive-commons Low Vendor jar package name archive Low Vendor pom name webarchive-commons High Vendor file name webarchive-commons High Vendor pom organization name The International Internet Preservation Consortium High Vendor pom url iipc/webarchive-commons Highest Product pom url iipc/webarchive-commons High Product pom artifactid webarchive-commons Highest Product pom organization name The International Internet Preservation Consortium Low Product pom name webarchive-commons High Product file name webarchive-commons High Product pom groupid netpreserve.commons Low Product pom organization url http://netpreserve.org/ Low Version pom version 1.1.5 Highest Version file version 1.1.5 Highest
maven: org.netpreserve.commons:webarchive-commons:1.1.5 Confidence :High wicket-bootstrap-core-0.9.2.jarDescription:
wicket with twitter bootstrap integration License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-bootstrap-core-0.9.2.jar
MD5: 526b085ebd563375c9b920f80734f149
SHA1: 9860c6da4ee063cf64b83d9678bfe17bae7a4d5c
SHA256: 2591413c23e927bd17f87892d44de6d8341c9d02791087866ea002ac698b2e00
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description wicket with twitter bootstrap integration Medium Vendor Manifest bundle-symbolicname wicket-bootstrap-core Medium Vendor file name wicket-bootstrap-core High Vendor Manifest bundle-docurl https://agile-coders.github.com/ Low Vendor pom name bootstrap-core High Vendor pom parent-artifactid bootstrap-parent Low Vendor pom groupid de.agilecoders.wicket Highest Vendor Manifest implementation-build ${buildNumber} Low Vendor Manifest Implementation-Vendor-Id de.agilecoders.wicket Medium Vendor pom artifactid wicket-bootstrap-core Low Vendor Manifest Implementation-Vendor AgileCoders High Product manifest Bundle-Description wicket with twitter bootstrap integration Medium Product Manifest bundle-symbolicname wicket-bootstrap-core Medium Product file name wicket-bootstrap-core High Product Manifest bundle-docurl https://agile-coders.github.com/ Low Product Manifest Bundle-Name bootstrap-core Medium Product pom parent-artifactid bootstrap-parent Medium Product pom name bootstrap-core High Product Manifest Implementation-Title bootstrap-core High Product pom artifactid wicket-bootstrap-core Highest Product Manifest implementation-build ${buildNumber} Low Product pom groupid de.agilecoders.wicket Low Version pom version 0.9.2 Highest Version Manifest Implementation-Version 0.9.2 High Version file version 0.9.2 Highest
maven: de.agilecoders.wicket:wicket-bootstrap-core:0.9.2 Confidence :High wicket-bootstrap-extensions-0.9.2.jarDescription:
wicket with twitter bootstrap integration License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-bootstrap-extensions-0.9.2.jar
MD5: 848c862ad76f24f425718a999ae7ff2f
SHA1: 7dadadc64d2f8db8b4dd4fc2df910f693cfb9006
SHA256: 04d308a2694ab8bfe1915e3a8855e05de0240c88f8ae1e41c3395a071774574d
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description wicket with twitter bootstrap integration Medium Vendor pom name bootstrap-extensions High Vendor Manifest bundle-docurl https://agile-coders.github.com/ Low Vendor pom artifactid wicket-bootstrap-extensions Low Vendor Manifest bundle-symbolicname wicket-bootstrap-extensions Medium Vendor pom parent-artifactid bootstrap-parent Low Vendor pom groupid de.agilecoders.wicket Highest Vendor Manifest implementation-build ${buildNumber} Low Vendor Manifest Implementation-Vendor-Id de.agilecoders.wicket Medium Vendor file name wicket-bootstrap-extensions High Vendor Manifest Implementation-Vendor AgileCoders High Product manifest Bundle-Description wicket with twitter bootstrap integration Medium Product pom name bootstrap-extensions High Product Manifest bundle-docurl https://agile-coders.github.com/ Low Product pom parent-artifactid bootstrap-parent Medium Product Manifest bundle-symbolicname wicket-bootstrap-extensions Medium Product Manifest implementation-build ${buildNumber} Low Product Manifest Bundle-Name bootstrap-extensions Medium Product Manifest Implementation-Title bootstrap-extensions High Product pom artifactid wicket-bootstrap-extensions Highest Product file name wicket-bootstrap-extensions High Product pom groupid de.agilecoders.wicket Low Version pom version 0.9.2 Highest Version Manifest Implementation-Version 0.9.2 High Version file version 0.9.2 Highest
maven: de.agilecoders.wicket:wicket-bootstrap-extensions:0.9.2 Confidence :High wicket-core-6.17.0.jarDescription:
Wicket is a Java web application framework that takes simplicity,
separation of concerns and ease of development to a whole new level.
Wicket pages can be mocked up, previewed and later revised using
standard WYSIWYG HTML design tools. Dynamic content processing and
form handling is all handled in Java code using a first-class
component model backed by POJO data beans that can easily be
persisted using your favorite technology.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-core-6.17.0.jar
MD5: 71af9221838bf894131ed1ea48e48f4b
SHA1: 0140e866539373b1cf774b65b215cfb276431a31
SHA256: 007fd8d58f81f5e689a5684f1778c62344b57f9c66d9d85dab8f2ba0acc5017d
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.wicket Medium Vendor pom parent-artifactid wicket-parent Low Vendor Manifest bundle-symbolicname org.apache.wicket.core Medium Vendor pom name Wicket Core High Vendor file name wicket-core High Vendor Manifest specification-vendor Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.wicket Medium Vendor pom groupid apache.wicket Highest Vendor pom description Wicket is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing and form handling is all handled in Java code using a first-class component model backed by POJO data beans that can easily be persisted using your favorite technology. Low Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor pom artifactid wicket-core Low Vendor Manifest bundle-docurl http://apache.org Low Vendor manifest Bundle-Description Wicket is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing and form handling is all handled in Java code using a first-class component model backed by POJO data beans that can easily be persisted using your favorite technology. Low Product Manifest bundle-symbolicname org.apache.wicket.core Medium Product pom name Wicket Core High Product pom parent-artifactid wicket-parent Medium Product file name wicket-core High Product Manifest specification-title Wicket Core Medium Product pom description Wicket is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing and form handling is all handled in Java code using a first-class component model backed by POJO data beans that can easily be persisted using your favorite technology. Low Product Manifest Bundle-Name Wicket Core Medium Product Manifest Implementation-Title Wicket Core High Product pom parent-groupid org.apache.wicket Low Product pom artifactid wicket-core Highest Product Manifest bundle-docurl http://apache.org Low Product manifest Bundle-Description Wicket is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing and form handling is all handled in Java code using a first-class component model backed by POJO data beans that can easily be persisted using your favorite technology. Low Product pom groupid apache.wicket Low Version file version 6.17.0 Highest Version Manifest Implementation-Version 6.17.0 High Version pom version 6.17.0 Highest
Related Dependencies wicket-spring-6.17.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-spring-6.17.0.jar MD5: 22ca6316e3d18748677a54651c125ea9 SHA1: 35030c73c429c86d8b1882eb8a1d6f32bcc9c61a SHA256: ab59b276c723b1a2f19a88c8423610cdd98d8c496631e6b3d4eca39bb6fdae8b cpe: cpe:/a:apache:wicket:6.17.0 wicket-ioc-6.17.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-ioc-6.17.0.jar MD5: e7b29d229925e81ee291a9727c31c901 SHA1: 01084831c48aef413cac092415521be4379d53db SHA256: f009591a4f64bb943cfd1e3d6b0b7afb357382d9d065ddb0345e83269fdc8eae cpe: cpe:/a:apache:wicket:6.17.0 wicket-util-6.17.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-util-6.17.0.jar MD5: 81dd698d6e3c93536aaa040bd4a079ff SHA1: 951a66e1ff4a740fe743d7365c6ce318762b4ff0 SHA256: 3c545ee2a1bf6de1cca07e57054add8835f11602b3b5288787005afae7728359 cpe: cpe:/a:apache:wicket:6.17.0 wicket-request-6.17.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-request-6.17.0.jar MD5: 1366b9da16a11d1ac3938dc881ba67a6 SHA1: 4770588ce8ecd6babb281a9c605267fd8c7a547d SHA256: 7dc87c11f655f23aca217487ed037f32a384c9e6286e84162de25e34d9d30ed2 cpe: cpe:/a:apache:wicket:6.17.0 Published Vulnerabilities CVE-2014-7808 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-310 Cryptographic Issues
Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider. Vulnerable Software & Versions: (show all )
CVE-2015-5347 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title. Vulnerable Software & Versions: (show all )
CVE-2015-7520 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a <input> element. Vulnerable Software & Versions: (show all )
CVE-2016-6793 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.7 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem, and if running on a Java VM before 1.3.1, execute arbitrary code via a crafted serialized Java object. Vulnerable Software & Versions: (show all )
wicket-extensions-6.13.0.jarDescription:
Wicket Extensions is a rich component library for the Wicket framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-extensions-6.13.0.jar
MD5: bb473c8a26b60b9229b55b7bb8f2af81
SHA1: 6541b82ae1ef81cbe78bbd16de0bf94d65eeb79e
SHA256: 31b3a630c20fe4b115aafc294c3f705319f54ba52b3f0470cb37188852459062
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.wicket Medium Vendor pom name Wicket Extensions High Vendor pom parent-artifactid wicket-parent Low Vendor Manifest specification-vendor Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.wicket Medium Vendor pom groupid apache.wicket Highest Vendor pom description Wicket Extensions is a rich component library for the Wicket framework. Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor pom artifactid wicket-extensions Low Vendor file name wicket-extensions High Vendor Manifest bundle-docurl http://apache.org Low Vendor manifest Bundle-Description Wicket Extensions is a rich component library for the Wicket framework. Medium Vendor Manifest bundle-symbolicname org.apache.wicket.extensions Medium Product pom name Wicket Extensions High Product Manifest specification-title Wicket Extensions Medium Product pom artifactid wicket-extensions Highest Product pom parent-artifactid wicket-parent Medium Product pom description Wicket Extensions is a rich component library for the Wicket framework. Medium Product pom parent-groupid org.apache.wicket Low Product file name wicket-extensions High Product Manifest bundle-docurl http://apache.org Low Product manifest Bundle-Description Wicket Extensions is a rich component library for the Wicket framework. Medium Product pom groupid apache.wicket Low Product Manifest Bundle-Name Wicket Extensions Medium Product Manifest Implementation-Title Wicket Extensions High Product Manifest bundle-symbolicname org.apache.wicket.extensions Medium Version Manifest Implementation-Version 6.13.0 High Version pom version 6.13.0 Highest Version file version 6.13.0 Highest
Published Vulnerabilities CVE-2014-0043 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in use. Vulnerable Software & Versions: (show all )
CVE-2014-3526 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions. Vulnerable Software & Versions: (show all )
CVE-2014-7808 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-310 Cryptographic Issues
Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider. Vulnerable Software & Versions: (show all )
CVE-2015-5347 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title. Vulnerable Software & Versions: (show all )
CVE-2015-7520 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a <input> element. Vulnerable Software & Versions: (show all )
CVE-2016-6793 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.7 allows remote attackers to cause a denial of service (infinite loop) and write to, move, and delete files with the permissions of DiskFileItem, and if running on a Java VM before 1.3.1, execute arbitrary code via a crafted serialized Java object. Vulnerable Software & Versions: (show all )
wicket-webjars-0.4.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wicket-webjars-0.4.0.jarMD5: f06ad74c487b7743bee5e447d30ed85fSHA1: 962c559b498fbc7617ba40658a60d156473db146SHA256: 5e695e6d8ac8eb75512da86146dbd0145e8525ddaa7334c97043d98ff91bf0c5
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid wicket-webjars-parent Low Vendor jar package name agilecoders Low Vendor pom name library High Vendor jar package name wicket Low Vendor pom artifactid wicket-webjars Low Vendor pom groupid de.agilecoders.wicket.webjars Highest Vendor file name wicket-webjars High Vendor jar package name de Low Product jar package name agilecoders Low Product pom name library High Product jar package name webjars Low Product jar package name wicket Low Product pom parent-artifactid wicket-webjars-parent Medium Product file name wicket-webjars High Product pom artifactid wicket-webjars Highest Product pom groupid de.agilecoders.wicket.webjars Low Version pom version 0.4.0 Highest Version file version 0.4.0 Highest
maven: de.agilecoders.wicket.webjars:wicket-webjars:0.4.0 Confidence :High woodstox-core-asl-4.4.1.jarDescription:
Woodstox is a high-performance XML processor that
implements Stax (JSR-173) and SAX2 APIs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/woodstox-core-asl-4.4.1.jar
MD5: 1f53f91f117288fb2ef2e120f27e5498
SHA1: 84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1
SHA256: 274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65
Evidence Type Source Name Value Confidence Vendor pom url http://woodstox.codehaus.org Highest Vendor file name woodstox-core-asl High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest Implementation-Vendor http://woodstox.codehaus.org High Vendor pom organization name Codehaus High Vendor pom organization url http://www.codehaus.org/ Medium Vendor pom name Woodstox High Vendor pom groupid codehaus.woodstox Highest Vendor Manifest bundle-symbolicname woodstox-core-asl Medium Vendor Manifest specification-vendor http://jcp.org/en/jsr/detail?id=173 Low Vendor pom artifactid woodstox-core-asl Low Vendor jar package name wstx Low Vendor pom description Woodstox is a high-performance XML processor that
implements Stax (JSR-173) and SAX2 APIs Medium Vendor jar package name ctc Low Vendor central groupid org.codehaus.woodstox Highest Product pom organization url http://www.codehaus.org/ Low Product file name woodstox-core-asl High Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product pom name Woodstox High Product central artifactid woodstox-core-asl Highest Product Manifest Implementation-Title Woodstox XML-processor High Product Manifest specification-title Stax 1.0 API Medium Product pom url http://woodstox.codehaus.org Medium Product Manifest bundle-symbolicname woodstox-core-asl Medium Product pom artifactid woodstox-core-asl Highest Product jar package name wstx Low Product pom groupid codehaus.woodstox Low Product pom description Woodstox is a high-performance XML processor that
implements Stax (JSR-173) and SAX2 APIs Medium Product Manifest Bundle-Name Woodstox XML-processor Medium Product pom organization name Codehaus Low Version pom version 4.4.1 Highest Version central version 4.4.1 Highest Version file version 4.4.1 Highest Version Manifest Implementation-Version 4.4.1 High
Related Dependencies woodstox-core-asl-4.4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/woodstox-core-asl-4.4.1.jar MD5: 1f53f91f117288fb2ef2e120f27e5498 SHA1: 84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1 SHA256: 274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65 woodstox-core-asl-4.4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/woodstox-core-asl-4.4.1.jar MD5: 1f53f91f117288fb2ef2e120f27e5498 SHA1: 84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1 SHA256: 274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65 wsdl4j-1.6.3.jarDescription:
Java stub generator for WSDL License:
CPL: http://www.opensource.org/licenses/cpl1.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/wsdl4j-1.6.3.jar
MD5: cfc28d89625c5e88589aec7a9aee0208
SHA1: 6d106a6845a3d3477a1560008479312888e94f2f
SHA256: 740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725
Evidence Type Source Name Value Confidence Vendor pom name WSDL4J High Vendor Manifest Implementation-Vendor IBM High Vendor pom artifactid wsdl4j Low Vendor jar package name wsdl Low Vendor file name wsdl4j High Vendor jar package name ibm Low Vendor Manifest specification-vendor IBM (Java Community Process) Low Vendor jar package name extensions Low Vendor pom groupid wsdl4j Highest Vendor central groupid wsdl4j Highest Vendor pom description Java stub generator for WSDL Medium Vendor pom url http://sf.net/projects/wsdl4j Highest Product pom name WSDL4J High Product Manifest specification-title JWSDL Medium Product central artifactid wsdl4j Highest Product jar package name extensions Low Product Manifest Implementation-Title WSDL4J High Product pom groupid wsdl4j Low Product pom description Java stub generator for WSDL Medium Product pom url http://sf.net/projects/wsdl4j Medium Product jar package name wsdl Low Product file name wsdl4j High Product pom artifactid wsdl4j Highest Version pom version 1.6.3 Highest Version Manifest Implementation-Version 1.6.3 High Version file version 1.6.3 Highest Version central version 1.6.3 Highest
xercesImpl-2.11.0.jarDescription:
Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.
The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.
Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page.
Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.
Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xercesImpl-2.11.0.jar
MD5: 43584adc1f895628055bad0aa98a1007
SHA1: 9bb329db1cfc4e22462c9d6b43a8432f5850e92c
SHA256: 175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c
Evidence Type Source Name Value Confidence Vendor manifest: javax/xml/namespace/ Implementation-Vendor Apache Software Foundation Medium Vendor jar package name xerces Low Vendor manifest: javax/xml/transform/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/parsers/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/xpath/ Implementation-Vendor Apache Software Foundation Medium Vendor central groupid xerces Highest Vendor jar package name apache Low Vendor manifest: javax/xml/datatype/ Implementation-Vendor Apache Software Foundation Medium Vendor pom url https://xerces.apache.org/xerces2-j/ Highest Vendor file name xercesImpl High Vendor manifest: org/apache/xerces/impl/Version.class Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/validation/ Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid xercesImpl Low Vendor pom name Xerces2-j High Vendor manifest: org/w3c/dom/ Implementation-Vendor World Wide Web Consortium Medium Vendor manifest: javax/xml/stream/ Implementation-Vendor Apache Software Foundation Medium Vendor pom groupid xerces Highest Vendor manifest: org/apache/xerces/xni/ Implementation-Vendor Apache Software Foundation Medium Vendor pom description Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use. Low Vendor manifest: org/xml/sax/ Implementation-Vendor David Megginson Medium Vendor manifest: org/w3c/dom/ls/ Implementation-Vendor World Wide Web Consortium Medium Product jar package name xerces Low Product manifest: javax/xml/namespace/ Implementation-Title javax.xml.namespace Medium Product manifest: org/xml/sax/ Implementation-Title org.xml.sax Medium Product manifest: org/xml/sax/ Specification-Title Simple API for XML Medium Product manifest: org/w3c/dom/ Implementation-Title org.w3c.dom Medium Product pom url https://xerces.apache.org/xerces2-j/ Medium Product manifest: javax/xml/transform/ Specification-Title Java API for XML Processing Medium Product manifest: javax/xml/parsers/ Implementation-Title javax.xml.parsers Medium Product manifest: javax/xml/transform/ Implementation-Title javax.xml.transform Medium Product manifest: javax/xml/xpath/ Specification-Title Java API for XML Processing Medium Product manifest: javax/xml/datatype/ Specification-Title Java API for XML Processing Medium Product manifest: javax/xml/validation/ Specification-Title Java API for XML Processing Medium Product manifest: org/w3c/dom/ Specification-Title Document Object Model, Level 3 Core Medium Product manifest: org/apache/xerces/xni/ Implementation-Title org.apache.xerces.xni Medium Product manifest: org/apache/xerces/xni/ Specification-Title Xerces Native Interface Medium Product manifest: javax/xml/stream/ Implementation-Title javax.xml.stream Medium Product file name xercesImpl High Product manifest: org/w3c/dom/ls/ Specification-Title Document Object Model, Level 3 Load and Save Medium Product manifest: javax/xml/validation/ Implementation-Title javax.xml.validation Medium Product manifest: org/apache/xerces/impl/Version.class Implementation-Title org.apache.xerces.impl.Version Medium Product manifest: javax/xml/parsers/ Specification-Title Java API for XML Processing Medium Product central artifactid xercesImpl Highest Product pom name Xerces2-j High Product manifest: javax/xml/namespace/ Specification-Title Java API for XML Processing Medium Product manifest: javax/xml/xpath/ Implementation-Title javax.xml.xpath Medium Product pom description Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use. Low Product manifest: javax/xml/datatype/ Implementation-Title javax.xml.datatype Medium Product pom groupid xerces Low Product manifest: org/w3c/dom/ls/ Implementation-Title org.w3c.dom.ls Medium Product manifest: javax/xml/stream/ Specification-Title Streaming API for XML Medium Product pom artifactid xercesImpl Highest Version pom version 2.11.0 Highest Version central version 2.11.0 Highest Version file version 2.11.0 Highest
Related Dependencies xercesImpl-2.11.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/xercesImpl-2.11.0.jar MD5: 43584adc1f895628055bad0aa98a1007 SHA1: 9bb329db1cfc4e22462c9d6b43a8432f5850e92c SHA256: 175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c xercesImpl-2.11.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/xercesImpl-2.11.0.jar MD5: 43584adc1f895628055bad0aa98a1007 SHA1: 9bb329db1cfc4e22462c9d6b43a8432f5850e92c SHA256: 175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c xercesImpl-2.11.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-xml/xercesImpl-2.11.0.jar MD5: 43584adc1f895628055bad0aa98a1007 SHA1: 9bb329db1cfc4e22462c9d6b43a8432f5850e92c SHA256: 175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c Published Vulnerabilities CVE-2012-0881 suppress
Severity:High CVSS Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C) CWE: CWE-399 Resource Management Errors
Apache Xerces2 Java allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions. Vulnerable Software & Versions:
xml-apis-1.4.01.jarDescription:
xml-commons provides an Apache-hosted set of DOM, SAX, and
JAXP interfaces for use in other xml-based projects. Our hope is that we
can standardize on both a common version and packaging scheme for these
critical XML standards interfaces to make the lives of both our developers
and users easier. The External Components portion of xml-commons contains
interfaces that are defined by external standards organizations. For DOM,
that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for
JAXP it's Sun. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
The SAX License: http://www.saxproject.org/copying.html
The W3C License: http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xml-apis-1.4.01.jar
MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d
SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3
SHA256: a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad
Evidence Type Source Name Value Confidence Vendor manifest: javax/xml/namespace/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/transform/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/parsers/ Implementation-Vendor Apache Software Foundation Medium Vendor file name xml-apis High Vendor manifest: javax/xml/xpath/ Implementation-Vendor Apache Software Foundation Medium Vendor pom groupid xml-apis Highest Vendor pom artifactid xml-apis Low Vendor manifest: javax/xml/datatype/ Implementation-Vendor Apache Software Foundation Medium Vendor pom description xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun. Low Vendor pom url http://xml.apache.org/commons/components/external/ Highest Vendor manifest: javax/xml/validation/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: org/w3c/dom/ Implementation-Vendor World Wide Web Consortium Medium Vendor manifest: org/apache/xmlcommons/Version Implementation-Vendor Apache Software Foundation Medium Vendor manifest: javax/xml/stream/ Implementation-Vendor Apache Software Foundation Medium Vendor pom name XML Commons External Components XML APIs High Vendor central groupid xml-apis Highest Vendor manifest: org/xml/sax/ Implementation-Vendor David Megginson Medium Vendor jar package name xml Low Vendor manifest: org/w3c/dom/ls/ Implementation-Vendor World Wide Web Consortium Medium Product manifest: javax/xml/xpath/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Product manifest: javax/xml/namespace/ Implementation-Title javax.xml.namespace Medium Product manifest: org/xml/sax/ Implementation-Title org.xml.sax Medium Product manifest: javax/xml/transform/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Product manifest: org/xml/sax/ Specification-Title Simple API for XML Medium Product manifest: org/w3c/dom/ls/ Specification-Title Document Object Model (DOM) Level 3 Load and Save Medium Product manifest: org/w3c/dom/ Implementation-Title org.w3c.dom Medium Product manifest: javax/xml/parsers/ Implementation-Title javax.xml.parsers Medium Product manifest: javax/xml/transform/ Implementation-Title javax.xml.transform Medium Product manifest: javax/xml/datatype/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Product pom groupid xml-apis Low Product manifest: org/w3c/dom/ Specification-Title Document Object Model (DOM) Level 3 Core Medium Product file name xml-apis High Product manifest: javax/xml/stream/ Implementation-Title javax.xml.stream Medium Product pom description xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun. Low Product manifest: javax/xml/validation/ Implementation-Title javax.xml.validation Medium Product manifest: javax/xml/xpath/ Implementation-Title javax.xml.xpath Medium Product manifest: org/apache/xmlcommons/Version Implementation-Title org.apache.xmlcommons.Version Medium Product pom name XML Commons External Components XML APIs High Product pom url http://xml.apache.org/commons/components/external/ Medium Product pom artifactid xml-apis Highest Product manifest: javax/xml/datatype/ Implementation-Title javax.xml.datatype Medium Product manifest: org/w3c/dom/ls/ Implementation-Title org.w3c.dom.ls Medium Product manifest: javax/xml/stream/ Specification-Title Streaming API for XML (StAX) 1.0 Medium Product manifest: javax/xml/namespace/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Product central artifactid xml-apis Highest Product manifest: javax/xml/validation/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Product manifest: javax/xml/parsers/ Specification-Title Java API for XML Processing (JAXP) 1.4 Medium Version central version 1.4.01 Highest Version pom version 1.4.01 Highest Version file version 1.4.01 Highest
Related Dependencies xml-apis-1.4.01.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/xml-apis-1.4.01.jar MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3 SHA256: a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad xml-apis-1.4.01.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/xml-apis-1.4.01.jar MD5: 7eaad6fea5925cca6c36ee8b3e02ac9d SHA1: 3789d9fada2d3d458c4ba2de349d48780f381ee3 SHA256: a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad xml-resolver-1.2.jarDescription:
xml-commons provides an Apache-hosted set of DOM, SAX, and
JAXP interfaces for use in other xml-based projects. Our hope is that we
can standardize on both a common version and packaging scheme for these
critical XML standards interfaces to make the lives of both our developers
and users easier. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xml-resolver-1.2.jarMD5: 706c533146c1f4ee46b66659ea14583aSHA1: 3d0f97750b3a03e0971831566067754ba4bfd68cSHA256: 47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1
Evidence Type Source Name Value Confidence Vendor pom artifactid xml-resolver Low Vendor manifest: org/apache/xml/resolver Implementation-Vendor Apache Software Foundation Medium Vendor pom description xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. Low Vendor jar package name apache Low Vendor central groupid xml-resolver Highest Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor jar package name resolver Low Vendor pom groupid xml-resolver Highest Vendor jar package name xml Low Vendor file name xml-resolver High Vendor pom url http://xml.apache.org/commons/components/resolver/ Highest Vendor pom name XML Commons Resolver Component High Product central artifactid xml-resolver Highest Product pom parent-artifactid apache Medium Product pom description xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. Low Product pom url http://xml.apache.org/commons/components/resolver/ Medium Product pom parent-groupid org.apache Low Product pom artifactid xml-resolver Highest Product jar package name resolver Low Product jar package name xml Low Product pom groupid xml-resolver Low Product file name xml-resolver High Product manifest: org/apache/xml/resolver Implementation-Title org.apache.xml.resolver.Catalog Medium Product pom name XML Commons Resolver Component High Version file version 1.2 Highest Version pom version 1.2 Highest Version central version 1.2 Highest
xmlParserAPIs-2.6.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xmlParserAPIs-2.6.2.jarMD5: 2651f9f7c39e3524f3e2c394625ac63aSHA1: 065acede1e5305bd2b92213d7b5761328c6f4fd9SHA256: 1c2867be1faa73c67e9232631241eb1df4cd0763048646e7bb575a9980e9d7e5
Evidence Type Source Name Value Confidence Vendor jar package name w3c Low Vendor manifest: org/w3c/dom/ Implementation-Vendor World Wide Web Consortium Medium Vendor manifest: org/apache/xmlcommons/Version Implementation-Vendor Apache Software Foundation Medium Vendor pom groupid xerces Highest Vendor jar package name dom Low Vendor file name xmlParserAPIs High Vendor pom artifactid xmlParserAPIs Low Vendor manifest: org/xml/sax/ Implementation-Vendor David Megginson Medium Vendor manifest: javax/xml/parsers/ Implementation-Vendor Sun Microsystems Inc. Medium Vendor manifest: javax/xml/transform/ Implementation-Vendor Sun Microsystems Inc. Medium Vendor central groupid xerces High Product jar package name dom Low Product file name xmlParserAPIs High Product manifest: org/w3c/dom/ Specification-Title Document Object Model, Level 2 Core Medium Product manifest: org/xml/sax/ Implementation-Title org.xml.sax Medium Product manifest: javax/xml/parsers/ Implementation-Title javax.xml.transform Medium Product manifest: org/xml/sax/ Specification-Title Simple API for XML Medium Product manifest: javax/xml/parsers/ Specification-Title Java API for XML Processing Medium Product pom artifactid xmlParserAPIs Highest Product manifest: org/apache/xmlcommons/Version Implementation-Title org.apache.xmlcommons.Version Medium Product manifest: org/w3c/dom/ Implementation-Title org.w3c.dom Medium Product manifest: javax/xml/transform/ Specification-Title Java API for XML Processing Medium Product manifest: javax/xml/transform/ Implementation-Title javax.xml.transform Medium Product central artifactid xmlParserAPIs High Product pom groupid xerces Low Version pom version 2.6.2 Highest Version manifest: org/apache/xmlcommons/Version Implementation-Version 1.2.01 Medium Version pom version 2.6.1 Highest Version file name xmlParserAPIs Medium Version central version 2.6.2 High Version manifest: org/w3c/dom/ Implementation-Version 1.0 Medium Version central version 2.6.1 High Version central version 2.6.0 High Version manifest: javax/xml/transform/ Implementation-Version 1.2.01 Medium Version manifest: javax/xml/parsers/ Implementation-Version 1.2.01 Medium Version manifest: org/xml/sax/ Implementation-Version 2.0.1 Medium Version file version 2.6.2 Highest Version pom version 2.6.0 Highest
xmlenc-0.52.jarDescription:
xmlenc Library License:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xmlenc-0.52.jar
MD5: c962b6bc3c8de46795b0ed94851fa9c7
SHA1: d82554efbe65906d83b3d97bd7509289e9db561a
SHA256: 282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026
Evidence Type Source Name Value Confidence Vendor central groupid xmlenc Highest Vendor file name xmlenc High Vendor manifest: xmlenc Implementation-Vendor Ernst de Haan Medium Vendor pom groupid xmlenc Highest Vendor pom description xmlenc Library Medium Vendor jar package name xmlenc Low Vendor pom name xmlenc Library High Vendor pom artifactid xmlenc Low Vendor jar package name znerd Low Vendor pom url http://xmlenc.sourceforge.net Highest Product pom groupid xmlenc Low Product file name xmlenc High Product central artifactid xmlenc Highest Product pom description xmlenc Library Medium Product jar package name xmlenc Low Product pom name xmlenc Library High Product pom artifactid xmlenc Highest Product pom url http://xmlenc.sourceforge.net Medium Product manifest: xmlenc Specification-Title xmlenc Medium Product manifest: xmlenc Implementation-Title xmlenc Medium Version file version 0.52 Highest Version central version 0.52 Highest Version pom version 0.52 Highest
xmlschema-core-2.2.3.jarDescription:
Commons XMLSchema is a light weight schema object model that can be used to manipulate or
generate XML schema. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/xmlschema-core-2.2.3.jar
MD5: b4ccd232560c81023bfa2f17f7cd40ce
SHA1: 920a9a3132f925554ae8432d9473c8806734a8ec
SHA256: ffa13d70e827653d93dff3c76598a0821b29c7450538e139989f79fb2c5b4e65
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Vendor Manifest bundle-symbolicname org.apache.ws.xmlschema.core Medium Vendor Manifest bundle-docurl http://ws.apache.org/xmlschema/ Low Vendor pom name XmlSchema Core High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid xmlschema Low Vendor pom groupid apache.ws.xmlschema Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.ws.xmlschema Medium Vendor pom artifactid xmlschema-core Low Vendor file name xmlschema-core High Product pom parent-groupid org.apache.ws.xmlschema Low Product pom description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Product manifest Bundle-Description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Product Manifest bundle-symbolicname org.apache.ws.xmlschema.core Medium Product Manifest Bundle-Name XmlSchema Core Medium Product pom artifactid xmlschema-core Highest Product pom parent-artifactid xmlschema Medium Product Manifest bundle-docurl http://ws.apache.org/xmlschema/ Low Product pom name XmlSchema Core High Product pom groupid apache.ws.xmlschema Low Product file name xmlschema-core High Version pom version 2.2.3 Highest Version file version 2.2.3 Highest
Related Dependencies xmlschema-core-2.2.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/xmlschema-core-2.2.3.jar MD5: b4ccd232560c81023bfa2f17f7cd40ce SHA1: 920a9a3132f925554ae8432d9473c8806734a8ec SHA256: ffa13d70e827653d93dff3c76598a0821b29c7450538e139989f79fb2c5b4e65 cpe: cpe:/a:ws_project:ws:2.2.3 Confidence :Low suppress maven: org.apache.ws.xmlschema:xmlschema-core:2.2.3 Confidence :High zookeeper-3.4.6.jarLicense:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/zookeeper-3.4.6.jar
MD5: 7d01d317c717268725896cfb81b18152
SHA1: 01b2502e29da1ebaade2357cd1de35a855fa3755
SHA256: 8a375a1ef98cbc0e1f6e9dfd0d96d914b74d37ad00b4bf81beb77fa8f34d33ae
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.zookeeper Highest Vendor jar package name zookeeper Low Vendor Manifest bundle-symbolicname org.apache.hadoop.zookeeper Medium Vendor pom artifactid zookeeper Low Vendor jar package name apache Low Vendor file name zookeeper High Vendor Manifest bundle-docurl http://hadoop.apache.org/zookeeper Low Vendor Manifest built-on fpj-Virtual-Machine Low Vendor central groupid org.apache.zookeeper Highest Vendor Manifest built-at 02/23/2014 17:18 GMT Low Product central artifactid zookeeper Highest Product jar package name zookeeper Low Product pom artifactid zookeeper Highest Product Manifest Implementation-Title org.apache.zookeeper High Product Manifest bundle-symbolicname org.apache.hadoop.zookeeper Medium Product pom groupid apache.zookeeper Low Product file name zookeeper High Product Manifest Bundle-Name ZooKeeper Bundle Medium Product Manifest bundle-docurl http://hadoop.apache.org/zookeeper Low Product Manifest built-on fpj-Virtual-Machine Low Product Manifest built-at 02/23/2014 17:18 GMT Low Version file version 3.4.6 Highest Version central version 3.4.6 Highest Version pom version 3.4.6 Highest
Published Vulnerabilities CVE-2014-0085 suppress
Severity:Low CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-255 Credentials Management
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log. Vulnerable Software & Versions: (show all )
CVE-2016-5017 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string. Vulnerable Software & Versions: (show all )
CVE-2017-5637 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later. Vulnerable Software & Versions: (show all )
CVE-2018-8012 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-285 Improper Authorization
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader. Vulnerable Software & Versions: (show all )
any23.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/any23.jarMD5: d0565d83a41dbbd8cfa8ec0cf72dfbf0SHA1: ce793f08fc58daacf0a3acfa279207dd2c3eea4bSHA256: 8eaf4df3bcfa939c8a0307ad4eb0005679d5377682996775c037f607c9cb702e
Evidence Type Source Name Value Confidence Vendor file name any23 High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name any23 Low Product file name any23 High Product jar package name nutch Low Product jar package name any23 Low Version file name any23 Medium Version file version 23 Medium
apache-any23-api-2.2.jarDescription:
Any23 library external API. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-any23-api-2.2.jarMD5: 90ba23b78126cb3263bc74773df7c359SHA1: 49181cc6d0969371d08318ba9ce3edc200b7a38bSHA256: ec918fdfd65e80a90d3b168e86357277fc662e373fb6bd2ec4249017d7861759
Evidence Type Source Name Value Confidence Vendor pom groupid apache.any23 Highest Vendor Manifest implementation-url http://any23.apache.org/apache-any23-api Low Vendor pom parent-artifactid apache-any23 Low Vendor Manifest Implementation-Vendor-Id org.apache.any23 Medium Vendor pom name Apache Any23 :: Base API High Vendor file name apache-any23-api High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid apache-any23-api Low Vendor Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.any23 Medium Vendor pom description Any23 library external API. Medium Vendor Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product pom artifactid apache-any23-api Highest Product Manifest implementation-url http://any23.apache.org/apache-any23-api Low Product pom groupid apache.any23 Low Product pom parent-groupid org.apache.any23 Low Product pom name Apache Any23 :: Base API High Product file name apache-any23-api High Product Manifest Implementation-Title Apache Any23 :: Base API High Product Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Product Manifest specification-title Apache Any23 :: Base API Medium Product pom parent-artifactid apache-any23 Medium Product pom description Any23 library external API. Medium Product Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
maven: org.apache.any23:apache-any23-api:2.2 Confidence :High apache-any23-core-2.2.jarDescription:
Core Any23 library implementation. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-any23-core-2.2.jarMD5: e57b38b419372d42d6a246483bdc51d9SHA1: f640086767f2c74fd94c388fb3c38d46c8b24a80SHA256: 140ae326b82b37f9f0960d9b1bf85cef1e1bdec75c1f91ff18004ba8bc0caa78
Evidence Type Source Name Value Confidence Vendor pom groupid apache.any23 Highest Vendor pom parent-artifactid apache-any23 Low Vendor Manifest implementation-url http://any23.apache.org/apache-any23-core Low Vendor Manifest Implementation-Vendor-Id org.apache.any23 Medium Vendor pom artifactid apache-any23-core Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache Any23 :: Core High Vendor file name apache-any23-core High Vendor Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.any23 Medium Vendor pom description Core Any23 library implementation. Medium Vendor Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product Manifest Implementation-Title Apache Any23 :: Core High Product pom groupid apache.any23 Low Product Manifest implementation-url http://any23.apache.org/apache-any23-core Low Product pom parent-groupid org.apache.any23 Low Product pom name Apache Any23 :: Core High Product file name apache-any23-core High Product Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Product pom description Core Any23 library implementation. Medium Product pom parent-artifactid apache-any23 Medium Product Manifest specification-title Apache Any23 :: Core Medium Product Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product pom artifactid apache-any23-core Highest Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
maven: org.apache.any23:apache-any23-core:2.2 Confidence :High apache-any23-csvutils-2.2.jarDescription:
CSV specific library. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-any23-csvutils-2.2.jarMD5: d2f0af449b34e13035d315aacff682a7SHA1: cc04ab184213062a5fa994ca0aa3b2565744bf42SHA256: a3f90692d1f0164d23828bcd50a71736919139b94a2a816e9720f6d17b78e920
Evidence Type Source Name Value Confidence Vendor pom groupid apache.any23 Highest Vendor pom description CSV specific library. Medium Vendor pom artifactid apache-any23-csvutils Low Vendor pom parent-artifactid apache-any23 Low Vendor file name apache-any23-csvutils High Vendor Manifest Implementation-Vendor-Id org.apache.any23 Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Vendor Manifest implementation-url http://any23.apache.org/apache-any23-csvutils Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.any23 Medium Vendor Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Vendor pom name Apache Any23 :: CSV Utilities High Product pom artifactid apache-any23-csvutils Highest Product pom description CSV specific library. Medium Product pom groupid apache.any23 Low Product pom parent-groupid org.apache.any23 Low Product file name apache-any23-csvutils High Product Manifest specification-title Apache Any23 :: CSV Utilities Medium Product Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Product Manifest implementation-url http://any23.apache.org/apache-any23-csvutils Low Product Manifest Implementation-Title Apache Any23 :: CSV Utilities High Product pom parent-artifactid apache-any23 Medium Product Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product pom name Apache Any23 :: CSV Utilities High Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
maven: org.apache.any23:apache-any23-csvutils:2.2 Confidence :High apache-any23-encoding-2.2.jarDescription:
Encoding detection library. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-any23-encoding-2.2.jarMD5: e3f2070e030d1c2bad238c7fb03fcfd3SHA1: 38bd1a66c2db2115d2710af94fc8e6a8ce8cf877SHA256: 8fed4fc7e49316f5663d9dc22d3f3dd76d6060613f3299f088849427653570ad
Evidence Type Source Name Value Confidence Vendor pom groupid apache.any23 Highest Vendor file name apache-any23-encoding High Vendor pom parent-artifactid apache-any23 Low Vendor pom name Apache Any23 :: Encoding Detection High Vendor Manifest implementation-url http://any23.apache.org/apache-any23-encoding Low Vendor Manifest Implementation-Vendor-Id org.apache.any23 Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Vendor pom description Encoding detection library. Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.any23 Medium Vendor pom artifactid apache-any23-encoding Low Vendor Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product file name apache-any23-encoding High Product pom groupid apache.any23 Low Product pom name Apache Any23 :: Encoding Detection High Product Manifest specification-title Apache Any23 :: Encoding Detection Medium Product Manifest implementation-url http://any23.apache.org/apache-any23-encoding Low Product pom parent-groupid org.apache.any23 Low Product Manifest Implementation-Title Apache Any23 :: Encoding Detection High Product Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Product pom description Encoding detection library. Medium Product pom artifactid apache-any23-encoding Highest Product pom parent-artifactid apache-any23 Medium Product Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
maven: org.apache.any23:apache-any23-encoding:2.2 Confidence :High apache-any23-mime-2.2.jarDescription:
MIME Type detection library. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-any23-mime-2.2.jarMD5: 30e7f07065d6dd6a89a8dfc132ae66d5SHA1: c0b164b8384bea8bd3f5e386d89108c6f6c92e02SHA256: fb9416aae75e5d5aae416cd55ed14fd7b85963be34425427786564c7737fb011
Evidence Type Source Name Value Confidence Vendor pom groupid apache.any23 Highest Vendor pom parent-artifactid apache-any23 Low Vendor Manifest Implementation-Vendor-Id org.apache.any23 Medium Vendor pom name Apache Any23 :: Mime Type Detection High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest implementation-url http://any23.apache.org/apache-any23-mime Low Vendor Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Vendor file name apache-any23-mime High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.any23 Medium Vendor pom description MIME Type detection library. Medium Vendor pom artifactid apache-any23-mime Low Vendor Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Product Manifest Implementation-Title Apache Any23 :: Mime Type Detection High Product pom groupid apache.any23 Low Product pom parent-groupid org.apache.any23 Low Product pom artifactid apache-any23-mime Highest Product pom name Apache Any23 :: Mime Type Detection High Product Manifest implementation-url http://any23.apache.org/apache-any23-mime Low Product Manifest implementation-build-date 2018-03-01 23:01:43+0000 Low Product file name apache-any23-mime High Product pom description MIME Type detection library. Medium Product pom parent-artifactid apache-any23 Medium Product Manifest specification-title Apache Any23 :: Mime Type Detection Medium Product Manifest implementation-build UNKNOWN@r0d1d21b110b603c23f0ee12bd7e70ccc5c5c8bbf Low Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
maven: org.apache.any23:apache-any23-mime:2.2 Confidence :High apache-mime4j-core-0.8.1.jarDescription:
Java stream based MIME message parser License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-mime4j-core-0.8.1.jar
MD5: d675e31f6dbfb2b4d3c0df666b594cec
SHA1: c62dfe18a3b827a2c626ade0ffba44562ddf3f61
SHA256: aeb313efda27ae902964a3fcdbd235f91ea13c7a5b193dd752f626b073da230f
Evidence Type Source Name Value Confidence Vendor pom artifactid apache-mime4j-core Low Vendor Manifest Implementation-Vendor-Id org.apache.james Medium Vendor file name apache-mime4j-core High Vendor pom groupid apache.james Highest Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache James :: Mime4j :: Core High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-artifactid apache-mime4j-project Low Vendor manifest Bundle-Description Java stream based MIME message parser Medium Vendor pom parent-groupid org.apache.james Medium Vendor Manifest bundle-symbolicname org.apache.james.apache-mime4j-core Medium Product Manifest Bundle-Name Apache James :: Mime4j :: Core Medium Product pom artifactid apache-mime4j-core Highest Product file name apache-mime4j-core High Product Manifest Implementation-Title Apache James :: Mime4j :: Core High Product pom parent-artifactid apache-mime4j-project Medium Product Manifest bundle-docurl https://www.apache.org/ Low Product pom name Apache James :: Mime4j :: Core High Product pom groupid apache.james Low Product pom parent-groupid org.apache.james Low Product manifest Bundle-Description Java stream based MIME message parser Medium Product Manifest bundle-symbolicname org.apache.james.apache-mime4j-core Medium Product Manifest specification-title Apache James :: Mime4j :: Core Medium Version file version 0.8.1 Highest Version Manifest Implementation-Version 0.8.1 High Version pom version 0.8.1 Highest
Related Dependencies apache-mime4j-dom-0.8.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/apache-mime4j-dom-0.8.1.jar MD5: 891730030753fea16f1f8a8776db0c51 SHA1: f2d653c617004193f3350330d907f77b60c88c56 SHA256: 25547c2ebd438669f3b60ad04e5befb123994a685453ada66fb61dcc9d396800 maven: org.apache.james:apache-mime4j-core:0.8.1 Confidence :Highcpe: cpe:/a:apache:james:0.8.1 Confidence :Low suppress bcmail-jdk15on-1.54.jarDescription:
The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/bcmail-jdk15on-1.54.jar
MD5: 6ae65fb53cf2112141aa050b465d4b92
SHA1: 9d9b5432b4b29ef4a853223bc6e19379ef116cca
SHA256: 0356e102bd2831907f052b3cd0561f453f7da48c21ad651fe718e3a672c2037f
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor pom description The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Vendor Manifest extension-name org.bouncycastle.bcmail Medium Vendor jar package name bouncycastle Low Vendor Manifest bundle-symbolicname bcmail Medium Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest application-name Bouncy Castle S/MIME API Medium Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Vendor pom artifactid bcmail-jdk15on Low Vendor Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Vendor Manifest caller-allowable-codebase * Low Vendor jar package name mail Low Vendor pom groupid bouncycastle Highest Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor pom name Bouncy Castle S/MIME API High Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor file name bcmail-jdk15on High Vendor jar package name smime Low Product Manifest codebase * Low Product pom description The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product Manifest extension-name org.bouncycastle.bcmail Medium Product Manifest bundle-symbolicname bcmail Medium Product pom artifactid bcmail-jdk15on Highest Product Manifest Bundle-Name bcmail Medium Product Manifest application-name Bouncy Castle S/MIME API Medium Product central artifactid bcmail-jdk15on Highest Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Product Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product jar package name mail Low Product Manifest permissions all-permissions Low Product pom name Bouncy Castle S/MIME API High Product Manifest application-library-allowable-codebase * Low Product file name bcmail-jdk15on High Product jar package name smime Low Product pom url http://www.bouncycastle.org/java.html Medium Version pom version 1.54 Highest Version central version 1.54 Highest Version file version 1.54 Highest Version Manifest Implementation-Version 1.54.0 High
bcpkix-jdk15on-1.54.jarDescription:
The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/bcpkix-jdk15on-1.54.jar
MD5: ea8e906cfcda284d0ae934b82863862d
SHA1: b11bfee99bb11eea344de6e4a07fe89212c55c02
SHA256: d618dcfbf0337b91015b21d4b398175ae96382a82c7e1d6e8c657fcd236463c7
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor file name bcpkix-jdk15on High Vendor jar package name bouncycastle Low Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest application-name Bouncy Castle PKIX API Medium Vendor pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Vendor Manifest bundle-symbolicname bcpkix Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Vendor Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Vendor Manifest caller-allowable-codebase * Low Vendor pom groupid bouncycastle Highest Vendor pom artifactid bcpkix-jdk15on Low Vendor Manifest extension-name org.bouncycastle.bcpkix Medium Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor pom description The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product Manifest codebase * Low Product file name bcpkix-jdk15on High Product central artifactid bcpkix-jdk15on Highest Product Manifest application-name Bouncy Castle PKIX API Medium Product pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Product Manifest bundle-symbolicname bcpkix Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Product Manifest Bundle-Name bcpkix Medium Product pom artifactid bcpkix-jdk15on Highest Product Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product Manifest extension-name org.bouncycastle.bcpkix Medium Product Manifest permissions all-permissions Low Product Manifest application-library-allowable-codebase * Low Product pom description The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product pom url http://www.bouncycastle.org/java.html Medium Version pom version 1.54 Highest Version central version 1.54 Highest Version file version 1.54 Highest Version Manifest Implementation-Version 1.54.0 High
bcprov-jdk15on-1.54.jarDescription:
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/bcprov-jdk15on-1.54.jar
MD5: 66a9905f98513cc5e53eabcc9af3c0fb
SHA1: 1acdedeb89f1d950d67b73d481eb7736df65eedb
SHA256: d0ae14598f9c528d2ab7bb8ed00e785a5440f692712cd362d69328aba25efb57
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor pom name Bouncy Castle Provider High Vendor jar package name bouncycastle Low Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest extension-name org.bouncycastle.bcprovider Medium Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest application-name Bouncy Castle Provider Medium Vendor pom description The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Vendor Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Vendor Manifest caller-allowable-codebase * Low Vendor pom groupid bouncycastle Highest Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor Manifest bundle-symbolicname bcprov Medium Vendor pom artifactid bcprov-jdk15on Low Vendor file name bcprov-jdk15on High Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Product Manifest codebase * Low Product pom name Bouncy Castle Provider High Product Manifest Bundle-Name bcprov Medium Product Manifest extension-name org.bouncycastle.bcprovider Medium Product central artifactid bcprov-jdk15on Highest Product Manifest application-name Bouncy Castle Provider Medium Product pom description The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8, JavaSE-1.9 Low Product pom artifactid bcprov-jdk15on Highest Product Manifest originally-created-by 24.91-b01 (Oracle Corporation) Low Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product Manifest permissions all-permissions Low Product Manifest bundle-symbolicname bcprov Medium Product file name bcprov-jdk15on High Product Manifest application-library-allowable-codebase * Low Product pom url http://www.bouncycastle.org/java.html Medium Version pom version 1.54 Highest Version central version 1.54 Highest Version file version 1.54 Highest Version Manifest Implementation-Version 1.54.0 High
cpe: cpe:/a:bouncycastle:bouncy_castle_crypto_package:1.54 Confidence :Low suppress maven: org.bouncycastle:bcprov-jdk15on:1.54 ✓ Confidence :Highestcpe: cpe:/a:bouncycastle:bouncy-castle-crypto-package:1.54 Confidence :Low suppress boilerpipe-1.1.0.jarDescription:
The boilerpipe library provides algorithms to detect and remove the surplus "clutter" (boilerplate, templates) around the main textual content of a web page.
The library already provides specific strategies for common tasks (for example: news article extraction) and may also be easily extended for individual problem settings.
Extracting content is very fast (milliseconds), just needs the input document (no global or site-level information required) and is usually quite accurate.
Boilerpipe is a Java library written by Christian Kohlschütter. It is released under the Apache License 2.0.
The algorithms used by the library are based on (and extending) some concepts of the paper "Boilerplate Detection using Shallow Text Features" by Christian Kohlschütter et al., presented at WSDM 2010 -- The Third ACM International Conference on Web Search and Data Mining New York City, NY USA.
License:
Apache License 2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/boilerpipe-1.1.0.jar
MD5: 0616568083786d0f49e2cb07a5d09fe4
SHA1: f62cb75ed52455a9e68d1d05b84c500673340eb2
SHA256: 088203df4326c4dcc42cec1253a2b41e03dc8904984eae744543b48e2cc63846
Evidence Type Source Name Value Confidence Vendor pom description The boilerpipe library provides algorithms to detect and remove the surplus "clutter" (boilerplate, templates) around the main textual content of a web page. The library already provides specific strategies for common tasks (for example: news article extraction) and may also be easily extended for individual problem settings. Extracting content is very fast (milliseconds), just needs the input document (no global or site-level information required) and is usually quite accurate. Boilerpipe is a Java library written by Christian Kohlschütter. It is released under the Apache License 2.0. The algorithms used by the library are based on (and extending) some concepts of the paper "Boilerplate Detection using Shallow Text Features" by Christian Kohlschütter et al., presented at WSDM 2010 -- The Third ACM International Conference on Web Search and Data Mining New York City, NY USA. Low Vendor pom groupid de.l3s.boilerpipe Highest Vendor jar package name boilerpipe Low Vendor jar package name l3s Low Vendor pom name Boilerpipe -- Boilerplate Removal and Fulltext Extraction from HTML pages High Vendor central groupid de.l3s.boilerpipe Highest Vendor pom url http://code.google.com/p/boilerpipe/ Highest Vendor file name boilerpipe High Vendor pom artifactid boilerpipe Low Vendor jar package name de Low Product pom artifactid boilerpipe Highest Product pom description The boilerpipe library provides algorithms to detect and remove the surplus "clutter" (boilerplate, templates) around the main textual content of a web page. The library already provides specific strategies for common tasks (for example: news article extraction) and may also be easily extended for individual problem settings. Extracting content is very fast (milliseconds), just needs the input document (no global or site-level information required) and is usually quite accurate. Boilerpipe is a Java library written by Christian Kohlschütter. It is released under the Apache License 2.0. The algorithms used by the library are based on (and extending) some concepts of the paper "Boilerplate Detection using Shallow Text Features" by Christian Kohlschütter et al., presented at WSDM 2010 -- The Third ACM International Conference on Web Search and Data Mining New York City, NY USA. Low Product jar package name l3s Low Product jar package name boilerpipe Low Product pom groupid de.l3s.boilerpipe Low Product pom name Boilerpipe -- Boilerplate Removal and Fulltext Extraction from HTML pages High Product pom url http://code.google.com/p/boilerpipe/ Medium Product central artifactid boilerpipe Highest Product file name boilerpipe High Version central version 1.1.0 Highest Version pom version 1.1.0 Highest Version file version 1.1.0 Highest
Related Dependencies boilerpipe-1.1.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/boilerpipe-1.1.0.jar MD5: 0616568083786d0f49e2cb07a5d09fe4 SHA1: f62cb75ed52455a9e68d1d05b84c500673340eb2 SHA256: 088203df4326c4dcc42cec1253a2b41e03dc8904984eae744543b48e2cc63846 bzip2-0.9.1.jarDescription:
jbzip2 is a Java bzip2 compression/decompression library. It can be used as a replacement for the Apache CBZip2InputStream / CBZip2OutputStream classes. License:
MIT License (MIT): http://opensource.org/licenses/mit-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/bzip2-0.9.1.jar
MD5: ddd5eb3a035655cbbb536e9b86907a00
SHA1: 47ca95f71e3ccae756c4a24354d48069c58f475c
SHA256: 865a7a13dd33ef0388f675993adaf4c6f95632ba80d609d42e9d42e6343aae77
Evidence Type Source Name Value Confidence Vendor jar package name itadaki Low Vendor pom artifactid bzip2 Low Vendor file name bzip2 High Vendor pom name Itadaki jbzip2 High Vendor pom url https://code.google.com/p/jbzip2/ Highest Vendor pom groupid itadaki Highest Vendor pom description jbzip2 is a Java bzip2 compression/decompression library. It can be used as a replacement for the Apache CBZip2InputStream / CBZip2OutputStream classes. Low Vendor jar package name bzip2 Low Product pom artifactid bzip2 Highest Product file name bzip2 High Product pom name Itadaki jbzip2 High Product pom url https://code.google.com/p/jbzip2/ Medium Product pom groupid itadaki Low Product pom description jbzip2 is a Java bzip2 compression/decompression library. It can be used as a replacement for the Apache CBZip2InputStream / CBZip2OutputStream classes. Low Product jar package name bzip2 Low Version pom version 0.9.1 Highest Version file version 0.9.1 Highest
Related Dependencies bzip2-0.9.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/bzip2-0.9.1.jar MD5: ddd5eb3a035655cbbb536e9b86907a00 SHA1: 47ca95f71e3ccae756c4a24354d48069c58f475c SHA256: 865a7a13dd33ef0388f675993adaf4c6f95632ba80d609d42e9d42e6343aae77 Published Vulnerabilities CVE-2005-1260 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb"). Vulnerable Software & Versions:
CVE-2010-0405 suppress
Severity:Medium CVSS Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P) CWE: CWE-189 Numeric Errors
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file. Vulnerable Software & Versions: (show all )
CVE-2011-4089 suppress
Severity:Medium CVSS Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. Vulnerable Software & Versions: (show all )
c3p0-0.9.1.1.jarDescription:
c3p0 is an easy-to-use library for augmenting traditional (DriverManager-based) JDBC drivers with JNDI-bindable DataSources,
including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 std extension.
License:
GNU LESSER GENERAL PUBLIC LICENSE: http://www.gnu.org/licenses/lgpl.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/c3p0-0.9.1.1.jar
MD5: 640c58226e7bb6beacc8ac3f6bb533d1
SHA1: 302704f30c6e7abb7a0457f7771739e03c973e80
SHA256: a3c772033d43c85f2635596e2421496d55840abbde64ad64b8d0298cacbba466
Evidence Type Source Name Value Confidence Vendor pom name c3p0:JDBC DataSources/Resource Pools High Vendor pom description c3p0 is an easy-to-use library for augmenting traditional (DriverManager-based) JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 std extension. Low Vendor Manifest specification-vendor Machinery For Change, Inc. Low Vendor pom groupid c3p0 Highest Vendor jar package name mchange Low Vendor pom url http://c3p0.sourceforge.net Highest Vendor central groupid c3p0 Highest Vendor Manifest Implementation-Vendor-Id com.mchange Medium Vendor Manifest Implementation-Vendor Machinery For Change, Inc. High Vendor pom artifactid c3p0 Low Vendor file name c3p0 High Vendor jar package name v2 Low Vendor Manifest extension-name com.mchange.v2.c3p0 Medium Product pom groupid c3p0 Low Product pom name c3p0:JDBC DataSources/Resource Pools High Product pom description c3p0 is an easy-to-use library for augmenting traditional (DriverManager-based) JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 std extension. Low Product central artifactid c3p0 Highest Product file name c3p0 High Product jar package name v2 Low Product pom artifactid c3p0 Highest Product pom url http://c3p0.sourceforge.net Medium Product Manifest extension-name com.mchange.v2.c3p0 Medium Version central version 0.9.1.1 Highest Version file version 0.9.1.1 Highest Version Manifest Implementation-Version 0.9.1.1 High Version pom version 0.9.1.1 Highest
Related Dependencies c3p0-0.9.1.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/c3p0-0.9.1.1.jar MD5: 640c58226e7bb6beacc8ac3f6bb533d1 SHA1: 302704f30c6e7abb7a0457f7771739e03c973e80 SHA256: a3c772033d43c85f2635596e2421496d55840abbde64ad64b8d0298cacbba466 caffeine-2.5.6.jarDescription:
A high performance caching library for Java 8+ License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/caffeine-2.5.6.jar
MD5: be2dd14b92e95b005b45749fed0944f8
SHA1: 91f8c131fcdb8cc195ea0913b3d672f7bb96f5c7
SHA256: 7feb3a77b5eaf0cacca642b94480abe72ad529159f6ca234131f8ba0141a13a4
Evidence Type Source Name Value Confidence Vendor jar package name github Low Vendor jar package name benmanes Low Vendor file name caffeine High Vendor pom artifactid caffeine Low Vendor jar package name caffeine Low Vendor pom description A high performance caching library for Java 8+ Medium Vendor pom groupid github.ben-manes.caffeine Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Vendor central groupid com.github.ben-manes.caffeine Highest Vendor pom name Caffeine cache High Vendor pom url ben-manes/caffeine Highest Product jar package name benmanes Low Product pom artifactid caffeine Highest Product file name caffeine High Product jar package name caffeine Low Product pom url ben-manes/caffeine High Product pom groupid github.ben-manes.caffeine Low Product pom description A high performance caching library for Java 8+ Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product central artifactid caffeine Highest Product Manifest bundle-symbolicname com.github.ben-manes.caffeine Medium Product Manifest Bundle-Name com.github.ben-manes.caffeine Medium Product jar package name cache Low Product pom name Caffeine cache High Version file version 2.5.6 Highest Version central version 2.5.6 Highest Version pom version 2.5.6 Highest
cdm-4.5.5.jarDescription:
The NetCDF-Java Library is a Java interface to NetCDF files,
as well as to many other types of scientific data formats.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/cdm-4.5.5.jarMD5: 7770c86aabbd0ec5e12ed1f0600d5492SHA1: af1748a3d024069cb7fd3fc2591efe806c914589SHA256: 74ea183cda0f7aa06fae2f3cfa8c3c6c64d013ce8cb87bde4a06de6676eacfdb
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor UCAR/Unidata High Vendor pom artifactid cdm Low Vendor pom parent-artifactid thredds-parent Low Vendor file name cdm High Vendor pom description The NetCDF-Java Library is a Java interface to NetCDF files, as well as to many other types of scientific data formats. Low Vendor Manifest built-on 20150306.1537 Low Vendor pom groupid edu.ucar Highest Vendor Manifest Implementation-Vendor-Id edu.ucar Medium Vendor pom url http://www.unidata.ucar.edu/software/netcdf-java/documentation.htm Highest Vendor pom name CDM core library High Product pom artifactid cdm Highest Product file name cdm High Product pom description The NetCDF-Java Library is a Java interface to NetCDF files, as well as to many other types of scientific data formats. Low Product Manifest built-on 20150306.1537 Low Product Manifest Implementation-Title CDM core library High Product pom parent-artifactid thredds-parent Medium Product pom groupid edu.ucar Low Product pom url http://www.unidata.ucar.edu/software/netcdf-java/documentation.htm Medium Product pom name CDM core library High Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
Related Dependencies cdm-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/cdm-4.5.5.jar MD5: 7770c86aabbd0ec5e12ed1f0600d5492 SHA1: af1748a3d024069cb7fd3fc2591efe806c914589 SHA256: 74ea183cda0f7aa06fae2f3cfa8c3c6c64d013ce8cb87bde4a06de6676eacfdb maven: edu.ucar:cdm:4.5.5 Confidence :High commons-codec-1.10.jarDescription:
The Apache Commons Codec package contains simple encoder and decoders for
various formats such as Base64 and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-codec-1.10.jar
MD5: 353cf6a2bdba09595ccfa073b78c7fcb
SHA1: 4b95f4897fa13f2cd904aee711aeafc0c5295cd8
SHA256: 4241dfa94e711d435f29a4604a3e2de5c4aa3c165e23bd066be6fc1fc4309569
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build trunk@r1637108; 2014-11-06 14:14:12+0000 Low Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom url http://commons.apache.org/proper/commons-codec/ Highest Vendor pom groupid commons-codec Highest Vendor file name commons-codec High Vendor pom artifactid commons-codec Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom name Apache Commons Codec High Vendor Manifest bundle-symbolicname org.apache.commons.codec Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest implementation-build trunk@r1637108; 2014-11-06 14:14:12+0000 Low Product manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product pom artifactid commons-codec Highest Product pom groupid commons-codec Low Product file name commons-codec High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-codec/ Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Product pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product Manifest specification-title Apache Commons Codec Medium Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Codec High Product Manifest bundle-symbolicname org.apache.commons.codec Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Implementation-Title Apache Commons Codec High Product Manifest Bundle-Name Apache Commons Codec Medium Version pom version 1.10 Highest Version file version 1.10 Highest Version Manifest Implementation-Version 1.10 High
Related Dependencies commons-codec-1.10.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-codec-1.10.jar MD5: 353cf6a2bdba09595ccfa073b78c7fcb SHA1: 4b95f4897fa13f2cd904aee711aeafc0c5295cd8 SHA256: 4241dfa94e711d435f29a4604a3e2de5c4aa3c165e23bd066be6fc1fc4309569 commons-codec-1.10.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/commons-codec-1.10.jar MD5: 353cf6a2bdba09595ccfa073b78c7fcb SHA1: 4b95f4897fa13f2cd904aee711aeafc0c5295cd8 SHA256: 4241dfa94e711d435f29a4604a3e2de5c4aa3c165e23bd066be6fc1fc4309569 maven: commons-codec:commons-codec:1.10 Confidence :High commons-csv-1.5.jarDescription:
The Apache Commons CSV library provides a simple interface for reading and writing
CSV files of various types.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-csv-1.5.jar
MD5: 8e11b04e6025a0598e96f3e45957596d
SHA1: e10f140af5b82167640f254fa9d88e35ad74329c
SHA256: f0acb4058efe4616ea631b5119f59ef21fe43843f4e399455521e984e8df99e5
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest implementation-url http://commons.apache.org/proper/commons-csv/ Low Vendor pom name Apache Commons CSV High Vendor pom groupid apache.commons Highest Vendor pom description
The Apache Commons CSV library provides a simple interface for reading and writing
CSV files of various types. Low Vendor pom url http://commons.apache.org/proper/commons-csv/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest bundle-symbolicname org.apache.commons.csv Medium Vendor Manifest implementation-build release@rf76a1357057cd3caaf9b0904d9cc57ce384658a3; 2017-08-26 23:14:35+0000 Low Vendor manifest Bundle-Description The Apache Commons CSV library provides a simple interface for reading and writingCSV files of various types. Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid commons-csv Low Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-csv/ Low Vendor file name commons-csv High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest specification-title Apache Commons CSV Medium Product Manifest implementation-url http://commons.apache.org/proper/commons-csv/ Low Product pom name Apache Commons CSV High Product Manifest Implementation-Title Apache Commons CSV High Product pom description
The Apache Commons CSV library provides a simple interface for reading and writing
CSV files of various types. Low Product Manifest Bundle-Name Apache Commons CSV Medium Product pom parent-artifactid commons-parent Medium Product Manifest bundle-symbolicname org.apache.commons.csv Medium Product Manifest implementation-build release@rf76a1357057cd3caaf9b0904d9cc57ce384658a3; 2017-08-26 23:14:35+0000 Low Product manifest Bundle-Description The Apache Commons CSV library provides a simple interface for reading and writingCSV files of various types. Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest bundle-docurl http://commons.apache.org/proper/commons-csv/ Low Product pom artifactid commons-csv Highest Product file name commons-csv High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom url http://commons.apache.org/proper/commons-csv/ Medium Version file version 1.5 Highest Version Manifest Implementation-Version 1.5 High Version pom version 1.5 Highest
Related Dependencies commons-csv-1.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-csv-1.5.jar MD5: 8e11b04e6025a0598e96f3e45957596d SHA1: e10f140af5b82167640f254fa9d88e35ad74329c SHA256: f0acb4058efe4616ea631b5119f59ef21fe43843f4e399455521e984e8df99e5 maven: org.apache.commons:commons-csv:1.5 Confidence :High commons-exec-1.3.jarDescription:
Apache Commons Exec is a library to reliably execute external processes from within the JVM. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-exec-1.3.jar
MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8
SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b
SHA256: cb49812dc1bfb0ea4f20f398bcae1a88c6406e213e67f7524fb10d4f8ad9347b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/proper/commons-exec/ Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-exec/ Low Vendor pom groupid apache.commons Highest Vendor Manifest implementation-build trunk@r1636211; 2014-11-02 23:51:55+0000 Low Vendor manifest Bundle-Description Apache Commons Exec is a library to reliably execute external processes from within the JVM. Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache Commons Exec High Vendor Manifest bundle-symbolicname org.apache.commons.exec Medium Vendor file name commons-exec High Vendor pom description Apache Commons Exec is a library to reliably execute external processes from within the JVM. Medium Vendor pom artifactid commons-exec Low Product Manifest bundle-docurl http://commons.apache.org/proper/commons-exec/ Low Product Manifest implementation-build trunk@r1636211; 2014-11-02 23:51:55+0000 Low Product manifest Bundle-Description Apache Commons Exec is a library to reliably execute external processes from within the JVM. Medium Product pom parent-artifactid commons-parent Medium Product Manifest Bundle-Name Apache Commons Exec Medium Product Manifest Implementation-Title Apache Commons Exec High Product pom artifactid commons-exec Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom url http://commons.apache.org/proper/commons-exec/ Medium Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Exec High Product Manifest bundle-symbolicname org.apache.commons.exec Medium Product Manifest specification-title Apache Commons Exec Medium Product file name commons-exec High Product pom description Apache Commons Exec is a library to reliably execute external processes from within the JVM. Medium Version Manifest Implementation-Version 1.3 High Version pom version 1.3 Highest Version file version 1.3 Highest
Related Dependencies commons-exec-1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-exec-1.3.jar MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8 SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b SHA256: cb49812dc1bfb0ea4f20f398bcae1a88c6406e213e67f7524fb10d4f8ad9347b commons-exec-1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-exec-1.3.jar MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8 SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b SHA256: cb49812dc1bfb0ea4f20f398bcae1a88c6406e213e67f7524fb10d4f8ad9347b maven: org.apache.commons:commons-exec:1.3 Confidence :High commons-rdf-api-0.5.0.jarDescription:
Commons Java API for RDF 1.1 License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/commons-rdf-api-0.5.0.jar
MD5: 83a3b5cac9583e027f9330bad716f872
SHA1: df2d4451dee5b311cb4f51ced214dfaab5838291
SHA256: 360fd9197008502cbc3fd09afe2ad45d8c8c905e21f42e7cd5b2aa1c39742b5e
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build UNKNOWN@re82eaa0b7d67f5a1afdf4cdecc19589fbe1654d6; 2017-12-08 03:34:49+0000 Low Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest implementation-url https://commons.apache.org/proper/commons-rdf/commons-rdf-api/ Low Vendor Manifest bundle-symbolicname org.apache.commons.rdf.api Medium Vendor Manifest automatic-module-name org.apache.commons.rdf.api Medium Vendor jar package name commons Low Vendor pom groupid apache.commons Highest Vendor jar package name apache Low Vendor pom description Commons Java API for RDF 1.1 Medium Vendor file name commons-rdf-api High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor central groupid org.apache.commons Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor jar package name rdf Low Vendor pom artifactid commons-rdf-api Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor pom parent-artifactid commons-rdf-parent Low Vendor pom name Commons RDF API High Vendor manifest Bundle-Description Commons Java API for RDF 1.1 Medium Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-rdf/commons-rdf-api/ Low Product Manifest implementation-build UNKNOWN@re82eaa0b7d67f5a1afdf4cdecc19589fbe1654d6; 2017-12-08 03:34:49+0000 Low Product Manifest Implementation-Title Commons RDF API High Product Manifest implementation-url https://commons.apache.org/proper/commons-rdf/commons-rdf-api/ Low Product Manifest bundle-symbolicname org.apache.commons.rdf.api Medium Product Manifest automatic-module-name org.apache.commons.rdf.api Medium Product jar package name commons Low Product pom description Commons Java API for RDF 1.1 Medium Product file name commons-rdf-api High Product jar package name api Low Product central artifactid commons-rdf-api Highest Product jar package name rdf Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom name Commons RDF API High Product Manifest specification-title Commons RDF API Medium Product pom parent-artifactid commons-rdf-parent Medium Product manifest Bundle-Description Commons Java API for RDF 1.1 Medium Product Manifest bundle-docurl https://commons.apache.org/proper/commons-rdf/commons-rdf-api/ Low Product pom artifactid commons-rdf-api Highest Product Manifest Bundle-Name Commons RDF API Medium Version Manifest Implementation-Version 0.5.0 High Version pom version 0.5.0 Highest Version file version 0.5.0 Highest Version central version 0.5.0 Highest
curvesapi-1.04.jarDescription:
Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS. License:
BSD License: http://opensource.org/licenses/BSD-3-Clause File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/curvesapi-1.04.jar
MD5: 0dcbd9b7e498d1118c920d1d55046743
SHA1: 3386abf821719bc89c7685f9eaafaf4a842f0199
SHA256: ff71bd27b36816889324de58ecf642532e5c9934c1dca2cfea0cbb2f393ec2cb
Evidence Type Source Name Value Confidence Vendor jar package name graphbuilder Low Vendor pom description Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS. Low Vendor jar package name math Low Vendor file name curvesapi High Vendor pom artifactid curvesapi Low Vendor pom groupid github.virtuald Highest Vendor pom name curvesapi High Vendor pom url virtuald/curvesapi Highest Product pom url virtuald/curvesapi High Product pom description Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS. Low Product jar package name math Low Product pom artifactid curvesapi Highest Product file name curvesapi High Product pom groupid github.virtuald Low Product pom name curvesapi High Version pom version 1.04 Highest Version file version 1.04 Highest
Related Dependencies curvesapi-1.04.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/curvesapi-1.04.jar MD5: 0dcbd9b7e498d1118c920d1d55046743 SHA1: 3386abf821719bc89c7685f9eaafaf4a842f0199 SHA256: ff71bd27b36816889324de58ecf642532e5c9934c1dca2cfea0cbb2f393ec2cb maven: com.github.virtuald:curvesapi:1.04 Confidence :High cxf-core-3.0.16.jarDescription:
Apache CXF Core License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/cxf-core-3.0.16.jar
MD5: a9efb1d5cbd59c4d75259645dc5e6eef
SHA1: b6df2be09a3b9d8b30484e684bb6525b03fff2b2
SHA256: 73eb120df74dc83b11b4f5c548463dfdc885a5a36e0342458ba638c1461337af
Evidence Type Source Name Value Confidence Vendor Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Vendor pom artifactid cxf-core Low Vendor Manifest bundle-docurl http://cxf.apache.org Low Vendor pom description Apache CXF Core Medium Vendor file name cxf-core High Vendor pom url http://cxf.apache.org Highest Vendor pom name Apache CXF Core High Vendor pom parent-groupid org.apache.cxf Medium Vendor Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor manifest Bundle-Description Apache CXF Core Medium Vendor pom groupid apache.cxf Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-artifactid cxf-parent Low Product Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Product Manifest bundle-docurl http://cxf.apache.org Low Product pom description Apache CXF Core Medium Product file name cxf-core High Product pom parent-groupid org.apache.cxf Low Product pom name Apache CXF Core High Product pom artifactid cxf-core Highest Product pom parent-artifactid cxf-parent Medium Product Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Product manifest Bundle-Description Apache CXF Core Medium Product pom url http://cxf.apache.org Medium Product Manifest Bundle-Name Apache CXF Core Medium Product pom groupid apache.cxf Low Version Manifest Implementation-Version 3.0.16 High Version pom version 3.0.16 Highest Version file version 3.0.16 Highest
Related Dependencies cxf-rt-frontend-jaxrs-3.0.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/cxf-rt-frontend-jaxrs-3.0.16.jar MD5: 19800be4e9058872eb1e9d8e99abf76b SHA1: 28e963feb0546635f86bf7ebf32daa4b7676fd5f SHA256: 311199e7452ac16bf2a1f5dfb1919d7ac75176064814e28b4375f180ef4e0cdf cpe: cpe:/a:apache:cxf:3.0.16 cxf-rt-transports-http-3.0.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/cxf-rt-transports-http-3.0.16.jar MD5: 1f9255995ae0996f0d2e471178fef686 SHA1: 1a0efeee01ade848b3b086f5ad5d16eec6449517 SHA256: fbf242b44c602b7b4070d6dc116add3b97e3972f89731b589e87042f5c365f7f cpe: cpe:/a:apache:cxf:3.0.16 cxf-rt-rs-client-3.0.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/cxf-rt-rs-client-3.0.16.jar MD5: 107bbdd5d581daa991b16e971409bf79 SHA1: e28bf841ca74b6cec6a93a60885dbcd15690d1a8 SHA256: 6f4bd44f30cc1d5f4ee6a2a895892fd515c0117f3ccfbc0f12be7f83d9ad0572 cpe: cpe:/a:apache:cxf:3.0.16 Published Vulnerabilities CVE-2015-5253 suppress
Severity:Medium CVSS Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:P/A:N) CWE: CWE-264 Permissions, Privileges, and Access Controls
The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack." Vulnerable Software & Versions: (show all )
CVE-2017-5656 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-384 Session Fixation
Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user. Vulnerable Software & Versions: (show all )
CVE-2018-8039 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-254 7PK - Security Features
It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks. Vulnerable Software & Versions: (show all )
ehcache-core-2.6.2.jarDescription:
This is the ehcache core module. Pair it with other modules for added functionality. License:
The Apache Software License, Version 2.0: src/assemble/EHCACHE-CORE-LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/ehcache-core-2.6.2.jar
MD5: b6abecd2c01070700a9001b33b94b3f4
SHA1: 3baecd92015a9f8fe4cf51c8b5d3a5bddcdd3e86
SHA256: df61f1a1724aa674d922dce21965b907df8f77e730679ae1abe92679390a2fd6
Evidence Type Source Name Value Confidence Vendor file name ehcache-core High Vendor pom artifactid ehcache-core Low Vendor pom url http://ehcache.org Highest Vendor pom description This is the ehcache core module. Pair it with other modules for added functionality. Medium Vendor pom name Ehcache Core High Vendor pom groupid net.sf.ehcache Highest Vendor pom parent-artifactid ehcache-parent Low Product file name ehcache-core High Product pom url http://ehcache.org Medium Product pom description This is the ehcache core module. Pair it with other modules for added functionality. Medium Product pom name Ehcache Core High Product pom artifactid ehcache-core Highest Product pom groupid net.sf.ehcache Low Product pom parent-artifactid ehcache-parent Medium Version pom version 2.6.2 Highest Version file version 2.6.2 Highest
Related Dependencies ehcache-core-2.6.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/ehcache-core-2.6.2.jar MD5: b6abecd2c01070700a9001b33b94b3f4 SHA1: 3baecd92015a9f8fe4cf51c8b5d3a5bddcdd3e86 SHA256: df61f1a1724aa674d922dce21965b907df8f77e730679ae1abe92679390a2fd6 maven: net.sf.ehcache:ehcache-core:2.6.2 Confidence :High fluent-hc-4.5.3.jarDescription:
Apache HttpComponents Client fluent API
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/fluent-hc-4.5.3.jarMD5: 902baa6df5f6d20f96d03a7b3453d1adSHA1: 76487e3a4fa77b2dd6cb1927ea423e220d7efbabSHA256: 7047412674c28bac2fac86548f94eec19ecc84ac54e055b756f78839fcaff1e4
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom description
Apache HttpComponents Client fluent API
Medium Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor pom name Apache HttpClient Fluent API High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor file name fluent-hc High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor Manifest implementation-build tags/4.5.3-RC1/fluent-hc@r1779741; 2017-01-21 16:58:35+0100 Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid fluent-hc Low Product pom description
Apache HttpComponents Client fluent API
Medium Product Manifest specification-title HttpComponents Apache HttpClient Fluent API Medium Product Manifest Implementation-Title HttpComponents Apache HttpClient Fluent API High Product pom parent-artifactid httpcomponents-client Medium Product pom name Apache HttpClient Fluent API High Product file name fluent-hc High Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-client Low Product Manifest implementation-build tags/4.5.3-RC1/fluent-hc@r1779741; 2017-01-21 16:58:35+0100 Low Product pom parent-groupid org.apache.httpcomponents Low Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid fluent-hc Highest Version Manifest Implementation-Version 4.5.3 High Version pom version 4.5.3 Highest Version file version 4.5.3 Highest
cpe: cpe:/a:apache:httpclient:4.5.3 Confidence :Low suppress maven: org.apache.httpcomponents:fluent-hc:4.5.3 Confidence :High fontbox-2.0.8.jarDescription:
The Apache FontBox library is an open source Java tool to obtain low level information
from font files. FontBox is a subproject of Apache PDFBox.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/fontbox-2.0.8.jar
MD5: 071c8cc0948762fd89af8ebe6dd50ca2
SHA1: 52f852fcfc7481d45efdffd224eb78b85981b17b
SHA256: a6fab3b2ad256564e10224d7c2c0d4977fcfd5cd566a659f429e9c3793720e12
Evidence Type Source Name Value Confidence Vendor pom description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Vendor pom artifactid fontbox Low Vendor pom parent-groupid org.apache.pdfbox Medium Vendor pom url http://pdfbox.apache.org/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor pom name Apache FontBox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.pdfbox.fontbox Medium Vendor file name fontbox High Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor manifest Bundle-Description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Vendor pom parent-artifactid pdfbox-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Apache FontBox Medium Product pom artifactid fontbox Highest Product pom description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Product Manifest Implementation-Title Apache FontBox High Product pom name Apache FontBox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest bundle-symbolicname org.apache.pdfbox.fontbox Medium Product pom parent-groupid org.apache.pdfbox Low Product file name fontbox High Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product manifest Bundle-Description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Product Manifest specification-title Apache FontBox Medium Product pom url http://pdfbox.apache.org/ Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Version file version 2.0.8 Highest Version Manifest Implementation-Version 2.0.8 High Version pom version 2.0.8 Highest
cpe: cpe:/a:apache:pdfbox:2.0.8 Confidence :Low suppress maven: org.apache.pdfbox:fontbox:2.0.8 Confidence :High geoapi-3.0.0.jarDescription:
The development community in building GIS solutions is sustaining an enormous level
of effort. The GeoAPI project aims to reduce duplication and increase interoperability
by providing neutral, interface-only APIs derived from OGC/ISO Standards.
License:
https://geoapi.svn.sourceforge.net/svnroot/geoapi/branches/3.0.x/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/geoapi-3.0.0.jar
MD5: 97b6baee0cf3402e8360203bf6c23b3f
SHA1: 0a04e0f361627fb33a140b5aa4c019741f905577
SHA256: 95e171231c72d16ee60ca309456a72a5c774a657c5700f6fc6f50a7babf4731a
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.opengis Medium Vendor manifest Bundle-Description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Vendor pom description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor pom groupid opengis Highest Vendor Manifest bundle-docurl http://www.geoapi.org Low Vendor file name geoapi High Vendor pom artifactid geoapi Low Vendor pom parent-artifactid geoapi-parent Low Vendor Manifest bundle-symbolicname org.opengis.geoapi Medium Vendor pom name GeoAPI High Product pom parent-artifactid geoapi-parent Medium Product pom description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Product Manifest bundle-docurl http://www.geoapi.org Low Product file name geoapi High Product pom parent-groupid org.opengis Low Product pom artifactid geoapi Highest Product Manifest specification-title GeoAPI Medium Product manifest Bundle-Description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Product Manifest Bundle-Name GeoAPI Medium Product Manifest bundle-symbolicname org.opengis.geoapi Medium Product pom name GeoAPI High Product pom groupid opengis Low Version pom version 3.0.0 Highest Version file version 3.0.0 Highest
maven: org.opengis:geoapi:3.0.0 Confidence :High grib-4.5.5.jarDescription:
Decoder for the GRIB format.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/grib-4.5.5.jarMD5: 0cb80276d8ea89cacc1d5632dbf39fe9SHA1: cfe552910e9a8d57ce71134796abb281a74ead16SHA256: 1e0492135f421f554c4651a95225f27f2a3230e993329f69348110f8521c32d9
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor UCAR/Unidata High Vendor pom parent-artifactid thredds-parent Low Vendor Manifest built-on 20150306.1537 Low Vendor pom groupid edu.ucar Highest Vendor Manifest Implementation-Vendor-Id edu.ucar Medium Vendor pom name GRIB IOSP and Feature Collection High Vendor pom description
Decoder for the GRIB format.
Medium Vendor pom url http://www.unidata.ucar.edu/software/netcdf-java/ Highest Vendor pom artifactid grib Low Vendor file name grib High Product Manifest Implementation-Title GRIB IOSP and Feature Collection High Product pom artifactid grib Highest Product pom url http://www.unidata.ucar.edu/software/netcdf-java/ Medium Product Manifest built-on 20150306.1537 Low Product pom name GRIB IOSP and Feature Collection High Product pom parent-artifactid thredds-parent Medium Product pom description
Decoder for the GRIB format.
Medium Product pom groupid edu.ucar Low Product file name grib High Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
Related Dependencies grib-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/grib-4.5.5.jar MD5: 0cb80276d8ea89cacc1d5632dbf39fe9 SHA1: cfe552910e9a8d57ce71134796abb281a74ead16 SHA256: 1e0492135f421f554c4651a95225f27f2a3230e993329f69348110f8521c32d9 maven: edu.ucar:grib:4.5.5 Confidence :High gson-2.8.1.jarDescription:
Gson JSON library File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/gson-2.8.1.jarMD5: 2c334d82c64b56ae59ea1bdcbb674303SHA1: 02a8e0aa38a2e21cb39e2f5a7d6704cbdc941da0SHA256: 4f65e7dca6528d644031c43d159f1614f2ed58db7daf75f1e91a9fc1b57818d4
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Gson JSON library Medium Vendor pom groupid google.code.gson Highest Vendor pom parent-groupid com.google.code.gson Medium Vendor pom artifactid gson Low Vendor file name gson High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom parent-artifactid gson-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Gson High Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product pom parent-artifactid gson-parent Medium Product pom name Gson High Product manifest Bundle-Description Gson JSON library Medium Product file name gson High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-groupid com.google.code.gson Low Version pom version 2.8.1 Highest Version file version 2.8.1 Highest
maven: com.google.code.gson:gson:2.8.1 Confidence :High guava-20.0.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/guava-20.0.jar
MD5: f32a8a2524620dbecc9f6bf6a20c293f
SHA1: 89507701249388e1ed5ddcf8c41f4ce1be7831ef
SHA256: 36a666e3b71ae7f0f0dca23654b67e086e6c93d192f60ba5dfd5519db6c288c8
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom groupid google.guava Highest Vendor pom artifactid guava Low Vendor pom name Guava: Google Core Libraries for Java High Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor file name guava High Vendor Manifest bundle-docurl https://github.com/google/guava/ Low Vendor pom parent-artifactid guava-parent Low Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom parent-groupid com.google.guava Medium Product Manifest bundle-symbolicname com.google.guava Medium Product pom name Guava: Google Core Libraries for Java High Product Manifest bundle-docurl https://github.com/google/guava/ Low Product pom parent-groupid com.google.guava Low Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product pom parent-artifactid guava-parent Medium Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product file name guava High Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product pom groupid google.guava Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Version pom version 20.0 Highest Version file version 20.0 Highest
maven: com.google.guava:guava:20.0 Confidence :High guice-4.1.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/guice-4.1.0.jar
MD5: 41f66d1d4d250efebde3bbf8b2d55dfa
SHA1: eeb69005da379a10071aa4948c48d89250febb07
SHA256: 9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor pom groupid cglib Highest Vendor Manifest bundle-symbolicname com.google.inject Medium Vendor pom parent-artifactid cglib-parent Low Vendor file name guice High Vendor manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Vendor pom artifactid cglib Low Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-docurl https://github.com/google/guice Low Product pom groupid cglib Low Product pom parent-artifactid cglib-parent Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.google.inject Medium Product Manifest Bundle-Name guice Medium Product file name guice High Product manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product pom artifactid cglib Highest Version Manifest bundle-copyright 2006 Low Version pom version 3.2.0 Highest Version file version 4.1.0 Highest Version Manifest Bundle-Version 4.1.0 High Version file name guice Medium
maven: cglib:cglib:3.2.0 Confidence :High guice-assistedinject-4.1.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/guice-assistedinject-4.1.0.jar
MD5: 65912196b6e91f2ceb933001c1fb5c94
SHA1: af799dd7e23e6fe8c988da12314582072b07edcb
SHA256: 663728123fb9a6b79ea39ae289e5d56b4113e1b8e9413eb792f91e53a6dd5868
Evidence Type Source Name Value Confidence Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor pom parent-artifactid extensions-parent Low Vendor jar package name google Low Vendor pom parent-groupid com.google.inject.extensions Medium Vendor file name guice-assistedinject High Vendor jar package name inject Low Vendor manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Vendor jar package name assistedinject Low Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor Manifest bundle-symbolicname com.google.inject.assistedinject Medium Vendor central groupid com.google.inject.extensions Highest Vendor pom artifactid guice-assistedinject Low Vendor pom groupid google.inject.extensions Highest Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor pom name Google Guice - Extensions - AssistedInject High Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest Bundle-Name guice-assistedinject Medium Product file name guice-assistedinject High Product jar package name inject Low Product manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Product jar package name assistedinject Low Product Manifest bundle-docurl https://github.com/google/guice Low Product Manifest bundle-symbolicname com.google.inject.assistedinject Medium Product pom parent-groupid com.google.inject.extensions Low Product pom groupid google.inject.extensions Low Product pom artifactid guice-assistedinject Highest Product pom parent-artifactid extensions-parent Medium Product central artifactid guice-assistedinject Highest Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product pom name Google Guice - Extensions - AssistedInject High Version file version 4.1.0 Highest Version central version 4.1.0 Highest Version pom version 4.1.0 Highest
guice-multibindings-4.1.0.jarDescription:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/guice-multibindings-4.1.0.jar
MD5: f50c4b54df401bd39dcc8d9679e54a8c
SHA1: 3b27257997ac51b0f8d19676f1ea170427e86d51
SHA256: 592773a4c745cc87ba37fa0647fed8126c7e474349c603c9f229aa25d3ef5448
Evidence Type Source Name Value Confidence Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor pom parent-artifactid extensions-parent Low Vendor jar package name google Low Vendor pom parent-groupid com.google.inject.extensions Medium Vendor Manifest bundle-symbolicname com.google.inject.multibindings Medium Vendor jar package name inject Low Vendor manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Vendor pom name Google Guice - Extensions - MultiBindings High Vendor pom artifactid guice-multibindings Low Vendor jar package name multibindings Low Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor file name guice-multibindings High Vendor central groupid com.google.inject.extensions Highest Vendor pom groupid google.inject.extensions Highest Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest Bundle-Name guice-multibindings Medium Product pom artifactid guice-multibindings Highest Product Manifest bundle-symbolicname com.google.inject.multibindings Medium Product jar package name inject Low Product manifest Bundle-Description Guice is a lightweight dependency injection framework for Java 6 and above Medium Product pom name Google Guice - Extensions - MultiBindings High Product jar package name multibindings Low Product Manifest bundle-docurl https://github.com/google/guice Low Product pom parent-groupid com.google.inject.extensions Low Product file name guice-multibindings High Product pom groupid google.inject.extensions Low Product pom parent-artifactid extensions-parent Medium Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product central artifactid guice-multibindings Highest Version file version 4.1.0 Highest Version central version 4.1.0 Highest Version pom version 4.1.0 Highest
httpclient-4.5.3.jarDescription:
Apache HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpclient-4.5.3.jarMD5: 1965ebb7aca0f9f8faaed3870d8cf689SHA1: d1577ae15f01ef5438c5afc62162457c00a34713SHA256: db3d1b6c2d6a5e5ad47577ad61854e2f0e0936199b8e05eb541ed52349263135
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build tags/4.5.3-RC1/httpclient@r1779741; 2017-01-21 16:58:35+0100 Low Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
Apache HttpComponents Client
Medium Product Manifest implementation-build tags/4.5.3-RC1/httpclient@r1779741; 2017-01-21 16:58:35+0100 Low Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom description
Apache HttpComponents Client
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid httpclient Highest Version Manifest Implementation-Version 4.5.3 High Version pom version 4.5.3 Highest Version file version 4.5.3 Highest
Related Dependencies httpclient-4.5.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/httpclient-4.5.3.jar MD5: 1965ebb7aca0f9f8faaed3870d8cf689 SHA1: d1577ae15f01ef5438c5afc62162457c00a34713 SHA256: db3d1b6c2d6a5e5ad47577ad61854e2f0e0936199b8e05eb541ed52349263135 httpclient-cache-4.5.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpclient-cache-4.5.3.jar MD5: cf3f254ca1228dd59818a2dff708e247 SHA1: baa6474c7f9b9f027a02fbbee375263ac482e343 SHA256: 8c9cf6355ab7b3cfd812f9bfaddf8f8c02f1a3a59496abc0d6717b98ce989599 httpclient-osgi-4.5.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpclient-osgi-4.5.3.jar MD5: 817af3698602e743498f784ca4c36f4f SHA1: f10d1eb0d2ed77809af3ff657d0ea61b90900b49 SHA256: e1130751a5396186cedd3c7922d9dc750ebf6ca52d2e56e5e179f3c171c99c05 maven: org.apache.httpcomponents:httpclient-osgi:4.5.3 ✓ cpe: cpe:/a:apache:httpclient:4.5.3 Confidence :Low suppress maven: org.apache.httpcomponents:httpclient:4.5.3 Confidence :High httpcore-4.4.6.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpcore-4.4.6.jarMD5: a9fbd503e0802507efeeaffb56bbdf52SHA1: e3fd8ced1f52c7574af952e2e6da0df8df08eb82SHA256: d7f853dee87680b07293d30855b39b9eb56c1297bd16ff1cd6f19ddb8fa745fb
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor Manifest implementation-build tags/4.4.6-RC1/httpcore@r1777789; 2017-01-07 14:48:48+0100 Low Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Vendor pom description
Apache HttpComponents Core (blocking I/O)
Medium Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest implementation-build tags/4.4.6-RC1/httpcore@r1777789; 2017-01-07 14:48:48+0100 Low Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product pom description
Apache HttpComponents Core (blocking I/O)
Medium Version file version 4.4.6 Highest Version Manifest Implementation-Version 4.4.6 High Version pom version 4.4.6 Highest
Related Dependencies httpcore-4.4.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/httpcore-4.4.6.jar MD5: a9fbd503e0802507efeeaffb56bbdf52 SHA1: e3fd8ced1f52c7574af952e2e6da0df8df08eb82 SHA256: d7f853dee87680b07293d30855b39b9eb56c1297bd16ff1cd6f19ddb8fa745fb maven: org.apache.httpcomponents:httpcore:4.4.6 Confidence :High httpcore-nio-4.4.6.jarDescription:
Apache HttpComponents Core (non-blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpcore-nio-4.4.6.jarMD5: c65be15da5261ff6c18b4160b8256963SHA1: 4bafcb5aacb1abc193698a13ae99394e09a25101SHA256: c17dc0490daa262f5b42e38f94938de3f6807ebc1e78718e9298066e29e101ea
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest implementation-build tags/4.4.6-RC1/httpcore-nio@r1777789; 2017-01-07 14:48:48+0100 Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpCore NIO High Vendor pom artifactid httpcore-nio Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore-nio High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Product pom artifactid httpcore-nio Highest Product pom groupid apache.httpcomponents Low Product Manifest specification-title HttpComponents Apache HttpCore NIO Medium Product Manifest implementation-build tags/4.4.6-RC1/httpcore-nio@r1777789; 2017-01-07 14:48:48+0100 Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom name Apache HttpCore NIO High Product Manifest Implementation-Title HttpComponents Apache HttpCore NIO High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product file name httpcore-nio High Version file version 4.4.6 Highest Version Manifest Implementation-Version 4.4.6 High Version pom version 4.4.6 Highest
maven: org.apache.httpcomponents:httpcore-nio:4.4.6 Confidence :High httpcore-osgi-4.4.6.jarDescription:
Apache HttpComponents Core (OSGi bundle)
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpcore-osgi-4.4.6.jar
MD5: 132e2f4562bf21cc4e0bc5e288ae0ed5
SHA1: c9f4dd0063ace366cb0aa041f60a90c96b95f8cf
SHA256: 54d3de6cdaf4c4f8487d8b80eaebe60c025ff1090430437360747a8415f37ad1
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor file name httpcore-osgi High Vendor jar package name http Low Vendor jar package name apache Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2017-01-07 14:48:48+0100 Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor manifest Bundle-Description Apache HttpComponents Core (OSGi bundle) Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.httpcomponents.httpcore Medium Vendor pom description
Apache HttpComponents Core (OSGi bundle)
Medium Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor central groupid org.apache.httpcomponents Highest Vendor pom parent-artifactid httpcomponents-core Low Vendor pom name Apache HttpCore OSGi bundle High Vendor pom artifactid httpcore-osgi Low Product Manifest Implementation-Title HttpComponents Apache HttpCore OSGi bundle High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product file name httpcore-osgi High Product jar package name http Low Product Manifest specification-title HttpComponents Apache HttpCore OSGi bundle Medium Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2017-01-07 14:48:48+0100 Low Product central artifactid httpcore-osgi Highest Product pom groupid apache.httpcomponents Low Product manifest Bundle-Description Apache HttpComponents Core (OSGi bundle) Medium Product Manifest bundle-symbolicname org.apache.httpcomponents.httpcore Medium Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom description
Apache HttpComponents Core (OSGi bundle)
Medium Product Manifest bundle-docurl http://www.apache.org/ Low Product pom artifactid httpcore-osgi Highest Product Manifest Bundle-Name Apache Apache HttpCore OSGi bundle Medium Product pom name Apache HttpCore OSGi bundle High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Version central version 4.4.6 Highest Version file version 4.4.6 Highest Version Manifest Implementation-Version 4.4.6 High Version pom version 4.4.6 Highest
httpmime-4.5.3.jarDescription:
Apache HttpComponents HttpClient - MIME coded entities
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpmime-4.5.3.jarMD5: a00b6287cab2ad554ae3cbdbe983dc88SHA1: 889fd6d061bb63b99dd5c6aba35a555ae863de52SHA256: b4865b79a3aaeef794220b532bc7b07f793fa4aad90c29e83cab2b835cd8ee06
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor file name httpmime High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor Manifest implementation-build tags/4.5.3-RC1/httpmime@r1779741; 2017-01-21 16:58:35+0100 Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpClient Mime High Vendor pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Vendor pom artifactid httpmime Low Product Manifest specification-title HttpComponents Apache HttpClient Mime Medium Product file name httpmime High Product Manifest Implementation-Title HttpComponents Apache HttpClient Mime High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-client Low Product Manifest implementation-build tags/4.5.3-RC1/httpmime@r1779741; 2017-01-21 16:58:35+0100 Low Product pom parent-groupid org.apache.httpcomponents Low Product pom name Apache HttpClient Mime High Product pom artifactid httpmime Highest Product pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Version Manifest Implementation-Version 4.5.3 High Version pom version 4.5.3 Highest Version file version 4.5.3 Highest
Related Dependencies httpmime-4.5.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/httpmime-4.5.3.jar MD5: a00b6287cab2ad554ae3cbdbe983dc88 SHA1: 889fd6d061bb63b99dd5c6aba35a555ae863de52 SHA256: b4865b79a3aaeef794220b532bc7b07f793fa4aad90c29e83cab2b835cd8ee06 maven: org.apache.httpcomponents:httpmime:4.5.3 Confidence :High httpservices-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/httpservices-4.5.5.jarMD5: c5207827b8b7e6045b2af7e1e8c5b1d4SHA1: ee5f217be599e5e03f7f0e55e03f9e721a154f62SHA256: 8334da7adc9ed7a7b941a780f4d22054f8a11d03973be83ae8399400d55300e4
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor UCAR/Unidata High Vendor pom parent-artifactid thredds-parent Low Vendor pom artifactid httpservices Low Vendor Manifest built-on 20150306.1537 Low Vendor pom groupid edu.ucar Highest Vendor Manifest Implementation-Vendor-Id edu.ucar Medium Vendor pom url http://www.unidata.ucar.edu/software/netcdf-java/documentation.htm Highest Vendor file name httpservices High Vendor pom name HttpClient Wrappers High Product Manifest built-on 20150306.1537 Low Product Manifest Implementation-Title HttpClient Wrappers High Product pom parent-artifactid thredds-parent Medium Product file name httpservices High Product pom groupid edu.ucar Low Product pom artifactid httpservices Highest Product pom name HttpClient Wrappers High Product pom url http://www.unidata.ucar.edu/software/netcdf-java/documentation.htm Medium Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
Related Dependencies httpservices-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/httpservices-4.5.5.jar MD5: c5207827b8b7e6045b2af7e1e8c5b1d4 SHA1: ee5f217be599e5e03f7f0e55e03f9e721a154f62 SHA256: 8334da7adc9ed7a7b941a780f4d22054f8a11d03973be83ae8399400d55300e4 maven: edu.ucar:httpservices:4.5.5 Confidence :High isoparser-1.1.18.jarDescription:
A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
License:
Apache Software License - Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/isoparser-1.1.18.jar
MD5: e2902a2f427f2d6bf6b245f9b100feed
SHA1: c74bdac64b22f1e245a7657149a43437aae4a9d3
SHA256: de5108096fb8754ae27a5562fea81be078e11936db6f7a62bdd748371ae3b818
Evidence Type Source Name Value Confidence Vendor pom description A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
Medium Vendor pom name ISO Parser High Vendor pom artifactid isoparser Low Vendor file name isoparser High Vendor pom groupid googlecode.mp4parser Highest Vendor jar package name mp4parser Low Vendor pom url http://code.google.com/p/mp4parser/ Highest Product pom description A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
Medium Product pom groupid googlecode.mp4parser Low Product pom artifactid isoparser Highest Product pom name ISO Parser High Product file name isoparser High Product pom url http://code.google.com/p/mp4parser/ Medium Version pom version 1.1.18 Highest Version file version 1.1.18 Highest
maven: com.googlecode.mp4parser:isoparser:1.1.18 Confidence :High jackcess-2.1.8.jarDescription:
A pure Java library for reading from and writing to MS Access databases. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jackcess-2.1.8.jar
MD5: 8f85f1c9a32d43c0771e11759f0cb210
SHA1: dfc7156e11ce33bbcb7f4f6724a87b9d969f2fd6
SHA256: e4e71cf4093f2e4a71d12e74629abfb46bc18f8acf71648110e763ff9f09464e
Evidence Type Source Name Value Confidence Vendor file name jackcess High Vendor Manifest bundle-symbolicname com.healthmarketscience.jackcess Medium Vendor pom name Jackcess High Vendor pom parent-artifactid openhms-parent Low Vendor pom parent-groupid com.healthmarketscience Medium Vendor Manifest bundle-docurl http://www.healthmarketscience.com Low Vendor pom groupid healthmarketscience.jackcess Highest Vendor pom description A pure Java library for reading from and writing to MS Access databases. Medium Vendor manifest Bundle-Description A pure Java library for reading from and writing to MS Access databases. Medium Vendor pom artifactid jackcess Low Vendor pom url http://jackcess.sf.net Highest Product pom groupid healthmarketscience.jackcess Low Product pom description A pure Java library for reading from and writing to MS Access databases. Medium Product file name jackcess High Product Manifest bundle-symbolicname com.healthmarketscience.jackcess Medium Product pom parent-groupid com.healthmarketscience Low Product pom parent-artifactid openhms-parent Medium Product pom name Jackcess High Product Manifest bundle-docurl http://www.healthmarketscience.com Low Product manifest Bundle-Description A pure Java library for reading from and writing to MS Access databases. Medium Product pom url http://jackcess.sf.net Medium Product Manifest Bundle-Name Jackcess Medium Product pom artifactid jackcess Highest Version file version 2.1.8 Highest Version pom version 2.1.8 Highest
maven: com.healthmarketscience.jackcess:jackcess:2.1.8 Confidence :High jackcess-encrypt-2.1.2.jarDescription:
An add-on to the Jackcess library for handling encryption in MS Access files. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jackcess-encrypt-2.1.2.jar
MD5: 6680420439292d286c51ab8b76a53be7
SHA1: c11d7a42af7070b84d832198558df52032de734c
SHA256: 64dc73c729eefb3d5e2390c9170d11ef13b55dc1cad7a59acbed6ea25f9dba13
Evidence Type Source Name Value Confidence Vendor pom description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Vendor manifest Bundle-Description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Vendor Manifest bundle-symbolicname com.healthmarketscience.jackcess.encrypt Medium Vendor pom artifactid jackcess-encrypt Low Vendor file name jackcess-encrypt High Vendor pom parent-artifactid openhms-parent Low Vendor pom name Jackcess Encrypt High Vendor pom parent-groupid com.healthmarketscience Medium Vendor Manifest bundle-docurl http://www.healthmarketscience.com Low Vendor pom groupid healthmarketscience.jackcess Highest Vendor pom url http://jackcessencrypt.sf.net Highest Product manifest Bundle-Description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Product Manifest bundle-symbolicname com.healthmarketscience.jackcess.encrypt Medium Product pom artifactid jackcess-encrypt Highest Product file name jackcess-encrypt High Product pom groupid healthmarketscience.jackcess Low Product pom parent-groupid com.healthmarketscience Low Product pom description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Product pom parent-artifactid openhms-parent Medium Product pom name Jackcess Encrypt High Product Manifest bundle-docurl http://www.healthmarketscience.com Low Product pom url http://jackcessencrypt.sf.net Medium Product Manifest Bundle-Name Jackcess Encrypt Medium Version file version 2.1.2 Highest Version pom version 2.1.2 Highest
maven: com.healthmarketscience.jackcess:jackcess-encrypt:2.1.2 Confidence :High jackson-core-2.9.2.jarDescription:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jackson-core-2.9.2.jar
MD5: 456af981c1be006d6ac38df86c4339d6
SHA1: aed20e50152a2f19adc1995c8d8f307c7efa414d
SHA256: 0c0d5d4bae541d2f26a19c2eb1067d9be806c449f67af047ce8963059b18d1e1
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom url FasterXML/jackson-core Highest Vendor file name jackson-core High Vendor pom artifactid jackson-core Low Vendor Manifest implementation-build-date 2017-10-14 03:25:27+0000 Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest automatic-module-name com.fasterxml.jackson.core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom parent-groupid com.fasterxml.jackson Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product file name jackson-core High Product Manifest Implementation-Title Jackson-core High Product pom url FasterXML/jackson-core High Product Manifest implementation-build-date 2017-10-14 03:25:27+0000 Low Product Manifest specification-title Jackson-core Medium Product pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product pom name Jackson-core High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Jackson-core Medium Product pom artifactid jackson-core Highest Product Manifest automatic-module-name com.fasterxml.jackson.core Medium Product pom parent-artifactid jackson-base Medium Version Manifest Implementation-Version 2.9.2 High Version file version 2.9.2 Highest Version pom version 2.9.2 Highest
Related Dependencies jackson-core-2.9.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/jackson-core-2.9.2.jar MD5: 456af981c1be006d6ac38df86c4339d6 SHA1: aed20e50152a2f19adc1995c8d8f307c7efa414d SHA256: 0c0d5d4bae541d2f26a19c2eb1067d9be806c449f67af047ce8963059b18d1e1 cpe: cpe:/a:fasterxml:jackson:2.9.2 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-core:2.9.2 Confidence :High jackson-databind-2.9.0.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jackson-databind-2.9.0.jar
MD5: bc9eddd751df7dbe30d4c68a1662c3de
SHA1: 14fb5f088cc0b0dc90a73ba745bcade4961a3ee3
SHA256: 02b20e2a73d5539b8c6898e1ade73623c5b555a3bcd46308410a9179c8c5d455
Evidence Type Source Name Value Confidence Vendor pom description General data-binding functionality for Jackson: works on core streaming API Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name jackson-databind High Vendor Manifest implementation-build-date 2017-07-30 04:21:33+0000 Low Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom parent-artifactid jackson-bom Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor file name jackson-databind High Vendor pom artifactid jackson-databind Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom description General data-binding functionality for Jackson: works on core streaming API Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest Bundle-Name jackson-databind Medium Product pom parent-artifactid jackson-bom Medium Product pom name jackson-databind High Product Manifest implementation-build-date 2017-07-30 04:21:33+0000 Low Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom artifactid jackson-databind Highest Product Manifest specification-title jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Product file name jackson-databind High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Version pom version 2.9.0 Highest Version Manifest Implementation-Version 2.9.0 High Version file version 2.9.0 Highest
cpe: cpe:/a:fasterxml:jackson-databind:2.9.0 Confidence :Highest suppress maven: com.fasterxml.jackson.core:jackson-databind:2.9.0 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.9.0 Confidence :Low suppress Published Vulnerabilities CVE-2017-15095 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. Vulnerable Software & Versions: (show all )
CVE-2018-5968 suppress
Severity:Medium CVSS Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. Vulnerable Software & Versions: (show all )
CVE-2018-7489 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. Vulnerable Software & Versions: (show all )
java-libpst-0.8.1.jarDescription:
A library to read PST files with java, without need for external libraries. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/java-libpst-0.8.1.jar
MD5: 6be27662e0b06154e5f05938937d16b7
SHA1: ad31986653dac9cb5132ea5b2999c20b4b286255
SHA256: a3f7b3c934f477b0fc3c0eadebc3d24872bbebc3ac5a22ab575e5f476ea34757
Evidence Type Source Name Value Confidence Vendor jar package name pff Low Vendor pom name java-libpst High Vendor pom description A library to read PST files with java, without need for external libraries. Medium Vendor pom groupid pff Highest Vendor pom artifactid java-libpst Low Vendor file name java-libpst High Vendor pom url https://code.google.com/p/java-libpst/ Highest Product pom artifactid java-libpst Highest Product pom url https://code.google.com/p/java-libpst/ Medium Product pom name java-libpst High Product pom description A library to read PST files with java, without need for external libraries. Medium Product pom groupid pff Low Product file name java-libpst High Version file version 0.8.1 Highest Version pom version 0.8.1 Highest
Related Dependencies java-libpst-0.8.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/java-libpst-0.8.1.jar MD5: 6be27662e0b06154e5f05938937d16b7 SHA1: ad31986653dac9cb5132ea5b2999c20b4b286255 SHA256: a3f7b3c934f477b0fc3c0eadebc3d24872bbebc3ac5a22ab575e5f476ea34757 maven: com.pff:java-libpst:0.8.1 Confidence :High jcip-annotations-1.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jcip-annotations-1.0.jarMD5: 9d5272954896c5a5d234f66b7372b17aSHA1: afba4942caaeaf46aab0b976afd57cc7c181467eSHA256: be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Evidence Type Source Name Value Confidence Vendor pom name "Java Concurrency in Practice" book annotations High Vendor pom artifactid jcip-annotations Low Vendor pom url http://jcip.net/ Highest Vendor jar package name jcip Low Vendor jar package name annotations Low Vendor central groupid net.jcip Highest Vendor file name jcip-annotations High Vendor pom groupid net.jcip Highest Vendor jar package name net Low Product central artifactid jcip-annotations Highest Product pom name "Java Concurrency in Practice" book annotations High Product pom url http://jcip.net/ Medium Product jar package name jcip Low Product pom groupid net.jcip Low Product jar package name annotations Low Product pom artifactid jcip-annotations Highest Product file name jcip-annotations High Version file version 1.0 Highest Version central version 1.0 Highest Version pom version 1.0 Highest
Related Dependencies jcip-annotations-1.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jcip-annotations-1.0.jar MD5: 9d5272954896c5a5d234f66b7372b17a SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e SHA256: be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0 jcl-over-slf4j-1.7.25.jarDescription:
JCL 1.2 implemented over SLF4J File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jcl-over-slf4j-1.7.25.jarMD5: 56b22adc639b09b2e917f42d68b26600SHA1: f8c32b13ff142a513eeb5b6330b1588dcb2c0461SHA256: 5e938457e79efcbfb3ab64bc29c43ec6c3b95fffcda3c155f4a86cc320c11e14
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom url http://www.slf4j.org Highest Vendor file name jcl-over-slf4j High Vendor pom groupid slf4j Highest Vendor pom description JCL 1.2 implemented over SLF4J Medium Vendor manifest Bundle-Description JCL 1.2 implemented over SLF4J Medium Vendor pom parent-artifactid slf4j-parent Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor pom artifactid jcl-over-slf4j Low Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product file name jcl-over-slf4j High Product manifest Bundle-Description JCL 1.2 implemented over SLF4J Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product pom parent-groupid org.slf4j Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom name JCL 1.2 implemented over SLF4J High Product Manifest Implementation-Title jcl-over-slf4j High Product pom description JCL 1.2 implemented over SLF4J Medium Product Manifest Bundle-Name jcl-over-slf4j Medium Product pom artifactid jcl-over-slf4j Highest Product pom groupid slf4j Low Version file version 1.7.25 Highest Version Manifest Implementation-Version 1.7.25 High Version pom version 1.7.25 Highest
Related Dependencies jcl-over-slf4j-1.7.25.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jcl-over-slf4j-1.7.25.jar MD5: 56b22adc639b09b2e917f42d68b26600 SHA1: f8c32b13ff142a513eeb5b6330b1588dcb2c0461 SHA256: 5e938457e79efcbfb3ab64bc29c43ec6c3b95fffcda3c155f4a86cc320c11e14 maven: org.slf4j:jcl-over-slf4j:1.7.25 Confidence :Highcpe: cpe:/a:slf4j:slf4j:1.7.25 Confidence :Low suppress jcommander-1.30.jarDescription:
A Java framework to parse command line options with annotations. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jcommander-1.30.jar
MD5: 191ccbfc9d40670e9103df722529ae16
SHA1: c440b30a944ba199751551aee393f8aa03b3c327
SHA256: 8c65d42f55742925128d57079e7337f5c80c34e1f937191ad16daa33b59777a8
Evidence Type Source Name Value Confidence Vendor file name jcommander High Vendor pom artifactid jcommander Low Vendor pom name JCommander High Vendor pom groupid beust Highest Vendor pom description A Java framework to parse command line options with annotations. Medium Vendor pom url http://beust.com/jcommander Highest Vendor manifest Bundle-Description A Java framework to parse command line options with annotations. Medium Vendor Manifest bundle-symbolicname com.beust.jcommander Medium Product file name jcommander High Product Manifest Bundle-Name JCommander Medium Product pom name JCommander High Product pom groupid beust Low Product pom artifactid jcommander Highest Product pom url http://beust.com/jcommander Medium Product pom description A Java framework to parse command line options with annotations. Medium Product manifest Bundle-Description A Java framework to parse command line options with annotations. Medium Product Manifest bundle-symbolicname com.beust.jcommander Medium Version file version 1.30 Highest Version pom version 1.30 Highest
maven: com.beust:jcommander:1.30 Confidence :High jdom2-2.0.4.jarDescription:
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
License:
Similar to Apache License but with the acknowledgment clause removed: https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jdom2-2.0.4.jar
MD5: e51c9485a3a38525a7df4bd25a05dec6
SHA1: 4b65e55cc61b34bc634b25f0359d1242e4c519de
SHA256: ca379b0ad57499c9d35066b7018ce868a225db9c8d2143eeb31cc8e396b2919c
Evidence Type Source Name Value Confidence Vendor pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Vendor manifest: org/jdom2/xpath/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/transform/ Implementation-Vendor jdom.org Medium Vendor pom groupid jdom Highest Vendor manifest: org/jdom2/input/ Implementation-Vendor jdom.org Medium Vendor pom organization url http://www.jdom.org Medium Vendor manifest: org/jdom2/ Implementation-Vendor jdom.org Medium Vendor file name jdom2 High Vendor central groupid org.jdom Highest Vendor manifest: org/jdom2/filter/ Implementation-Vendor jdom.org Medium Vendor pom organization name JDOM High Vendor pom url http://www.jdom.org Highest Vendor pom name JDOM High Vendor jar package name jdom2 Low Vendor pom artifactid jdom2 Low Vendor manifest: org/jdom2/adapters/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/output/ Implementation-Vendor jdom.org Medium Product manifest: org/jdom2/ Implementation-Title org.jdom2 Medium Product manifest: org/jdom2/filter/ Implementation-Title org.jdom2.filter Medium Product pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Product pom organization url http://www.jdom.org Low Product manifest: org/jdom2/filter/ Specification-Title JDOM Filter Classes Medium Product pom artifactid jdom2 Highest Product pom organization name JDOM Low Product pom url http://www.jdom.org Medium Product central artifactid jdom2 Highest Product manifest: org/jdom2/ Specification-Title JDOM Classes Medium Product manifest: org/jdom2/adapters/ Specification-Title JDOM Adapter Classes Medium Product manifest: org/jdom2/input/ Specification-Title JDOM Input Classes Medium Product file name jdom2 High Product manifest: org/jdom2/input/ Implementation-Title org.jdom2.input Medium Product manifest: org/jdom2/xpath/ Implementation-Title org.jdom2.xpath Medium Product manifest: org/jdom2/xpath/ Specification-Title JDOM XPath Classes Medium Product manifest: org/jdom2/transform/ Specification-Title JDOM Transformation Classes Medium Product manifest: org/jdom2/output/ Specification-Title JDOM Output Classes Medium Product pom name JDOM High Product manifest: org/jdom2/adapters/ Implementation-Title org.jdom2.adapters Medium Product manifest: org/jdom2/output/ Implementation-Title org.jdom2.output Medium Product manifest: org/jdom2/transform/ Implementation-Title org.jdom2.transform Medium Product pom groupid jdom Low Version file version 2.0.4 Highest Version pom version 2.0.4 Highest Version central version 2.0.4 Highest
jempbox-1.8.13.jarDescription:
The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM)
specification. JempBox is a subproject of Apache PDFBox.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jempbox-1.8.13.jar
MD5: 449968f1151d4a9ce2e8a71f8e2622cf
SHA1: a874cef0ed0e2a8c4cc5ed52c23ba3e6d78eca4e
SHA256: 3327189402b31d1672c70e668612c2420199c7a63c70eff827c787bcc3e301d4
Evidence Type Source Name Value Confidence Vendor pom description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Vendor pom parent-groupid org.apache.pdfbox Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor pom name Apache JempBox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.pdfbox.jempbox Medium Vendor pom artifactid jempbox Low Vendor file name jempbox High Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor manifest Bundle-Description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Vendor pom parent-artifactid pdfbox-parent Low Product pom description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Product pom artifactid jempbox Highest Product Manifest Bundle-Name Apache JempBox Medium Product Manifest Implementation-Title Apache JempBox High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom name Apache JempBox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest specification-title Apache JempBox Medium Product Manifest bundle-symbolicname org.apache.pdfbox.jempbox Medium Product pom parent-groupid org.apache.pdfbox Low Product file name jempbox High Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product manifest Bundle-Description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Version Manifest Implementation-Version 1.8.13 High Version pom version 1.8.13 Highest Version file version 1.8.13 Highest
cpe: cpe:/a:apache:pdfbox:1.8.13 Confidence :Low suppress maven: org.apache.pdfbox:jempbox:1.8.13 Confidence :High jhighlight-1.0.2.jarDescription:
JHighlight is an embeddable pure Java syntax highlighting
library that supports Java, HTML, XHTML, XML and LZX
languages and outputs to XHTML.
It also supports RIFE templates tags and highlights them
clearly so that you can easily identify the difference
between your RIFE markup and the actual marked up source.
License:
CDDL, v1.0: http://www.opensource.org/licenses/cddl1.php
LGPL, v2.1 or later: http://www.opensource.org/licenses/lgpl-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jhighlight-1.0.2.jar
MD5: 867f23891848a72f1284ff3aaf18d94e
SHA1: 992a8a8add10468930efc1f110f2895f68258a1e
SHA256: db48fddb05ece10834158e62b2d272eb3fdcb8cb1dd3482f3aebf5cc7065ca1e
Evidence Type Source Name Value Confidence Vendor pom description JHighlight is an embeddable pure Java syntax highlighting library that supports Java, HTML, XHTML, XML and LZX languages and outputs to XHTML. It also supports RIFE templates tags and highlights them clearly so that you can easily identify the difference between your RIFE markup and the actual marked up source. Low Vendor jar package name jhighlight Low Vendor pom name JHighlight High Vendor jar package name fastutil Low Vendor pom groupid codelibs Highest Vendor jar package name uwyn Low Vendor file name jhighlight High Vendor pom url codelibs/jhighlight Highest Vendor pom artifactid jhighlight Low Product pom description JHighlight is an embeddable pure Java syntax highlighting library that supports Java, HTML, XHTML, XML and LZX languages and outputs to XHTML. It also supports RIFE templates tags and highlights them clearly so that you can easily identify the difference between your RIFE markup and the actual marked up source. Low Product jar package name jhighlight Low Product pom name JHighlight High Product jar package name fastutil Low Product pom groupid codelibs Low Product pom artifactid jhighlight Highest Product pom url codelibs/jhighlight High Product file name jhighlight High Version pom version 1.0.2 Highest Version file version 1.0.2 Highest
maven: org.codelibs:jhighlight:1.0.2 Confidence :High jmatio-1.2.jarDescription:
Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. License:
BSD: http://www.linfo.org/bsdlicense.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jmatio-1.2.jar
MD5: 237ce61a21ae9570ee5754fb5a54c57e
SHA1: 69d8f2f49c1503f9b15b0eb50b1905a734a025e2
SHA256: 5dbcc1d2cda2ef85a4e780e3a082c3bfc17e2ade2ea0e5ffd27834a9f7668fc4
Evidence Type Source Name Value Confidence Vendor file name jmatio High Vendor pom groupid tallison Highest Vendor pom description Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. Low Vendor pom artifactid jmatio Low Vendor jar package name types Low Vendor pom name JMatIO High Vendor pom url tballison/jmatio Highest Vendor jar package name jmatio Low Product pom groupid tallison Low Product file name jmatio High Product pom artifactid jmatio Highest Product pom description Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. Low Product pom url tballison/jmatio High Product jar package name types Low Product pom name JMatIO High Version file version 1.2 Highest Version pom version 1.2 Highest
maven: org.tallison:jmatio:1.2 Confidence :High jna-4.1.0.jarDescription:
Java Native Access License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jna-4.1.0.jar
MD5: b0e08c9936dc52aa40439c71fcad6297
SHA1: 1c12d070e602efd8021891cdd7fd18bc129372d4
SHA256: 1aa37e9ea6baa0ee152d89509f758f0847eac66ec179b955cafe0919e540a92e
Evidence Type Source Name Value Confidence Vendor pom url twall/jna Highest Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor manifest Bundle-Description JNA Library Medium Vendor jar (hint) package name oracle Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor pom description Java Native Access Medium Vendor file name jna High Vendor pom artifactid jna Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Vendor pom groupid net.java.dev.jna Highest Vendor jar package name jna Low Vendor Manifest specification-vendor JNA Development Team Low Vendor pom name Java Native Access High Vendor central groupid net.java.dev.jna Highest Vendor jar package name sun Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest Implementation-Title com.sun.jna High Product manifest Bundle-Description JNA Library Medium Product Manifest bundle-symbolicname com.sun.jna Medium Product pom description Java Native Access Medium Product file name jna High Product Manifest specification-title Java Native Access (JNA) Medium Product pom groupid net.java.dev.jna Low Product central artifactid jna Highest Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Product pom url twall/jna High Product jar package name jna Low Product pom name Java Native Access High Product pom artifactid jna Highest Version file version 4.1.0 Highest Version central version 4.1.0 Highest Version pom version 4.1.0 Highest
Related Dependencies jna-4.1.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/jna-4.1.0.jar MD5: b0e08c9936dc52aa40439c71fcad6297 SHA1: 1c12d070e602efd8021891cdd7fd18bc129372d4 SHA256: 1aa37e9ea6baa0ee152d89509f758f0847eac66ec179b955cafe0919e540a92e joda-time-2.2.jarDescription:
Date and time library to replace JDK date handling License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/joda-time-2.2.jar
MD5: 226f5207543c490f10f234e82108b998
SHA1: a5f29a7acaddea3f4af307e8cf2d0cc82645fd7d
SHA256: e5183ca131f7195bde5b27e4cd18deeb6d14f8bc5c483b1431421132927240af
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Joda.org Low Vendor Manifest bundle-symbolicname joda-time Medium Vendor pom organization url http://www.joda.org Medium Vendor Manifest Implementation-Vendor-Id org.joda Medium Vendor Manifest Implementation-Vendor Joda.org High Vendor pom description Date and time library to replace JDK date handling Medium Vendor Manifest bundle-docurl http://joda-time.sourceforge.net/ Low Vendor pom organization name Joda.org High Vendor Manifest extension-name joda-time Medium Vendor pom groupid joda-time Highest Vendor pom artifactid joda-time Low Vendor pom name Joda time High Vendor file name joda-time High Vendor pom url http://joda-time.sourceforge.net Highest Product Manifest Bundle-Name Joda-Time Medium Product Manifest bundle-symbolicname joda-time Medium Product pom artifactid joda-time Highest Product pom description Date and time library to replace JDK date handling Medium Product pom organization name Joda.org Low Product Manifest bundle-docurl http://joda-time.sourceforge.net/ Low Product pom url http://joda-time.sourceforge.net Medium Product Manifest extension-name joda-time Medium Product Manifest Implementation-Title org.joda.time High Product Manifest specification-title Joda-Time Medium Product pom organization url http://www.joda.org Low Product pom name Joda time High Product file name joda-time High Product pom groupid joda-time Low Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest Version file version 2.2 Highest
Related Dependencies joda-time-2.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/joda-time-2.2.jar MD5: 226f5207543c490f10f234e82108b998 SHA1: a5f29a7acaddea3f4af307e8cf2d0cc82645fd7d SHA256: e5183ca131f7195bde5b27e4cd18deeb6d14f8bc5c483b1431421132927240af maven: joda-time:joda-time:2.2 Confidence :High json-1.8.jarDescription:
A clean-room Apache-licensed implementation of simple JSON processing License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/json-1.8.jar
MD5: a89b66cf37063d0ee4f401193eb0ca2d
SHA1: fa57d5adf557b226738cd42e6c093dd0a76c5fd4
SHA256: e0b487de3ccd3d1c288976677835e49880799c35507059039a18fa4ae1e7c59a
Evidence Type Source Name Value Confidence Vendor file name json High Vendor pom groupid tdunning Highest Vendor pom artifactid json Low Vendor pom name Open JSON High Vendor pom description A clean-room Apache-licensed implementation of simple JSON processing Medium Vendor jar package name json Low Vendor pom url tdunning/open-json Highest Product file name json High Product pom name Open JSON High Product pom url tdunning/open-json High Product pom groupid tdunning Low Product pom description A clean-room Apache-licensed implementation of simple JSON processing Medium Product pom artifactid json Highest Version pom version 1.8 Highest Version file version 1.8 Highest
maven: com.tdunning:json:1.8 Confidence :High json-simple-1.1.1.jarDescription:
A simple Java toolkit for JSON License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/json-simple-1.1.1.jar
MD5: 5cc2c478d73e8454b4c369cee66c5bc7
SHA1: c9ad4a0850ab676c5c64461a05ca524cdfff59f1
SHA256: 4e69696892b88b41c55d49ab2fdcc21eead92bf54acc588c0050596c3b75199c
Evidence Type Source Name Value Confidence Vendor file name json-simple High Vendor Manifest bundle-symbolicname com.googlecode.json-simple Medium Vendor pom artifactid json-simple Low Vendor pom name JSON.simple High Vendor pom url http://code.google.com/p/json-simple/ Highest Vendor pom groupid googlecode.json-simple Highest Vendor manifest Bundle-Description A simple Java toolkit for JSON Medium Vendor pom description A simple Java toolkit for JSON Medium Product file name json-simple High Product Manifest Bundle-Name JSON.simple Medium Product pom artifactid json-simple Highest Product Manifest bundle-symbolicname com.googlecode.json-simple Medium Product pom name JSON.simple High Product pom url http://code.google.com/p/json-simple/ Medium Product manifest Bundle-Description A simple Java toolkit for JSON Medium Product pom description A simple Java toolkit for JSON Medium Product pom groupid googlecode.json-simple Low Version pom version 1.1.1 Highest Version file version 1.1.1 Highest
Related Dependencies json-simple-1.1.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/json-simple-1.1.1.jar MD5: 5cc2c478d73e8454b4c369cee66c5bc7 SHA1: c9ad4a0850ab676c5c64461a05ca524cdfff59f1 SHA256: 4e69696892b88b41c55d49ab2fdcc21eead92bf54acc588c0050596c3b75199c maven: com.googlecode.json-simple:json-simple:1.1.1 Confidence :High jsonld-java-0.11.1.jarDescription:
Json-LD core implementation License:
https://raw.github.com/jsonld-java/jsonld-java/master/LICENCE File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jsonld-java-0.11.1.jar
MD5: 4119003de4cd8df5146916bd2211dc65
SHA1: 359ef21705d0c64645ca672cf436df5fd7f5af66
SHA256: d79a4d5748afadabfd27a53244a734e3c39e91164f7741b4216b012e6673c594
Evidence Type Source Name Value Confidence Vendor file name jsonld-java High Vendor pom parent-artifactid jsonld-java-parent Low Vendor Manifest bundle-symbolicname com.github.jsonld-java Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor pom name JSONLD Java :: Core High Vendor pom parent-groupid com.github.jsonld-java Medium Vendor manifest Bundle-Description Json-LD core implementation Medium Vendor pom artifactid jsonld-java Low Vendor pom description Json-LD core implementation Medium Vendor pom groupid github.jsonld-java Highest Product file name jsonld-java High Product pom parent-groupid com.github.jsonld-java Low Product Manifest bundle-symbolicname com.github.jsonld-java Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom name JSONLD Java :: Core High Product pom artifactid jsonld-java Highest Product pom parent-artifactid jsonld-java-parent Medium Product manifest Bundle-Description Json-LD core implementation Medium Product Manifest Bundle-Name JSONLD Java :: Core Medium Product pom groupid github.jsonld-java Low Product pom description Json-LD core implementation Medium Version pom version 0.11.1 Highest Version file version 0.11.1 Highest
maven: com.github.jsonld-java:jsonld-java:0.11.1 Confidence :High jsoup-1.11.2.jarDescription:
jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do. License:
The MIT License: https://jsoup.org/license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jsoup-1.11.2.jar
MD5: 798fe34ab37709e67188cbdf6a504435
SHA1: e3eeb8a0b4ce1db246059a41e353cd7413dad226
SHA256: f4b843e5012648676117f1cadf0adbd5dff91f0cb07b888d6b4d6e7cbb9737db
Evidence Type Source Name Value Confidence Vendor pom organization name Jonathan Hedley High Vendor Manifest bundle-docurl https://jsoup.org/ Low Vendor pom description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Vendor pom url https://jsoup.org/ Highest Vendor Manifest bundle-symbolicname org.jsoup Medium Vendor pom organization url http://jonathanhedley.com/ Medium Vendor manifest Bundle-Description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Vendor pom groupid jsoup Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom name jsoup Java HTML Parser High Vendor file name jsoup High Vendor pom artifactid jsoup Low Product Manifest bundle-docurl https://jsoup.org/ Low Product pom organization url http://jonathanhedley.com/ Low Product pom organization name Jonathan Hedley Low Product pom description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Product pom artifactid jsoup Highest Product Manifest bundle-symbolicname org.jsoup Medium Product Manifest Bundle-Name jsoup Java HTML Parser Medium Product pom groupid jsoup Low Product manifest Bundle-Description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Product pom url https://jsoup.org/ Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name jsoup Java HTML Parser High Product file name jsoup High Version pom version 1.11.2 Highest Version file version 1.11.2 Highest
maven: org.jsoup:jsoup:1.11.2 Confidence :Highcpe: cpe:/a:jsoup:jsoup:1.11.2 Confidence :Low suppress jsr-275-0.9.3.jarDescription:
JSR-275 specifies Java packages for the programmatic handling
of physical quantities and their expression as numbers of units.
License:
Specification License: LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jsr-275-0.9.3.jar
MD5: e7a135baa55ec464055d75e4fd4d6b6f
SHA1: ab2fb094fc5297ae5636ef6ed0d6051d5a656588
SHA256: bab7f6456c79790362b0669aab20d511d3ad99dc22e020bafb5a708f2b18d78e
Evidence Type Source Name Value Confidence Vendor pom organization name JScience High Vendor pom description JSR-275 specifies Java packages for the programmatic handling of physical quantities and their expression as numbers of units. Low Vendor pom url https://kenai.com/projects/jsr-275 Highest Vendor pom groupid javax.measure Highest Vendor pom artifactid jsr-275 Low Vendor pom organization url http://jscience.org Medium Vendor Manifest bundle-symbolicname javax.measure Medium Vendor pom name JSR-275 High Vendor file name jsr-275 High Product Manifest Bundle-Name Measures and Units Medium Product pom description JSR-275 specifies Java packages for the programmatic handling of physical quantities and their expression as numbers of units. Low Product pom url https://kenai.com/projects/jsr-275 Medium Product pom organization url http://jscience.org Low Product Manifest bundle-symbolicname javax.measure Medium Product pom name JSR-275 High Product pom groupid javax.measure Low Product pom organization name JScience Low Product file name jsr-275 High Product Manifest Implementation-Title JSR-275 High Product pom artifactid jsr-275 Highest Version file version 0.9.3 Highest Version Manifest Implementation-Version 0.9.3 High Version pom version 0.9.3 Highest
maven: javax.measure:jsr-275:0.9.3 Confidence :High jsr305-3.0.1.jarDescription:
JSR305 Annotations for Findbugs License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jsr305-3.0.1.jar
MD5: c6532beb3f7cc54a8d73d25d5602b9e4
SHA1: f7be08ec23c21485b9b5a1cf1654c2ec8c58168d
SHA256: c885ce34249682bc0236b4a7d56efcc12048e6135a5baf7a9cde8ad8cda13fcd
Evidence Type Source Name Value Confidence Vendor file name jsr305 High Vendor pom url http://findbugs.sourceforge.net/ Highest Vendor manifest Bundle-Description JSR305 Annotations for Findbugs Medium Vendor pom description JSR305 Annotations for Findbugs Medium Vendor pom groupid google.code.findbugs Highest Vendor pom artifactid jsr305 Low Vendor pom name FindBugs-jsr305 High Vendor Manifest bundle-symbolicname org.jsr-305 Medium Product file name jsr305 High Product pom url http://findbugs.sourceforge.net/ Medium Product manifest Bundle-Description JSR305 Annotations for Findbugs Medium Product pom description JSR305 Annotations for Findbugs Medium Product Manifest Bundle-Name FindBugs-jsr305 Medium Product pom groupid google.code.findbugs Low Product pom artifactid jsr305 Highest Product pom name FindBugs-jsr305 High Product Manifest bundle-symbolicname org.jsr-305 Medium Version file version 3.0.1 Highest Version pom version 3.0.1 Highest
maven: com.google.code.findbugs:jsr305:3.0.1 Confidence :High jul-to-slf4j-1.7.24.jarDescription:
JUL to SLF4J bridge File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jul-to-slf4j-1.7.24.jarMD5: 8f13c04772e364c3ca0a1d9d979cc701SHA1: 25a2be668cb2ad1d05d76c0773df73b4b53617fdSHA256: 0056006ce1d23d6ffb2a6e331ae8496de69a630b152c07c79174b467dcd75576
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom parent-artifactid slf4j-parent Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor pom description JUL to SLF4J bridge Medium Vendor manifest Bundle-Description JUL to SLF4J bridge Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor pom name JUL to SLF4J bridge High Vendor pom artifactid jul-to-slf4j Low Vendor file name jul-to-slf4j High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product pom parent-groupid org.slf4j Low Product Manifest bundle-symbolicname jul.to.slf4j Medium Product pom description JUL to SLF4J bridge Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest Bundle-Name jul-to-slf4j Medium Product pom artifactid jul-to-slf4j Highest Product manifest Bundle-Description JUL to SLF4J bridge Medium Product pom name JUL to SLF4J bridge High Product pom groupid slf4j Low Product file name jul-to-slf4j High Version Manifest Implementation-Version 1.7.24 High Version file version 1.7.24 Highest Version pom version 1.7.24 Highest
cpe: cpe:/a:slf4j:slf4j:1.7.24 Confidence :Low suppress maven: org.slf4j:jul-to-slf4j:1.7.24 Confidence :High junrar-0.7.jarDescription:
rar decompression library in plain java License:
UnRar License: https://raw.github.com/junrar/junrar/master/license.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/junrar-0.7.jar
MD5: 75a215b9e921044cd2c88e73f6cb9745
SHA1: 18cc717b85af0b12ba922abf415c2ff4716f8219
SHA256: 7c764fa1af319b98ff452189ab31bb722ea74ed7a52b17b0c6282249c10a61fc
Evidence Type Source Name Value Confidence Vendor file name junrar High Vendor pom description rar decompression library in plain java Medium Vendor pom url junrar/junrar Highest Vendor pom artifactid junrar Low Vendor pom name Java UnRar High Vendor Manifest url https://github.com/junrar/junrar Low Vendor pom groupid github.junrar Highest Product pom url junrar/junrar High Product file name junrar High Product pom description rar decompression library in plain java Medium Product pom name Java UnRar High Product pom groupid github.junrar Low Product Manifest url https://github.com/junrar/junrar Low Product pom artifactid junrar Highest Version file version 0.7 Highest Version pom version 0.7 Highest
maven: com.github.junrar:junrar:0.7 Confidence :High mapdb-1.0.8.jarDescription:
MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap memory. It is a fast, scalable and easy to use embedded Java database. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/mapdb-1.0.8.jar
MD5: aaea7b500b214a08b2dc61d38d04024e
SHA1: 64485a221d9095fc7ab9b50cc34c6b4b58467e2e
SHA256: e757738f3a0867d7d9a1f1532bf7ca09eab02f032767eb403c991cb4e09c4fe0
Evidence Type Source Name Value Confidence Vendor file name mapdb High Vendor pom description MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap memory. It is a fast, scalable and easy to use embedded Java database. Low Vendor manifest Bundle-Description MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap memory. It is a fast, scalable and easy to use embedded Java database. Low Vendor pom url http://www.mapdb.org Highest Vendor pom artifactid mapdb Low Vendor pom groupid mapdb Highest Vendor Manifest bundle-symbolicname org.mapdb.mapdb Medium Vendor pom name mapdb High Product pom artifactid mapdb Highest Product file name mapdb High Product pom description MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap memory. It is a fast, scalable and easy to use embedded Java database. Low Product manifest Bundle-Description MapDB provides concurrent Maps, Sets and Queues backed by disk storage or off-heap memory. It is a fast, scalable and easy to use embedded Java database. Low Product pom url http://www.mapdb.org Medium Product Manifest bundle-symbolicname org.mapdb.mapdb Medium Product Manifest Bundle-Name mapdb Medium Product pom name mapdb High Product pom groupid mapdb Low Version file version 1.0.8 Highest Version pom version 1.0.8 Highest
maven: org.mapdb:mapdb:1.0.8 Confidence :High metadata-extractor-2.10.1.jarDescription:
Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/metadata-extractor-2.10.1.jar
MD5: 296a04140013cadcbdaf0e8b6c63fd3b
SHA1: e1852a8f519dbb0196fdb41bf2c584a8858189f8
SHA256: 2eb9231cb8c99c7341f8f30ff96b37df4602e71b6061713b3a65f2b8ea93a95f
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.drewnoakes Medium Vendor file name metadata-extractor High Vendor pom groupid drewnoakes Highest Vendor pom artifactid metadata-extractor Low Vendor pom name ${project.groupId}:${project.artifactId} High Vendor Manifest implementation-url https://drewnoakes.com/code/exif/ Low Vendor pom url https://drewnoakes.com/code/exif/ Highest Vendor Manifest Implementation-Vendor Drew Noakes High Vendor pom description Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. Medium Product file name metadata-extractor High Product pom groupid drewnoakes Low Product Manifest Implementation-Title metadata-extractor High Product pom name ${project.groupId}:${project.artifactId} High Product Manifest implementation-url https://drewnoakes.com/code/exif/ Low Product pom url https://drewnoakes.com/code/exif/ Medium Product pom artifactid metadata-extractor Highest Product pom description Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. Medium Version pom version 2.10.1 Highest Version Manifest Implementation-Version 2.10.1 High Version file version 2.10.1 Highest
maven: com.drewnoakes:metadata-extractor:2.10.1 Confidence :Highcpe: cpe:/a:id:id-software:2.10.1 Confidence :Low suppress nekohtml-1.9.20.jarDescription:
An HTML parser and tag balancer. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/nekohtml-1.9.20.jar
MD5: 29955bb122cf6f3981e2c6d3a0aaa6f9
SHA1: f7c918a3548dd81a15aab0619809b59f9bf4e931
SHA256: e96a010ebc4c4126104be073e1189a78ff987b31ea3e2ff5b547ec44dcf64471
Evidence Type Source Name Value Confidence Vendor jar package name html Low Vendor file name nekohtml High Vendor manifest: org/cyberneko/html/ Implementation-Vendor Andy Clark, Marc Guillemot Medium Vendor pom groupid net.sourceforge.nekohtml Highest Vendor jar package name cyberneko Low Vendor pom artifactid nekohtml Low Vendor pom description An HTML parser and tag balancer. Medium Vendor pom url http://nekohtml.sourceforge.net/ Highest Vendor central groupid net.sourceforge.nekohtml Highest Vendor pom name Neko HTML High Product jar package name html Low Product file name nekohtml High Product central artifactid nekohtml Highest Product pom artifactid nekohtml Highest Product pom description An HTML parser and tag balancer. Medium Product manifest: org/cyberneko/html/ Specification-Title Hyper-Text Markup Language (HTML) Medium Product manifest: org/cyberneko/html/ Implementation-Title CyberNeko HTML Parser Medium Product pom name Neko HTML High Product pom groupid net.sourceforge.nekohtml Low Product pom url http://nekohtml.sourceforge.net/ Medium Version central version 1.9.20 Highest Version pom version 1.9.20 Highest Version file version 1.9.20 Highest
netcdf4-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/netcdf4-4.5.5.jarMD5: 5f14df469295650fd65748a003c9ba56SHA1: 0675d63ecc857c50dd50858011b670160aa30b62SHA256: 131e3983dcf001677be069a7471797a4a9ad2c9783e88db56e32506cf1039635
Evidence Type Source Name Value Confidence Vendor file name netcdf4 High Vendor Manifest Implementation-Vendor UCAR/Unidata High Vendor pom parent-artifactid thredds-parent Low Vendor pom name netCDF-4 IOSP JNI connection to C library High Vendor Manifest built-on 20150306.1537 Low Vendor pom groupid edu.ucar Highest Vendor Manifest Implementation-Vendor-Id edu.ucar Medium Vendor pom artifactid netcdf4 Low Product file name netcdf4 High Product pom name netCDF-4 IOSP JNI connection to C library High Product Manifest built-on 20150306.1537 Low Product pom artifactid netcdf4 Highest Product pom parent-artifactid thredds-parent Medium Product Manifest Implementation-Title netCDF-4 IOSP JNI connection to C library High Product pom groupid edu.ucar Low Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
Related Dependencies netcdf4-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/netcdf4-4.5.5.jar MD5: 5f14df469295650fd65748a003c9ba56 SHA1: 0675d63ecc857c50dd50858011b670160aa30b62 SHA256: 131e3983dcf001677be069a7471797a4a9ad2c9783e88db56e32506cf1039635 maven: edu.ucar:netcdf4:4.5.5 Confidence :High opennlp-tools-1.8.3.jarDescription:
The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/opennlp-tools-1.8.3.jar
MD5: 297f05aa3e15d5842e66de8759c49a0c
SHA1: 3ce7c9056048f55478d983248cf18c7e02b1d072
SHA256: e07c6fe83efe110063560bc70e3a9dca5a5e1c10077becc96998c488da80368c
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name org.apache.opennlp.tools Medium Vendor pom artifactid opennlp-tools Low Vendor Manifest bundle-symbolicname org.apache.opennlp.tools Medium Vendor pom parent-groupid org.apache.opennlp Medium Vendor pom parent-artifactid opennlp Low Vendor pom groupid apache.opennlp Highest Vendor file name opennlp-tools High Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor pom name Apache OpenNLP Tools High Vendor Manifest Implementation-Vendor-Id org.apache.opennlp Medium Product Manifest automatic-module-name org.apache.opennlp.tools Medium Product Manifest bundle-symbolicname org.apache.opennlp.tools Medium Product pom artifactid opennlp-tools Highest Product file name opennlp-tools High Product Manifest specification-title Apache OpenNLP Tools Medium Product Manifest bundle-docurl https://www.apache.org/ Low Product pom parent-artifactid opennlp Medium Product manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Product pom parent-groupid org.apache.opennlp Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom groupid apache.opennlp Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product pom name Apache OpenNLP Tools High Product Manifest Bundle-Name Apache OpenNLP Tools Medium Product Manifest Implementation-Title Apache OpenNLP Tools High Version file version 1.8.3 Highest Version pom version 1.8.3 Highest Version Manifest Implementation-Version 1.8.3 High
maven: org.apache.opennlp:opennlp-tools:1.8.3 Confidence :Highcpe: cpe:/a:apache:opennlp:1.8.3 Confidence :Low suppress owlapi-api-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-api-5.1.3.jarMD5: 5e6ce18a389343f72cda4c691c1debd2SHA1: d7639db44ecdf3be7ffad1dab01139cd43994e4cSHA256: 329990b49b4f56a25c60db9ce07e351bb5321994a82ad61799f20be355b0c8db
Evidence Type Source Name Value Confidence Vendor pom groupid net.sourceforge.owlapi Highest Vendor jar package name owlapi Low Vendor jar package name semanticweb Low Vendor pom artifactid owlapi-api Low Vendor pom name OWLAPI :: Interfaces High Vendor pom parent-artifactid owlapi-parent Low Vendor file name owlapi-api High Product jar package name owlapi Low Product pom parent-artifactid owlapi-parent Medium Product pom name OWLAPI :: Interfaces High Product file name owlapi-api High Product pom groupid net.sourceforge.owlapi Low Product pom artifactid owlapi-api Highest Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-api:5.1.3 Confidence :High owlapi-apibinding-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-apibinding-5.1.3.jarMD5: 0ec4200787206953e3091a96b5651dc7SHA1: b4e62e224bb77c73fe8506969424aa1b9b3d49daSHA256: c41a344d2f7b007b1bfd4c4e59c3dfb5aa45f866e0eb5dd13bf24910a1db869d
Evidence Type Source Name Value Confidence Vendor pom groupid net.sourceforge.owlapi Highest Vendor jar package name owlapi Low Vendor jar package name semanticweb Low Vendor pom parent-artifactid owlapi-parent Low Vendor file name owlapi-apibinding High Vendor jar package name apibinding Low Vendor pom artifactid owlapi-apibinding Low Vendor pom name OWLAPI :: Binding and Config High Product jar package name owlapi Low Product pom parent-artifactid owlapi-parent Medium Product pom artifactid owlapi-apibinding Highest Product pom groupid net.sourceforge.owlapi Low Product file name owlapi-apibinding High Product jar package name apibinding Low Product pom name OWLAPI :: Binding and Config High Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-apibinding:5.1.3 Confidence :High owlapi-impl-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-impl-5.1.3.jarMD5: 7bb0b737cd7715344dc208cbae21e6e2SHA1: e8b16cbe69238e67a703de35998e4668da96d993SHA256: b5c4c98bba2d61fb7aa72b74e43b4a24edcffc109c6a51c3f455463ef174531c
Evidence Type Source Name Value Confidence Vendor file name owlapi-impl High Vendor pom groupid net.sourceforge.owlapi Highest Vendor jar package name manchester Low Vendor jar package name ac Low Vendor pom parent-artifactid owlapi-parent Low Vendor pom artifactid owlapi-impl Low Vendor pom name OWLAPI :: Default Implementation High Vendor jar package name uk Low Product file name owlapi-impl High Product jar package name cs Low Product jar package name manchester Low Product pom parent-artifactid owlapi-parent Medium Product jar package name ac Low Product pom artifactid owlapi-impl Highest Product pom groupid net.sourceforge.owlapi Low Product pom name OWLAPI :: Default Implementation High Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-impl:5.1.3 Confidence :High owlapi-oboformat-5.1.3.jarDescription:
A java library for converting obo format documents to OWL, and for converting (a subset of) OWL to obo format. This version has been slightly modified to be included directly in the OWL API.
The upstream code for this module and its authors can be found at https://code.google.com/p/oboformat/. License:
The BSD 3-Clause License: http://opensource.org/licenses/BSD-3-Clause File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-oboformat-5.1.3.jar
MD5: e01a0fc9bf161e49d7da74a3fdc18982
SHA1: f126b03f5264099454b903ef717efa0cbac89962
SHA256: 4a2d554d7c8b3dddffd8c8b391d6fc330281914e56deb41692e4d0f943e12d7f
Evidence Type Source Name Value Confidence Vendor pom artifactid owlapi-oboformat Low Vendor pom groupid net.sourceforge.owlapi Highest Vendor pom url http://code.google.com/p/oboformat/ Highest Vendor pom name OWLAPI :: OBO Format High Vendor pom description A java library for converting obo format documents to OWL, and for converting (a subset of) OWL to obo format. This version has been slightly modified to be included directly in the OWL API. The upstream code for this module and its authors can be found at https://code.google.com/p/oboformat/. Low Vendor jar package name oboformat Low Vendor jar package name obolibrary Low Vendor pom parent-artifactid owlapi-parent Low Vendor file name owlapi-oboformat High Product pom url http://code.google.com/p/oboformat/ Medium Product pom parent-artifactid owlapi-parent Medium Product pom name OWLAPI :: OBO Format High Product pom description A java library for converting obo format documents to OWL, and for converting (a subset of) OWL to obo format. This version has been slightly modified to be included directly in the OWL API. The upstream code for this module and its authors can be found at https://code.google.com/p/oboformat/. Low Product jar package name oboformat Low Product file name owlapi-oboformat High Product pom groupid net.sourceforge.owlapi Low Product pom artifactid owlapi-oboformat Highest Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-oboformat:5.1.3 Confidence :High owlapi-parsers-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-parsers-5.1.3.jarMD5: 016f0c0f70dbbf701f6e00ce05094bf9SHA1: c24de9746f35726cf0a7fdc545e6ce7e425c277fSHA256: 906ea6b599c149bfef48855e809eeda61fcfd87ba147b0be3833f2a8e877050b
Evidence Type Source Name Value Confidence Vendor pom groupid net.sourceforge.owlapi Highest Vendor jar package name owlapi Low Vendor jar package name semanticweb Low Vendor file name owlapi-parsers High Vendor pom parent-artifactid owlapi-parent Low Vendor pom name OWLAPI :: Parsers High Vendor pom artifactid owlapi-parsers Low Product jar package name owlapi Low Product pom parent-artifactid owlapi-parent Medium Product file name owlapi-parsers High Product pom name OWLAPI :: Parsers High Product pom groupid net.sourceforge.owlapi Low Product pom artifactid owlapi-parsers Highest Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-parsers:5.1.3 Confidence :High owlapi-rio-5.1.3.jarDescription:
Extends OWLAPI to export ontologies to any RDF4J Rio RDFHandler, including databases and in-memory RDF statement collections. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-rio-5.1.3.jarMD5: 47e6841810c444a3ba06d95af94b7018SHA1: 4224ebb4927995b05c8dab75506d0490a6127f77SHA256: 3d52557cccce9e0c2359a94e46a741eeb403f2ad7e62682ec1eec3abc6fbdaa0
Evidence Type Source Name Value Confidence Vendor pom groupid net.sourceforge.owlapi Highest Vendor jar package name owlapi Low Vendor pom name OWLAPI :: RDF4J Rio High Vendor file name owlapi-rio High Vendor pom artifactid owlapi-rio Low Vendor jar package name semanticweb Low Vendor jar package name rio Low Vendor pom parent-artifactid owlapi-parent Low Vendor pom description Extends OWLAPI to export ontologies to any RDF4J Rio RDFHandler, including databases and in-memory RDF statement collections. Low Product jar package name owlapi Low Product pom artifactid owlapi-rio Highest Product pom parent-artifactid owlapi-parent Medium Product pom name OWLAPI :: RDF4J Rio High Product file name owlapi-rio High Product jar package name rio Low Product pom groupid net.sourceforge.owlapi Low Product pom description Extends OWLAPI to export ontologies to any RDF4J Rio RDFHandler, including databases and in-memory RDF statement collections. Low Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-rio:5.1.3 Confidence :High owlapi-tools-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/owlapi-tools-5.1.3.jarMD5: 67cf116e35baa02c45cf5617d349da8cSHA1: 786cb4a714c6cc4b7f10adc46c05c50300d86313SHA256: e892f1afb37ecb9295d5319840d2bf86d45539b870207429487a2a010cbfce6d
Evidence Type Source Name Value Confidence Vendor pom groupid net.sourceforge.owlapi Highest Vendor pom artifactid owlapi-tools Low Vendor file name owlapi-tools High Vendor pom parent-artifactid owlapi-parent Low Vendor pom name OWLAPI :: Atomic Decomposition and Explanation High Product pom artifactid owlapi-tools Highest Product pom parent-artifactid owlapi-parent Medium Product file name owlapi-tools High Product pom name OWLAPI :: Atomic Decomposition and Explanation High Product pom groupid net.sourceforge.owlapi Low Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
maven: net.sourceforge.owlapi:owlapi-tools:5.1.3 Confidence :High pdfbox-2.0.8.jarDescription:
The Apache PDFBox library is an open source Java tool for working with PDF documents.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/pdfbox-2.0.8.jar
MD5: b43bdfa877cd844f385138bfc5d5bedc
SHA1: 17bdf273d66f3afe41eedb9d3ab6a7b819c44a0c
SHA256: 8deec6288a6d0866f2794ae2c1924459f1b70234f04ac223ff9a773e317f5816
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description The Apache PDFBox library is an open source Java tool for working with PDF documents. Medium Vendor pom parent-groupid org.apache.pdfbox Medium Vendor Manifest bundle-symbolicname org.apache.pdfbox Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor file name pdfbox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid pdfbox Low Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor pom parent-artifactid pdfbox-parent Low Vendor pom name Apache PDFBox High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom description
The Apache PDFBox library is an open source Java tool for working with PDF documents.
Medium Product manifest Bundle-Description The Apache PDFBox library is an open source Java tool for working with PDF documents. Medium Product pom artifactid pdfbox Highest Product Manifest specification-title Apache PDFBox Medium Product Manifest bundle-symbolicname org.apache.pdfbox Medium Product file name pdfbox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest Bundle-Name Apache PDFBox Medium Product Manifest Implementation-Title Apache PDFBox High Product pom parent-groupid org.apache.pdfbox Low Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product pom name Apache PDFBox High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom description
The Apache PDFBox library is an open source Java tool for working with PDF documents.
Medium Version file version 2.0.8 Highest Version Manifest Implementation-Version 2.0.8 High Version pom version 2.0.8 Highest
Related Dependencies pdfbox-tools-2.0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/pdfbox-tools-2.0.8.jar MD5: cd448ad97d7e21a4ed6dde2670eb07b1 SHA1: 1c0ba702f74b2d1baca1f0d5e172738b3c122fac SHA256: 2eec0ca26dfa922399346376537560c92db69381b03b5a7193b373017a9fd8fb maven: org.apache.pdfbox:pdfbox:2.0.8 Confidence :Highcpe: cpe:/a:apache:pdfbox:2.0.8 Confidence :Low suppress poi-3.16.jarDescription:
Apache POI - Java API To Access Microsoft Format Files License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/poi-3.16.jar
MD5: 1ef486c7a099aba3286a31501ec280e6
SHA1: ad21c123ee5d6b5b2a8f0d4ed23b3ffe6759a889
SHA256: cc5d9ab5a954661eee031b817e411831bf2d79e7444525e46e1d7f4c9426d341
Evidence Type Source Name Value Confidence Vendor pom url http://poi.apache.org/ Highest Vendor jar package name apache Low Vendor pom description Apache POI - Java API To Access Microsoft Format Files Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name poi Low Vendor pom organization name Apache Software Foundation High Vendor pom name Apache POI High Vendor pom organization url http://www.apache.org/ Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.poi Highest Vendor pom artifactid poi Low Vendor Manifest Implementation-Vendor-Id org.apache.poi Medium Vendor central groupid org.apache.poi Highest Vendor file name poi High Product pom organization url http://www.apache.org/ Low Product pom description Apache POI - Java API To Access Microsoft Format Files Medium Product pom artifactid poi Highest Product jar package name poi Low Product pom name Apache POI High Product central artifactid poi Highest Product Manifest specification-title Apache POI Medium Product pom groupid apache.poi Low Product pom url http://poi.apache.org/ Medium Product Manifest Implementation-Title Apache POI High Product file name poi High Product pom organization name Apache Software Foundation Low Version file version 3.16 Highest Version Manifest Implementation-Version 3.16 High Version pom version 3.16 Highest Version central version 3.16 Highest
Related Dependencies poi-ooxml-3.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/poi-ooxml-3.16.jar MD5: 1a50b9479b34a0bae4c3416c9f80cdc2 SHA1: 76e20fe22404cc4da55ddfdaaaadee32bbfa3bdd SHA256: ba12ddc84437303ff634c4dc7f86dddc63c8d5713d1a31324a3230028064312c maven: org.apache.poi:poi-ooxml:3.16 ✓ poi-ooxml-schemas-3.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/poi-ooxml-schemas-3.16.jar MD5: e8cb4510f2b245611a61f09d9afadf4c SHA1: 9828a49307fc6bebfd42185b677d88b6e4994c63 SHA256: 41ccef6ed62cb1e0de49231f8015b910baf390fefeb38b4046b2b5af4a379ec9 maven: org.apache.poi:poi-ooxml-schemas:3.16 ✓ poi-scratchpad-3.16.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/poi-scratchpad-3.16.jar MD5: 3e9a19b14a0c2becc39fd0fcda18cd3d SHA1: 69d6dda524e38a491b362d0f94ef74a514faf70a SHA256: 88baaa4df8e888458204eae10772aa9846149d70bdf981054ce11ff2b401c992 maven: org.apache.poi:poi-scratchpad:3.16 ✓ quartz-2.2.0.jarDescription:
Enterprise Job Scheduler License:
http://www.apache.org/licenses/LICENSE-2.0.txt
Apache Software License, Version 2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/quartz-2.2.0.jar
MD5: 56d748f33fa07cb50c86eb72f53141b5
SHA1: 2eb16fce055d5f3c9d65420f6fc4efd3a079a3d8
SHA256: ad9fbd38399b2c5c5931b9a9161ca07ec5ba916b22f4292bd9791259c5c1f1d6
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Enterprise Job Scheduler Medium Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor pom parent-artifactid quartz-parent Low Vendor Manifest buildinfo-url https://svn.terracotta.org/repo/quartz/tags/quartz-2.2.0 Low Vendor Manifest buildinfo-timestamp 20130629-140504 Low Vendor pom description Enterprise Job Scheduler Medium Vendor pom name quartz High Vendor Manifest terracotta-name quartz Medium Vendor file name quartz High Vendor Manifest buildinfo-revision 2359 Low Vendor Manifest bundle-docurl http://www.terracotta.org Low Vendor pom parent-groupid org.quartz-scheduler Medium Vendor Manifest bundle-symbolicname org.quartz-scheduler.quartz Medium Vendor pom artifactid quartz Low Vendor pom groupid quartz-scheduler Highest Vendor manifest terracotta-description Enterprise Job Scheduler Medium Product manifest Bundle-Description Enterprise Job Scheduler Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product pom parent-groupid org.quartz-scheduler Low Product Manifest Bundle-Name quartz Medium Product Manifest buildinfo-url https://svn.terracotta.org/repo/quartz/tags/quartz-2.2.0 Low Product pom groupid quartz-scheduler Low Product Manifest buildinfo-timestamp 20130629-140504 Low Product pom parent-artifactid quartz-parent Medium Product pom description Enterprise Job Scheduler Medium Product pom name quartz High Product pom artifactid quartz Highest Product Manifest terracotta-name quartz Medium Product file name quartz High Product Manifest buildinfo-revision 2359 Low Product Manifest bundle-docurl http://www.terracotta.org Low Product Manifest bundle-symbolicname org.quartz-scheduler.quartz Medium Product manifest terracotta-description Enterprise Job Scheduler Medium Version file version 2.2.0 Highest Version pom version 2.2.0 Highest
Related Dependencies quartz-2.2.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/quartz-2.2.0.jar MD5: 56d748f33fa07cb50c86eb72f53141b5 SHA1: 2eb16fce055d5f3c9d65420f6fc4efd3a079a3d8 SHA256: ad9fbd38399b2c5c5931b9a9161ca07ec5ba916b22f4292bd9791259c5c1f1d6 maven: org.quartz-scheduler:quartz:2.2.0 Confidence :High rdf4j-http-client-2.2.4.jarDescription:
Client functionality for communicating with an RDF4J server over HTTP. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-http-client-2.2.4.jarMD5: 3aa426db7f0d3f0ad40322ca2a1bcddcSHA1: 3120f94524ea30cbff8c4a313c095222c97380d2SHA256: 5b039ba5072be8b01d470aa9c696c64399a6871b6ee57ce596aa145ce5baad63
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-http-client High Vendor pom artifactid rdf4j-http-client Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name http Low Vendor pom description Client functionality for communicating with an RDF4J server over HTTP. Medium Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-http Low Vendor jar package name rdf4j Low Vendor pom name RDF4J: HTTP client High Product file name rdf4j-http-client High Product pom groupid eclipse.rdf4j Low Product jar package name http Low Product pom description Client functionality for communicating with an RDF4J server over HTTP. Medium Product pom artifactid rdf4j-http-client Highest Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom parent-artifactid rdf4j-http Medium Product pom name RDF4J: HTTP client High Product jar package name client Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-http-client:2.2.4 Confidence :High rdf4j-http-protocol-2.2.4.jarDescription:
HTTP protocol (REST-style) File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-http-protocol-2.2.4.jarMD5: 017144b38219f3c9108b36b955c02922SHA1: 3c25cd44a1e4604f03874061cdb25407dd4eba5cSHA256: 9ba5452366372bb03984b16218e070e13dadeb2cf36da41443380db96c3f7a71
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-http-protocol High Vendor pom groupid eclipse.rdf4j Highest Vendor pom artifactid rdf4j-http-protocol Low Vendor jar package name http Low Vendor pom name RDF4J: HTTP protocol High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-http Low Vendor jar package name rdf4j Low Vendor pom description HTTP protocol (REST-style) Medium Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-http-protocol Highest Product file name rdf4j-http-protocol High Product jar package name http Low Product pom name RDF4J: HTTP protocol High Product jar package name protocol Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom description HTTP protocol (REST-style) Medium Product pom parent-artifactid rdf4j-http Medium Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-http-protocol:2.2.4 Confidence :High rdf4j-model-2.2.4.jarDescription:
RDF model interfaces and implementations. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-model-2.2.4.jarMD5: 962b589fb65b6fe5ea7f048f16b3bc82SHA1: 66dc906dabf6aa0c2576eb6876ffd9260a8c0fa9SHA256: c46c669d2af96cbfe6369e6f0aa30d5cc8730dea48d1783c2ba56c7db60eef35
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-core Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom description RDF model interfaces and implementations. Medium Vendor file name rdf4j-model High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom name RDF4J: Model High Vendor jar package name model Low Vendor pom artifactid rdf4j-model Low Product pom artifactid rdf4j-model Highest Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-core Medium Product pom description RDF model interfaces and implementations. Medium Product file name rdf4j-model High Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom name RDF4J: Model High Product jar package name model Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-model:2.2.4 Confidence :High rdf4j-query-2.2.4.jarDescription:
Query interfaces and implementations File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-query-2.2.4.jarMD5: 2108a5b5518f6d639d26c4c360275afaSHA1: 59010009dc5d35303c266486b0e73261f31eeb0aSHA256: 6b192d673eb0b163097ce3b30a37156e9ed52427845f5cc75deee2ff367439e8
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-core Low Vendor file name rdf4j-query High Vendor pom groupid eclipse.rdf4j Highest Vendor pom artifactid rdf4j-query Low Vendor pom description Query interfaces and implementations Medium Vendor jar package name query Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom name RDF4J: Query High Vendor jar package name rdf4j Low Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-query Highest Product file name rdf4j-query High Product pom description Query interfaces and implementations Medium Product jar package name query Low Product pom parent-artifactid rdf4j-core Medium Product pom parent-groupid org.eclipse.rdf4j Low Product pom name RDF4J: Query High Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-query:2.2.4 Confidence :High rdf4j-queryalgebra-evaluation-2.2.4.jarDescription:
Evaluation strategy API and implementations for the query algebra model. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryalgebra-evaluation-2.2.4.jarMD5: 5f2e1c31c6836baf66c91a82703faa1cSHA1: 174ec3999fc485068b733bc2ea9f8b2eacc4638dSHA256: a2dbcdf906ddfe06233eddbd7090af9f41f1a73223962faa40900ac0d21debf7
Evidence Type Source Name Value Confidence Vendor pom name RDF4J: Query algebra - evaluation High Vendor jar package name eclipse Low Vendor pom description Evaluation strategy API and implementations for the query algebra model. Medium Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name query Low Vendor pom parent-artifactid rdf4j-queryalgebra Low Vendor file name rdf4j-queryalgebra-evaluation High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom artifactid rdf4j-queryalgebra-evaluation Low Product pom name RDF4J: Query algebra - evaluation High Product pom description Evaluation strategy API and implementations for the query algebra model. Medium Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-queryalgebra-evaluation Highest Product jar package name query Low Product jar package name algebra Low Product file name rdf4j-queryalgebra-evaluation High Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom parent-artifactid rdf4j-queryalgebra Medium Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryalgebra-evaluation:2.2.4 Confidence :High rdf4j-queryalgebra-model-2.2.4.jarDescription:
A generic query algebra for RDF queries. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryalgebra-model-2.2.4.jarMD5: 5ff218f22e4493749ccb4c851f1468d6SHA1: 93bbbf3635e0c3e2e800bea457cf3af7aca7a8a1SHA256: b13ff83f2d46036503905815d43f74335e0980e9e880175a6cfb7455ccc1a7a6
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom name RDF4J: Query algebra - model High Vendor file name rdf4j-queryalgebra-model High Vendor pom groupid eclipse.rdf4j Highest Vendor pom description A generic query algebra for RDF queries. Medium Vendor jar package name query Low Vendor pom artifactid rdf4j-queryalgebra-model Low Vendor pom parent-artifactid rdf4j-queryalgebra Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Product pom name RDF4J: Query algebra - model High Product pom groupid eclipse.rdf4j Low Product file name rdf4j-queryalgebra-model High Product pom artifactid rdf4j-queryalgebra-model Highest Product pom description A generic query algebra for RDF queries. Medium Product jar package name query Low Product jar package name algebra Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom parent-artifactid rdf4j-queryalgebra Medium Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryalgebra-model:2.2.4 Confidence :High rdf4j-queryparser-api-2.2.4.jarDescription:
Query language parsers API. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryparser-api-2.2.4.jarMD5: 2fc92220ce7444ee46d1ca221cc685a9SHA1: 52a46301c4f5ff39a8c68ab928b89bf6afb5528bSHA256: c1c9eccd7d3badf79fdb2f9cefb7d761aaec0c7a39829becda93210ab4d272eb
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom description Query language parsers API. Medium Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-artifactid rdf4j-queryparser Low Vendor jar package name query Low Vendor file name rdf4j-queryparser-api High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom artifactid rdf4j-queryparser-api Low Vendor pom name RDF4J: Query parser - API High Vendor jar package name rdf4j Low Product pom parent-artifactid rdf4j-queryparser Medium Product jar package name parser Low Product pom artifactid rdf4j-queryparser-api Highest Product pom groupid eclipse.rdf4j Low Product pom description Query language parsers API. Medium Product jar package name query Low Product file name rdf4j-queryparser-api High Product pom parent-groupid org.eclipse.rdf4j Low Product pom name RDF4J: Query parser - API High Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryparser-api:2.2.4 Confidence :High rdf4j-queryparser-serql-2.2.4.jarDescription:
Query language parser implementation for SeRQL. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryparser-serql-2.2.4.jarMD5: ffb65a94f04806e1cdcdbda43023c39aSHA1: 9d0d2806104ff72a15e1aed53d357458ead05fc6SHA256: 334ce14a6a89cc962b1956ae671859e626d2781b3d59b759d7b199cbffce0453
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-queryparser-serql Low Vendor pom name RDF4J: Query parser - SeRQL High Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-artifactid rdf4j-queryparser Low Vendor jar package name query Low Vendor file name rdf4j-queryparser-serql High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom description Query language parser implementation for SeRQL. Medium Product pom parent-artifactid rdf4j-queryparser Medium Product jar package name parser Low Product pom groupid eclipse.rdf4j Low Product pom name RDF4J: Query parser - SeRQL High Product jar package name query Low Product file name rdf4j-queryparser-serql High Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom description Query language parser implementation for SeRQL. Medium Product pom artifactid rdf4j-queryparser-serql Highest Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryparser-serql:2.2.4 Confidence :High rdf4j-queryparser-sparql-2.2.4.jarDescription:
Query language parser implementation for SPARQL. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryparser-sparql-2.2.4.jarMD5: 231e6dfffbf949a53d58ce56a5054d92SHA1: 5dd0309bb630bc1878d1f17d37fff313649089d0SHA256: a1853eb6043a56c17908292194b857da93ccc9d989c18bc1dc7604f60d08803c
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom description Query language parser implementation for SPARQL. Medium Vendor pom artifactid rdf4j-queryparser-sparql Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-artifactid rdf4j-queryparser Low Vendor jar package name query Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom name RDF4J: Query parser - SPARQL High Vendor file name rdf4j-queryparser-sparql High Vendor jar package name rdf4j Low Product pom parent-artifactid rdf4j-queryparser Medium Product jar package name parser Low Product pom artifactid rdf4j-queryparser-sparql Highest Product pom description Query language parser implementation for SPARQL. Medium Product pom groupid eclipse.rdf4j Low Product jar package name query Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom name RDF4J: Query parser - SPARQL High Product file name rdf4j-queryparser-sparql High Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryparser-sparql:2.2.4 Confidence :High rdf4j-queryresultio-api-2.2.4.jarDescription:
Query result IO API File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryresultio-api-2.2.4.jarMD5: e649b9f25d0ebda3316c2751ae8667efSHA1: eb5a0441ee43d4d023b316a5f795cbfb0847bc7dSHA256: a75e19aa0ae39423a66a18fd9a812d581492a96e0f55a60851c58bf5757a52b5
Evidence Type Source Name Value Confidence Vendor pom artifactid rdf4j-queryresultio-api Low Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-queryresultio Low Vendor pom name RDF4J: Query result IO - API High Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name query Low Vendor pom description Query result IO API Medium Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor file name rdf4j-queryresultio-api High Product pom name RDF4J: Query result IO - API High Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-queryresultio Medium Product jar package name resultio Low Product jar package name query Low Product pom description Query result IO API Medium Product pom parent-groupid org.eclipse.rdf4j Low Product pom artifactid rdf4j-queryresultio-api Highest Product jar package name rdf4j Low Product file name rdf4j-queryresultio-api High Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryresultio-api:2.2.4 Confidence :High rdf4j-queryresultio-sparqlxml-2.2.4.jarDescription:
Query result parser and writer implementation for the SPARQL Query Results XML Format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-queryresultio-sparqlxml-2.2.4.jarMD5: 04676d5fcd200fa478f80b61d041b38eSHA1: 8ed99a2c96399f82163a64ed19e51137f8a92e6eSHA256: b178d0d922e8e8c4c3f9e1dd964ac445f11fb7066e78e245474a37d02da26f2c
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-queryresultio Low Vendor pom artifactid rdf4j-queryresultio-sparqlxml Low Vendor pom description Query result parser and writer implementation for the SPARQL Query Results XML Format. Medium Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name query Low Vendor file name rdf4j-queryresultio-sparqlxml High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom name RDF4J: Query result IO - SPARQL/XML High Product pom groupid eclipse.rdf4j Low Product pom description Query result parser and writer implementation for the SPARQL Query Results XML Format. Medium Product pom artifactid rdf4j-queryresultio-sparqlxml Highest Product pom parent-artifactid rdf4j-queryresultio Medium Product jar package name resultio Low Product jar package name query Low Product file name rdf4j-queryresultio-sparqlxml High Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom name RDF4J: Query result IO - SPARQL/XML High Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-queryresultio-sparqlxml:2.2.4 Confidence :High rdf4j-repository-api-2.2.4.jarDescription:
API for interacting with repositories of RDF data. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-repository-api-2.2.4.jarMD5: 4308eeb03afb0da6ab8c956c902bb8d9SHA1: 706a23020cce03e119e824b241119a00ddd169b4SHA256: a5a06cb15b6db25ce7d7536822fb506b83297be172d8b3c5d8a863f5fa513637
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-repository Low Vendor file name rdf4j-repository-api High Vendor pom description API for interacting with repositories of RDF data. Medium Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name repository Low Vendor jar package name rdf4j Low Vendor pom artifactid rdf4j-repository-api Low Vendor pom name RDF4J: Repository - API High Product file name rdf4j-repository-api High Product pom description API for interacting with repositories of RDF data. Medium Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-repository Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name repository Low Product pom artifactid rdf4j-repository-api Highest Product jar package name rdf4j Low Product pom name RDF4J: Repository - API High Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-repository-api:2.2.4 Confidence :High rdf4j-repository-sail-2.2.4.jarDescription:
Repository that uses a Sail stack. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-repository-sail-2.2.4.jarMD5: 309660b2f929ac26ee9ee67322c3b835SHA1: b86215848dba4304149fa950bfc5cd2b41308877SHA256: 809464c686bc8d5a0f0b84aa0e411829971f481aa61b5fcbf47a6aa0cd7af1b4
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-repository Low Vendor pom name RDF4J: SailRepository High Vendor file name rdf4j-repository-sail High Vendor pom groupid eclipse.rdf4j Highest Vendor pom artifactid rdf4j-repository-sail Low Vendor pom description Repository that uses a Sail stack. Medium Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name repository Low Vendor jar package name rdf4j Low Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-repository Medium Product pom name RDF4J: SailRepository High Product pom artifactid rdf4j-repository-sail Highest Product file name rdf4j-repository-sail High Product pom description Repository that uses a Sail stack. Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name repository Low Product jar package name rdf4j Low Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-repository-sail:2.2.4 Confidence :High rdf4j-repository-sparql-2.2.4.jarDescription:
The SPARQL Repository provides a RDF4J Repository interface to any SPARQL end-point.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-repository-sparql-2.2.4.jarMD5: 783ae955f895f2cb8774f1625913883aSHA1: 04b6abfb8d24d5da7edc55da814076b513166dddSHA256: c1d6d129b7e4de830aec2be86ded2fc6b289d72eea5230f3f9c785c7465ef477
Evidence Type Source Name Value Confidence Vendor pom name RDF4J: SPARQL Repository High Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-repository Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom description
The SPARQL Repository provides a RDF4J Repository interface to any SPARQL end-point.
Medium Vendor pom artifactid rdf4j-repository-sparql Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name repository Low Vendor file name rdf4j-repository-sparql High Vendor jar package name rdf4j Low Product pom name RDF4J: SPARQL Repository High Product pom artifactid rdf4j-repository-sparql Highest Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-repository Medium Product pom description
The SPARQL Repository provides a RDF4J Repository interface to any SPARQL end-point.
Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name repository Low Product file name rdf4j-repository-sparql High Product jar package name rdf4j Low Product jar package name sparql Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-repository-sparql:2.2.4 Confidence :High rdf4j-rio-api-2.2.4.jarDescription:
Rio API. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-api-2.2.4.jarMD5: 6ddd29b0d0eb9b9427db49cce4b0f868SHA1: 2afacf815d01773a1b8e40377ec797e220988427SHA256: 9a9ccaaa909633d953a3c9bebbc7970a59e32bdd69c5c18b9455c211d9b88ba8
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom description Rio API. Medium Vendor file name rdf4j-rio-api High Vendor pom groupid eclipse.rdf4j Highest Vendor pom name RDF4J: Rio - API High Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom artifactid rdf4j-rio-api Low Vendor jar package name rdf4j Low Product jar package name helpers Low Product pom groupid eclipse.rdf4j Low Product pom description Rio API. Medium Product file name rdf4j-rio-api High Product pom artifactid rdf4j-rio-api Highest Product pom parent-artifactid rdf4j-rio Medium Product pom name RDF4J: Rio - API High Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-api:2.2.4 Confidence :High rdf4j-rio-binary-2.2.2.jarDescription:
Rio parser and writer implementation for the binary RDF file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-binary-2.2.2.jarMD5: 73694aaa4020482290d4299d8f897dabSHA1: 977e4f85f35dd2e7759f0f5d755a29ee52f2cab2SHA256: c1db48b721ca864f7189c67973c215424a9b659ddf8edbe1c05ae79aff43548f
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom name RDF4J: Rio - Binary High Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor pom description Rio parser and writer implementation for the binary RDF file format. Medium Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor file name rdf4j-rio-binary High Vendor pom artifactid rdf4j-rio-binary Low Product pom groupid eclipse.rdf4j Low Product pom name RDF4J: Rio - Binary High Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom description Rio parser and writer implementation for the binary RDF file format. Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom artifactid rdf4j-rio-binary Highest Product file name rdf4j-rio-binary High Product jar package name binary Low Version file version 2.2.2 Highest Version pom version 2.2.2 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-binary:2.2.2 Confidence :High rdf4j-rio-datatypes-2.2.4.jarDescription:
Rio Datatype handler implementations. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-datatypes-2.2.4.jarMD5: f54595a93666b23d3e526cf452831014SHA1: cecc85aaf011dbf13626291b00fac7c9c3931149SHA256: 19433b3b59906f32c22d21f74d7785231d5fb1806964fba38c6857e2c0361339
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-rio-datatypes Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom description Rio Datatype handler implementations. Medium Vendor pom name RDF4J: Rio - Datatypes High Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor file name rdf4j-rio-datatypes High Vendor jar package name rdf4j Low Product pom artifactid rdf4j-rio-datatypes Highest Product pom groupid eclipse.rdf4j Low Product jar package name datatypes Low Product pom description Rio Datatype handler implementations. Medium Product pom name RDF4J: Rio - Datatypes High Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product file name rdf4j-rio-datatypes High Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-datatypes:2.2.4 Confidence :High rdf4j-rio-jsonld-2.2.4.jarDescription:
Rio parser and writer implementation for the JSON-LD file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-jsonld-2.2.4.jarMD5: 2428d802e9559c17d4d1b1bb59ca75acSHA1: aa0691df6f95cef4e4777923e5be43d558448e6dSHA256: 7eafa8573aace47f9e1945c9bae435ac2c5c54698aa7b32833ca82129238d74a
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor file name rdf4j-rio-jsonld High Vendor pom description Rio parser and writer implementation for the JSON-LD file format. Medium Vendor jar package name rio Low Vendor pom name RDF4J: Rio - JSON-LD High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom artifactid rdf4j-rio-jsonld Low Product pom artifactid rdf4j-rio-jsonld Highest Product pom groupid eclipse.rdf4j Low Product file name rdf4j-rio-jsonld High Product pom parent-artifactid rdf4j-rio Medium Product pom description Rio parser and writer implementation for the JSON-LD file format. Medium Product jar package name rio Low Product pom name RDF4J: Rio - JSON-LD High Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product jar package name jsonld Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-jsonld:2.2.4 Confidence :High rdf4j-rio-languages-2.2.4.jarDescription:
Rio Language handler implementations. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-languages-2.2.4.jarMD5: 07950c6b5cb5489d3d9d507955433b05SHA1: 988b0c0fc90054d8e445766600243372895bf48eSHA256: 07d0e25ab5c82936c0c548f3c5ad1c360305229a82ae69cad9d068640a2db52b
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-rio-languages Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor file name rdf4j-rio-languages High Vendor pom description Rio Language handler implementations. Medium Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom name RDF4J: Rio - Languages High Vendor jar package name rdf4j Low Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-rio-languages Highest Product file name rdf4j-rio-languages High Product pom description Rio Language handler implementations. Medium Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom name RDF4J: Rio - Languages High Product jar package name rdf4j Low Product jar package name languages Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-languages:2.2.4 Confidence :High rdf4j-rio-n3-2.2.4.jarDescription:
Rio writer implementation for the N3 file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-n3-2.2.4.jarMD5: 7bcca53baea18c0a675725387727c956SHA1: 6ec9bcdaf512523f3bc004b5acda47cf87c98e7eSHA256: beb29cd8965c306db5c2583ba3ebff8b3e92cd5050c66ca4b96b7cbf5046db6a
Evidence Type Source Name Value Confidence Vendor pom description Rio writer implementation for the N3 file format. Medium Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-rio-n3 Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom name RDF4J: Rio - N3 (writer-only) High Vendor pom groupid eclipse.rdf4j Highest Vendor file name rdf4j-rio-n3 High Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Product pom description Rio writer implementation for the N3 file format. Medium Product pom groupid eclipse.rdf4j Low Product jar package name n3 Low Product pom name RDF4J: Rio - N3 (writer-only) High Product pom artifactid rdf4j-rio-n3 Highest Product file name rdf4j-rio-n3 High Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-n3:2.2.4 Confidence :High rdf4j-rio-nquads-2.2.4.jarDescription:
Rio parser and writer implementation for the N-Quads file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-nquads-2.2.4.jarMD5: 121cdffa7d12c6355b4346d08237efbbSHA1: 46b89170fce894cf4f90ebdb1aadda5f2efad595SHA256: 7d20a196e08d4700a3bc6c451309b05707fac861cd04f0d1e1acf19a92bad886
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-rio-nquads Low Vendor pom parent-artifactid rdf4j-rio Low Vendor file name rdf4j-rio-nquads High Vendor pom groupid eclipse.rdf4j Highest Vendor pom name RDF4J: Rio - N-Quads High Vendor pom description Rio parser and writer implementation for the N-Quads file format. Medium Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-rio-nquads Highest Product file name rdf4j-rio-nquads High Product jar package name nquads Low Product pom name RDF4J: Rio - N-Quads High Product pom description Rio parser and writer implementation for the N-Quads file format. Medium Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-nquads:2.2.4 Confidence :High rdf4j-rio-ntriples-2.2.4.jarDescription:
Rio parser and writer implementation for the N-Triples file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-ntriples-2.2.4.jarMD5: 0c0b54efda90108639ce9403c281ece9SHA1: 774a19bc97b55975958a196d646db4789a2638eeSHA256: 7d30456301affb1671c8f6e071a8e7e0b49f61d072b7e1070577778d127679fc
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-rio-ntriples High Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor pom artifactid rdf4j-rio-ntriples Low Vendor pom name RDF4J: Rio - N-Triples High Vendor pom description Rio parser and writer implementation for the N-Triples file format. Medium Product file name rdf4j-rio-ntriples High Product pom groupid eclipse.rdf4j Low Product jar package name ntriples Low Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom artifactid rdf4j-rio-ntriples Highest Product jar package name rdf4j Low Product pom name RDF4J: Rio - N-Triples High Product pom description Rio parser and writer implementation for the N-Triples file format. Medium Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-ntriples:2.2.4 Confidence :High rdf4j-rio-rdfjson-2.2.4.jarDescription:
Rio parser and writer implementation for the RDF/JSON file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-rdfjson-2.2.4.jarMD5: 3827bb87648cc1825b49e0b78b8d4a45SHA1: 4d2c8cecc3e547d8cbc3facc151580319de5c850SHA256: cc7359b908b12a3e3e073948a0f1746b1bfa56141f65723c1546aac8f1e5faed
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom description Rio parser and writer implementation for the RDF/JSON file format. Medium Vendor file name rdf4j-rio-rdfjson High Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom name RDF4J: Rio - RDF/JSON High Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom artifactid rdf4j-rio-rdfjson Low Vendor jar package name rdf4j Low Product pom groupid eclipse.rdf4j Low Product pom description Rio parser and writer implementation for the RDF/JSON file format. Medium Product file name rdf4j-rio-rdfjson High Product pom artifactid rdf4j-rio-rdfjson Highest Product pom parent-artifactid rdf4j-rio Medium Product pom name RDF4J: Rio - RDF/JSON High Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product jar package name rdfjson Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-rdfjson:2.2.4 Confidence :High rdf4j-rio-rdfxml-2.2.4.jarDescription:
Rio parser and writer implementation for the RDF/XML file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-rdfxml-2.2.4.jarMD5: 5fa9bb0509db4fcac4776974ece887bcSHA1: 268986a7de693188f52f9fa54df951779d9c367fSHA256: 4a0f323cfefe52b054fd32578bf5dbf9a6c10a708f3223e775a3a5533d59960c
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-rio-rdfxml Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor file name rdf4j-rio-rdfxml High Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom description Rio parser and writer implementation for the RDF/XML file format. Medium Vendor jar package name rdf4j Low Vendor pom name RDF4J: Rio - RDF/XML High Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-rio-rdfxml Highest Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product file name rdf4j-rio-rdfxml High Product pom parent-groupid org.eclipse.rdf4j Low Product pom description Rio parser and writer implementation for the RDF/XML file format. Medium Product jar package name rdfxml Low Product jar package name rdf4j Low Product pom name RDF4J: Rio - RDF/XML High Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-rdfxml:2.2.4 Confidence :High rdf4j-rio-trig-2.2.4.jarDescription:
Rio parser and writer implementation for the TriG file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-trig-2.2.4.jarMD5: ffa1437aaec202a6dba138da55bcc202SHA1: 76bfcb0c5ffc34faa0f27e2612a8bca22562e306SHA256: 5cbc2e7a963e283fe763787dc68ad2b2ec3eb1d5be33fd02db2416d8b854359d
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom name RDF4J: Rio - TriG High Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom description Rio parser and writer implementation for the TriG file format. Medium Vendor jar package name rdf4j Low Vendor pom artifactid rdf4j-rio-trig Low Vendor file name rdf4j-rio-trig High Product pom groupid eclipse.rdf4j Low Product pom name RDF4J: Rio - TriG High Product pom artifactid rdf4j-rio-trig Highest Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product jar package name trig Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom description Rio parser and writer implementation for the TriG file format. Medium Product jar package name rdf4j Low Product file name rdf4j-rio-trig High Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-trig:2.2.4 Confidence :High rdf4j-rio-trix-2.2.4.jarDescription:
Rio parser and writer implementation for the TriX file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-trix-2.2.4.jarMD5: 9f699fb67dc5a48342c70b4aea8e8deaSHA1: cf5588b330c6a5da8e0f7d2d4b4cbede673ee156SHA256: 724b7d05afa601dcf38d42b96b9bc7cf370421f337b4563b5726dcdce41eeac4
Evidence Type Source Name Value Confidence Vendor pom artifactid rdf4j-rio-trix Low Vendor pom name RDF4J: Rio - TriX High Vendor pom description Rio parser and writer implementation for the TriX file format. Medium Vendor jar package name eclipse Low Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor file name rdf4j-rio-trix High Product pom name RDF4J: Rio - TriX High Product pom description Rio parser and writer implementation for the TriX file format. Medium Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom artifactid rdf4j-rio-trix Highest Product jar package name rdf4j Low Product file name rdf4j-rio-trix High Product jar package name trix Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-trix:2.2.4 Confidence :High rdf4j-rio-turtle-2.2.4.jarDescription:
Rio parser and writer implementation for the Turtle file format. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-rio-turtle-2.2.4.jarMD5: d8343abf36edee186379fa06d24059c9SHA1: a1cd677143e5a5c960d421483319b26658010d74SHA256: 3bafb46a9a41fe8dcca69db9883078e4b1c6906a287117422b60a669cf02f1ad
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-rio-turtle High Vendor pom parent-artifactid rdf4j-rio Low Vendor pom groupid eclipse.rdf4j Highest Vendor jar package name rio Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom name RDF4J: Rio - Turtle High Vendor pom artifactid rdf4j-rio-turtle Low Vendor jar package name rdf4j Low Vendor pom description Rio parser and writer implementation for the Turtle file format. Medium Product jar package name turtle Low Product pom groupid eclipse.rdf4j Low Product file name rdf4j-rio-turtle High Product pom artifactid rdf4j-rio-turtle Highest Product pom parent-artifactid rdf4j-rio Medium Product jar package name rio Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom name RDF4J: Rio - Turtle High Product jar package name rdf4j Low Product pom description Rio parser and writer implementation for the Turtle file format. Medium Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-rio-turtle:2.2.4 Confidence :High rdf4j-sail-api-2.2.4.jarDescription:
RDF Storage And Inference Layer ("Sail") API. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-sail-api-2.2.4.jarMD5: ba1d91ab7da09abe00d2d96cb1f876c7SHA1: 2eeaf4019c0d3ddd2bfa65b3f3529af7850eacfdSHA256: 6659cbeae9d6eb542c660e4350a922fc4259e084999b47d7e92cb936be0f743d
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom name RDF4J: Sail API High Vendor pom description RDF Storage And Inference Layer ("Sail") API. Medium Vendor pom groupid eclipse.rdf4j Highest Vendor pom artifactid rdf4j-sail-api Low Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-sail Low Vendor file name rdf4j-sail-api High Vendor jar package name rdf4j Low Vendor jar package name sail Low Product pom name RDF4J: Sail API High Product pom description RDF Storage And Inference Layer ("Sail") API. Medium Product pom artifactid rdf4j-sail-api Highest Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-sail Medium Product pom parent-groupid org.eclipse.rdf4j Low Product file name rdf4j-sail-api High Product jar package name rdf4j Low Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-sail-api:2.2.4 Confidence :Highcpe: cpe:/a:storage_api_project:storage_api:2.2.4 Confidence :Low suppress rdf4j-sail-base-2.2.4.jarDescription:
RDF Storage And Inference Layer ("Sail") API. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-sail-base-2.2.4.jarMD5: 4299bd54de03a521456f23cf78039ba8SHA1: 4c9e1d3289fb55b5be1ebca12495829d0ba589fdSHA256: e10f790aca270599294573ee5556da94c21435ff22c6df6e2d696704e20b0162
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom description RDF Storage And Inference Layer ("Sail") API. Medium Vendor pom name RDF4J: Sail base implementations High Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-sail Low Vendor jar package name rdf4j Low Vendor file name rdf4j-sail-base High Vendor jar package name sail Low Vendor pom artifactid rdf4j-sail-base Low Product pom description RDF Storage And Inference Layer ("Sail") API. Medium Product pom name RDF4J: Sail base implementations High Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-sail Medium Product jar package name base Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom artifactid rdf4j-sail-base Highest Product jar package name rdf4j Low Product file name rdf4j-sail-base High Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-sail-base:2.2.4 Confidence :High rdf4j-sail-inferencer-2.2.4.jarDescription:
Stackable Sail implementation that adds RDF Schema inferencing to an RDF store. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-sail-inferencer-2.2.4.jarMD5: 3ca4915c4491112bde2a04eb5f31b208SHA1: 93534b221e8e23dd4a159103d98377ae56783ce0SHA256: 10a24175977bbf4d2cefdb11411fbf4d7d1143be7f8c5326a02693779224c6d0
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-sail-inferencer High Vendor pom groupid eclipse.rdf4j Highest Vendor pom name RDF4J: Inferencer Sails High Vendor pom description Stackable Sail implementation that adds RDF Schema inferencing to an RDF store. Medium Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-sail Low Vendor jar package name rdf4j Low Vendor jar package name sail Low Vendor pom artifactid rdf4j-sail-inferencer Low Product file name rdf4j-sail-inferencer High Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-sail Medium Product jar package name inferencer Low Product pom artifactid rdf4j-sail-inferencer Highest Product pom name RDF4J: Inferencer Sails High Product pom description Stackable Sail implementation that adds RDF Schema inferencing to an RDF store. Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-sail-inferencer:2.2.4 Confidence :High rdf4j-sail-memory-2.2.4.jarDescription:
Sail implementation that stores data in main memory, optionally using a dump-restore file for persistence. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-sail-memory-2.2.4.jarMD5: 7ad94418a5ad4b8597f6d300439d1bcaSHA1: 7676271ad8649653d7b1dcd50cab42ae5c9cac9cSHA256: c7fad34d049d6434a3250d0d0efaed13dde9b5cbd274b20682bbcc52b35d8650
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor file name rdf4j-sail-memory High Vendor pom name RDF4J: MemoryStore High Vendor pom description Sail implementation that stores data in main memory, optionally using a dump-restore file for persistence. Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-sail Low Vendor jar package name rdf4j Low Vendor jar package name sail Low Vendor pom artifactid rdf4j-sail-memory Low Product file name rdf4j-sail-memory High Product pom name RDF4J: MemoryStore High Product pom groupid eclipse.rdf4j Low Product jar package name memory Low Product pom parent-artifactid rdf4j-sail Medium Product pom description Sail implementation that stores data in main memory, optionally using a dump-restore file for persistence. Low Product pom parent-groupid org.eclipse.rdf4j Low Product pom artifactid rdf4j-sail-memory Highest Product jar package name rdf4j Low Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-sail-memory:2.2.4 Confidence :High rdf4j-sail-model-2.2.4.jarDescription:
Sail implementation of Model. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-sail-model-2.2.4.jarMD5: c10b9fbed50fc6a4db75dc3d18498e50SHA1: 58407096e2e67f6723fa894af2ff47295f49512aSHA256: d6d32cb2fcceeaf71e6a44844d5824c35c89fdb0acbffa1f017299c217632ca8
Evidence Type Source Name Value Confidence Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-sail-model Low Vendor pom name RDF4J: Sail Model High Vendor file name rdf4j-sail-model High Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor pom parent-artifactid rdf4j-sail Low Vendor jar package name rdf4j Low Vendor pom description Sail implementation of Model. Medium Vendor jar package name sail Low Product pom groupid eclipse.rdf4j Low Product pom parent-artifactid rdf4j-sail Medium Product pom name RDF4J: Sail Model High Product file name rdf4j-sail-model High Product pom artifactid rdf4j-sail-model Highest Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product pom description Sail implementation of Model. Medium Product jar package name model Low Product jar package name sail Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-sail-model:2.2.4 Confidence :High rdf4j-util-2.2.4.jarDescription:
RDF4J utility classes File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rdf4j-util-2.2.4.jarMD5: a28adde72db02031628bb5312f451464SHA1: 9782e4445f52e1709a5c2617673fa1aeeffd4b9fSHA256: 74248ab99a0cb60e93930618d3abffca886c4c0937e6926258072438def5e11f
Evidence Type Source Name Value Confidence Vendor pom name RDF4J: util High Vendor pom description RDF4J utility classes Medium Vendor jar package name eclipse Low Vendor pom artifactid rdf4j-util Low Vendor file name rdf4j-util High Vendor pom parent-artifactid rdf4j-core Low Vendor pom groupid eclipse.rdf4j Highest Vendor pom parent-groupid org.eclipse.rdf4j Medium Vendor jar package name rdf4j Low Vendor jar package name common Low Product pom name RDF4J: util High Product pom description RDF4J utility classes Medium Product file name rdf4j-util High Product pom groupid eclipse.rdf4j Low Product pom artifactid rdf4j-util Highest Product pom parent-artifactid rdf4j-core Medium Product pom parent-groupid org.eclipse.rdf4j Low Product jar package name rdf4j Low Product jar package name common Low Version pom version 2.2.4 Highest Version file version 2.2.4 Highest
maven: org.eclipse.rdf4j:rdf4j-util:2.2.4 Confidence :High rome-1.5.1.jarDescription:
All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it
easy to work in Java with most syndication formats. Today it accepts all flavors of RSS
(0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes
a set of parsers and generators for the various flavors of feeds, as well as converters
to convert from one format to another. The parsers can give you back Java objects that
are either specific for the format you want to work with, or a generic normalized
SyndFeed object that lets you work on with the data without bothering about the
underlying format.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rome-1.5.1.jarMD5: 07039d4b871513942d0495311947275fSHA1: cc3489f066749bede7fc81f4e80c0d8c9534a210SHA256: 0f754b6886c3c97e1ca8ccd6c94de383a14908cd6f1e68b6ab951af016e8b23f
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid rome-parent Low Vendor pom parent-groupid com.rometools Medium Vendor pom url http://rometools.github.io/rome/ Highest Vendor pom name rome High Vendor pom description All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it easy to work in Java with most syndication formats. Today it accepts all flavors of RSS (0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes a set of parsers and generators for the various flavors of feeds, as well as converters to convert from one format to another. The parsers can give you back Java objects that are either specific for the format you want to work with, or a generic normalized SyndFeed object that lets you work on with the data without bothering about the underlying format. Low Vendor file name rome High Vendor pom groupid rometools Highest Vendor pom artifactid rome Low Vendor Manifest Implementation-Vendor-Id com.rometools Medium Product Manifest specification-title rome Medium Product pom url http://rometools.github.io/rome/ Medium Product pom groupid rometools Low Product pom name rome High Product pom description All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it easy to work in Java with most syndication formats. Today it accepts all flavors of RSS (0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes a set of parsers and generators for the various flavors of feeds, as well as converters to convert from one format to another. The parsers can give you back Java objects that are either specific for the format you want to work with, or a generic normalized SyndFeed object that lets you work on with the data without bothering about the underlying format. Low Product file name rome High Product pom parent-artifactid rome-parent Medium Product pom parent-groupid com.rometools Low Product Manifest Implementation-Title rome High Product pom artifactid rome Highest Version Manifest Implementation-Version 1.5.1 High Version file version 1.5.1 Highest Version pom version 1.5.1 Highest
Related Dependencies rome-1.5.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/feed/rome-1.5.1.jar MD5: 07039d4b871513942d0495311947275f SHA1: cc3489f066749bede7fc81f4e80c0d8c9534a210 SHA256: 0f754b6886c3c97e1ca8ccd6c94de383a14908cd6f1e68b6ab951af016e8b23f rome-1.5.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/rome-1.5.1.jar MD5: 07039d4b871513942d0495311947275f SHA1: cc3489f066749bede7fc81f4e80c0d8c9534a210 SHA256: 0f754b6886c3c97e1ca8ccd6c94de383a14908cd6f1e68b6ab951af016e8b23f maven: com.rometools:rome:1.5.1 Confidence :High rome-utils-1.5.1.jarDescription:
Utility classes for ROME projects File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/rome-utils-1.5.1.jarMD5: ba0f0958cbbacd734b383038c3dcb0efSHA1: 3a3d6473a2f5d55fb31bf6c269af963fdea13b54SHA256: 8267802f2f959558a7974ea754c2d80d3e1c813d24045c066c539664d8422be2
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid rome-parent Low Vendor pom name rome-utils High Vendor pom parent-groupid com.rometools Medium Vendor pom description Utility classes for ROME projects Medium Vendor pom url http://rometools.github.io/rome-utils/ Highest Vendor jar package name utils Low Vendor pom artifactid rome-utils Low Vendor file name rome-utils High Vendor pom groupid rometools Highest Vendor jar package name rometools Low Product pom name rome-utils High Product pom description Utility classes for ROME projects Medium Product pom groupid rometools Low Product pom url http://rometools.github.io/rome-utils/ Medium Product pom artifactid rome-utils Highest Product jar package name utils Low Product file name rome-utils High Product pom parent-artifactid rome-parent Medium Product pom parent-groupid com.rometools Low Version file version 1.5.1 Highest Version pom version 1.5.1 Highest
Related Dependencies rome-utils-1.5.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/rome-utils-1.5.1.jar MD5: ba0f0958cbbacd734b383038c3dcb0ef SHA1: 3a3d6473a2f5d55fb31bf6c269af963fdea13b54 SHA256: 8267802f2f959558a7974ea754c2d80d3e1c813d24045c066c539664d8422be2 rome-utils-1.5.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/feed/rome-utils-1.5.1.jar MD5: ba0f0958cbbacd734b383038c3dcb0ef SHA1: 3a3d6473a2f5d55fb31bf6c269af963fdea13b54 SHA256: 8267802f2f959558a7974ea754c2d80d3e1c813d24045c066c539664d8422be2 maven: com.rometools:rome-utils:1.5.1 Confidence :High semargl-core-0.7.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/semargl-core-0.7.jarMD5: fc196c1524d7ecd48a02f4476b6ed698SHA1: ec871a69b46a1ff6426ca64d192806fd81cdf0f8SHA256: c8288871e587c2e5ab49cb07e475739e707805cabebafc0dd2e14cd545aee19a
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid semargl-parent Low Vendor file name semargl-core High Vendor pom artifactid semargl-core Low Vendor pom parent-groupid org.semarglproject Medium Vendor jar package name semarglproject Low Vendor pom groupid semarglproject Highest Vendor pom name Semargl: Core High Product file name semargl-core High Product pom parent-artifactid semargl-parent Medium Product pom artifactid semargl-core Highest Product pom name Semargl: Core High Product pom parent-groupid org.semarglproject Low Product pom groupid semarglproject Low Version file version 0.7 Highest Version pom version 0.7 Highest
maven: org.semarglproject:semargl-core:0.7 Confidence :High semargl-rdf-0.7.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/semargl-rdf-0.7.jarMD5: 5d438c201c2f7bc33b3dc43422e85f52SHA1: 8dbc4043a73be4fbe8a287a5f3b1e257f8f6fc16SHA256: 44090a1830af5dba7ba2f9fba4cfd80e7551c84d1acb52f4962bb56841920d27
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid semargl-parent Low Vendor jar package name rdf Low Vendor pom name Semargl: RDF High Vendor file name semargl-rdf High Vendor pom parent-groupid org.semarglproject Medium Vendor jar package name semarglproject Low Vendor pom groupid semarglproject Highest Vendor pom artifactid semargl-rdf Low Product pom artifactid semargl-rdf Highest Product pom parent-artifactid semargl-parent Medium Product jar package name rdf Low Product pom name Semargl: RDF High Product file name semargl-rdf High Product pom parent-groupid org.semarglproject Low Product pom groupid semarglproject Low Version file version 0.7 Highest Version pom version 0.7 Highest
maven: org.semarglproject:semargl-rdf:0.7 Confidence :High semargl-rdf4j-0.7.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/semargl-rdf4j-0.7.jarMD5: d4bc1bb4bab7afcc7a9566501e877611SHA1: 0fa47f470dcf408ea496b0e7d7f3b0ceb22c9a52SHA256: d5f988e1dfe41331e5fdc9713324ba41a7d69e7fa51e2cced4b61a645c160a9f
Evidence Type Source Name Value Confidence Vendor pom name Semargl: RDF4J Integration High Vendor file name semargl-rdf4j High Vendor pom parent-artifactid semargl-integration Low Vendor jar package name rdf Low Vendor pom parent-groupid org.semarglproject Medium Vendor jar package name semarglproject Low Vendor pom artifactid semargl-rdf4j Low Vendor jar package name rdf4j Low Vendor pom groupid semarglproject Highest Product pom name Semargl: RDF4J Integration High Product file name semargl-rdf4j High Product pom parent-artifactid semargl-integration Medium Product jar package name rdf Low Product jar package name rdfa Low Product jar package name rdf4j Low Product pom parent-groupid org.semarglproject Low Product pom groupid semarglproject Low Product pom artifactid semargl-rdf4j Highest Version file version 0.7 Highest Version pom version 0.7 Highest
maven: org.semarglproject:semargl-rdf4j:0.7 Confidence :High semargl-rdfa-0.7.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/semargl-rdfa-0.7.jarMD5: 70ed3387d15cee7e1f9f6f7a2d34fdd0SHA1: 8cdeb174b0cb97bd6020e980f7c6b57166aeb7f4SHA256: 782eb644018f7b1077dfadd8cfd4ebdbf8966b6bd374d15ab53ad96481624bb7
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid semargl-parent Low Vendor pom name Semargl: RDFa High Vendor jar package name rdf Low Vendor jar package name rdfa Low Vendor pom parent-groupid org.semarglproject Medium Vendor jar package name semarglproject Low Vendor pom groupid semarglproject Highest Vendor file name semargl-rdfa High Vendor pom artifactid semargl-rdfa Low Product pom name Semargl: RDFa High Product pom parent-artifactid semargl-parent Medium Product jar package name rdf Low Product jar package name rdfa Low Product pom artifactid semargl-rdfa Highest Product file name semargl-rdfa High Product pom parent-groupid org.semarglproject Low Product pom groupid semarglproject Low Version file version 0.7 Highest Version pom version 0.7 Highest
maven: org.semarglproject:semargl-rdfa:0.7 Confidence :High sentiment-analysis-parser-0.1.jarDescription:
Combines Apache OpenNLP and Apache Tika and provides facilities for automatically deriving sentiment from text. License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sentiment-analysis-parser-0.1.jar
MD5: 69727e01cb8165e2e5d637e527ea82d4
SHA1: 20d1524a1270c1d26e3314d2ee71a12e6a29a27d
SHA256: 035a28b4d65993b405ddcc98b4bb67cd038d4617e5c8e5c2f4d16d34c8f49e2b
Evidence Type Source Name Value Confidence Vendor pom description Combines Apache OpenNLP and Apache Tika and provides facilities for automatically deriving sentiment from text. Low Vendor jar package name opennlp Low Vendor file name sentiment-analysis-parser High Vendor pom groupid edu.usc.ir Highest Vendor pom url USCDataScience/SentimentAnalysisParser Highest Vendor jar package name sentiment Low Vendor pom artifactid sentiment-analysis-parser Low Vendor pom name SentimentAnalysisParser High Vendor jar package name tools Low Product pom description Combines Apache OpenNLP and Apache Tika and provides facilities for automatically deriving sentiment from text. Low Product file name sentiment-analysis-parser High Product pom artifactid sentiment-analysis-parser Highest Product pom groupid edu.usc.ir Low Product pom url USCDataScience/SentimentAnalysisParser High Product jar package name sentiment Low Product pom name SentimentAnalysisParser High Product jar package name tools Low Version file version 0.1 Highest Version pom version 0.1 Highest
Related Dependencies sentiment-analysis-parser-0.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sentiment-analysis-parser-0.1.jar MD5: 69727e01cb8165e2e5d637e527ea82d4 SHA1: 20d1524a1270c1d26e3314d2ee71a12e6a29a27d SHA256: 035a28b4d65993b405ddcc98b4bb67cd038d4617e5c8e5c2f4d16d34c8f49e2b maven: edu.usc.ir:sentiment-analysis-parser:0.1 Confidence :High sis-metadata-0.6.jarDescription:
Implementations of metadata derived from ISO 19115. This module provides both an implementation
of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through
Java reflection.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sis-metadata-0.6.jar
MD5: 193ae7072888febbac3c0a6007e62cc9
SHA1: 97cde9b02f2548567a06f3ecd42caa39a94ffaf4
SHA256: f1b707c34163d934a46f23f4e6274d56ed59526842e8c39bebeca257c29979b1
Evidence Type Source Name Value Confidence Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.TypeRegistration" Low Vendor pom artifactid sis-metadata Low Vendor pom groupid apache.sis.core Highest Vendor manifest Bundle-Description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor file name sis-metadata High Vendor pom description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Vendor Manifest bundle-symbolicname org.apache.sis.metadata Medium Vendor pom name Apache SIS metadata High Vendor Manifest implementation-url http://sis.apache.org/core/sis-metadata Low Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-metadata Low Vendor Manifest built-on 2015-09-11T22:45:56Z Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.core Highest Vendor jar package name metadata Low Vendor pom parent-artifactid core Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.TypeRegistration" Low Product central artifactid sis-metadata Highest Product manifest Bundle-Description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Implementation-Title Apache SIS metadata High Product pom groupid apache.sis.core Low Product jar package name sis Low Product file name sis-metadata High Product pom description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Product Manifest bundle-symbolicname org.apache.sis.metadata Medium Product pom name Apache SIS metadata High Product Manifest implementation-url http://sis.apache.org/core/sis-metadata Low Product Manifest bundle-docurl http://sis.apache.org/core/sis-metadata Low Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product Manifest built-on 2015-09-11T22:45:56Z Low Product pom parent-artifactid core Medium Product Manifest Bundle-Name Apache SIS metadata Medium Product jar package name metadata Low Product pom artifactid sis-metadata Highest Version central version 0.6 Highest Version file version 0.6 Highest Version Manifest Implementation-Version 0.6 High Version pom version 0.6 Highest
sis-netcdf-0.6.jarDescription:
Bridge between NetCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sis-netcdf-0.6.jar
MD5: af47f83d86ae9c8d8ec22ebe59c581d8
SHA1: c847a664eb707b0663dec4a9257419842a33e903
SHA256: 3b895d9e70f9d8fbc318386f3791e401dc8b9aefd655d1b3ff8d5d6023e0f92c
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.storage Medium Vendor pom groupid apache.sis.storage Highest Vendor jar package name apache Low Vendor jar package name sis Low Vendor file name sis-netcdf High Vendor manifest Bundle-Description Bridge between NetCDF Climate and Forecast (CF) convention and ISO 19115 metadata. Medium Vendor jar package name internal Low Vendor pom artifactid sis-netcdf Low Vendor Manifest bundle-symbolicname org.apache.sis.storage.netcdf Medium Vendor Manifest bundle-docurl http://sis.apache.org/storage/sis-netcdf Low Vendor Manifest built-on 2015-09-11T22:45:56Z Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.storage Highest Vendor pom description
Bridge between NetCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
Medium Vendor Manifest implementation-url http://sis.apache.org/storage/sis-netcdf Low Vendor pom parent-artifactid storage Low Vendor pom name Apache SIS NetCDF storage High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-artifactid storage Medium Product Manifest Implementation-Title Apache SIS NetCDF storage High Product Manifest Bundle-Name Apache SIS NetCDF storage Medium Product jar package name netcdf Low Product jar package name sis Low Product file name sis-netcdf High Product manifest Bundle-Description Bridge between NetCDF Climate and Forecast (CF) convention and ISO 19115 metadata. Medium Product jar package name internal Low Product central artifactid sis-netcdf Highest Product pom parent-groupid org.apache.sis Low Product Manifest bundle-symbolicname org.apache.sis.storage.netcdf Medium Product Manifest specification-title GeoAPI Medium Product Manifest bundle-docurl http://sis.apache.org/storage/sis-netcdf Low Product Manifest built-on 2015-09-11T22:45:56Z Low Product pom artifactid sis-netcdf Highest Product pom description
Bridge between NetCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
Medium Product Manifest implementation-url http://sis.apache.org/storage/sis-netcdf Low Product pom name Apache SIS NetCDF storage High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom groupid apache.sis.storage Low Version central version 0.6 Highest Version file version 0.6 Highest Version Manifest Implementation-Version 0.6 High Version pom version 0.6 Highest
sis-referencing-0.6.jarDescription:
Implementations of Coordinate Reference Systems (CRS),
conversion and transformation services derived from ISO 19111.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sis-referencing-0.6.jar
MD5: e7cb42c4330b3e9ebd8e91cf8bbaa028
SHA1: ca59408047b7c3685661959b5858297e047a4046
SHA256: ecba1bf4079c8f223b239ff8ea8659cb796cbc61985fd2ad372af1f523109835
Evidence Type Source Name Value Confidence Vendor pom groupid apache.sis.core Highest Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest implementation-url http://sis.apache.org/core/sis-referencing Low Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-referencing Low Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor pom name Apache SIS referencing High Vendor pom artifactid sis-referencing Low Vendor Manifest built-on 2015-09-11T22:45:56Z Low Vendor manifest Bundle-Description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor file name sis-referencing High Vendor jar package name referencing Low Vendor Manifest bundle-symbolicname org.apache.sis.referencing Medium Vendor pom description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.AdapterReplacement",org.opengis.referencing.operation.MathTransformFactory,org.opengis.referencing.operation.OperationMethod,org.opengis.temporal.TemporalFactory Low Vendor central groupid org.apache.sis.core Highest Vendor pom parent-artifactid core Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest implementation-url http://sis.apache.org/core/sis-referencing Low Product Manifest bundle-docurl http://sis.apache.org/core/sis-referencing Low Product pom groupid apache.sis.core Low Product Manifest Implementation-Title Apache SIS referencing High Product jar package name sis Low Product pom name Apache SIS referencing High Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product Manifest built-on 2015-09-11T22:45:56Z Low Product manifest Bundle-Description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Product file name sis-referencing High Product Manifest Bundle-Name Apache SIS referencing Medium Product jar package name referencing Low Product Manifest bundle-symbolicname org.apache.sis.referencing Medium Product pom artifactid sis-referencing Highest Product pom description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.AdapterReplacement",org.opengis.referencing.operation.MathTransformFactory,org.opengis.referencing.operation.OperationMethod,org.opengis.temporal.TemporalFactory Low Product pom parent-artifactid core Medium Product central artifactid sis-referencing Highest Version central version 0.6 Highest Version file version 0.6 Highest Version Manifest Implementation-Version 0.6 High Version pom version 0.6 Highest
sis-storage-0.6.jarDescription:
Provides the interfaces and base classes to be implemented by various storage formats.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sis-storage-0.6.jar
MD5: b30f631ab68b989fa35b23f5d6165d30
SHA1: 1996e6209d309380cd191d4483ca19cc25c30fe3
SHA256: c82a5d6cd2825494220bcf6e704379c77af063f06a4ef97938bde8ca0fb0e808
Evidence Type Source Name Value Confidence Vendor Manifest implementation-url http://sis.apache.org/storage/sis-storage Low Vendor pom description
Provides the interfaces and base classes to be implemented by various storage formats.
Medium Vendor file name sis-storage High Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor pom artifactid sis-storage Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.storage Medium Vendor pom groupid apache.sis.storage Highest Vendor jar package name apache Low Vendor Manifest bundle-symbolicname org.apache.sis.storage Medium Vendor manifest Bundle-Description Provides the interfaces and base classes to be implemented by various storage formats. Medium Vendor jar package name sis Low Vendor jar package name internal Low Vendor Manifest built-on 2015-09-11T22:45:56Z Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.storage Highest Vendor Manifest bundle-docurl http://sis.apache.org/storage/sis-storage Low Vendor pom parent-artifactid storage Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Apache SIS common storage High Product Manifest implementation-url http://sis.apache.org/storage/sis-storage Low Product pom description
Provides the interfaces and base classes to be implemented by various storage formats.
Medium Product file name sis-storage High Product pom parent-artifactid storage Medium Product central artifactid sis-storage Highest Product pom artifactid sis-storage Highest Product Manifest bundle-symbolicname org.apache.sis.storage Medium Product manifest Bundle-Description Provides the interfaces and base classes to be implemented by various storage formats. Medium Product jar package name sis Low Product jar package name internal Low Product pom parent-groupid org.apache.sis Low Product Manifest Bundle-Name Apache SIS common storage Medium Product Manifest specification-title GeoAPI Medium Product Manifest built-on 2015-09-11T22:45:56Z Low Product jar package name storage Low Product Manifest bundle-docurl http://sis.apache.org/storage/sis-storage Low Product Manifest Implementation-Title Apache SIS common storage High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom name Apache SIS common storage High Product pom groupid apache.sis.storage Low Version central version 0.6 Highest Version file version 0.6 Highest Version Manifest Implementation-Version 0.6 High Version pom version 0.6 Highest
sis-utility-0.6.jarDescription:
Miscellaneous utilities.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/sis-utility-0.6.jar
MD5: b8da3a7ab7599f60b0e814605217b461
SHA1: 00e049cdb56758f3a92b48af0f7741d102a90152
SHA256: bdf099a6ec539056a54dbf8bee2467b20a61d022a50bb23a95a6e459c64834b5
Evidence Type Source Name Value Confidence Vendor file name sis-utility High Vendor pom groupid apache.sis.core Highest Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor Manifest bundle-symbolicname org.apache.sis.util Medium Vendor pom description
Miscellaneous utilities.
Medium Vendor Manifest built-on 2015-09-11T22:45:56Z Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://sis.apache.org/core/sis-utility Low Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.serviceloader;cardinality:=multiple,osgi.extender;filter:="(osgi.extender=osgi.serviceloader.processor)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest spi-producer * Low Vendor central groupid org.apache.sis.core Highest Vendor pom parent-artifactid core Low Vendor pom name Apache SIS utilities High Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-utility Low Vendor manifest Bundle-Description Miscellaneous utilities. Medium Vendor pom artifactid sis-utility Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product file name sis-utility High Product central artifactid sis-utility Highest Product pom groupid apache.sis.core Low Product pom artifactid sis-utility Highest Product jar package name sis Low Product Manifest bundle-symbolicname org.apache.sis.util Medium Product Manifest Bundle-Name Apache SIS utilities Medium Product pom description
Miscellaneous utilities.
Medium Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product Manifest built-on 2015-09-11T22:45:56Z Low Product Manifest Implementation-Title Apache SIS utilities High Product Manifest implementation-url http://sis.apache.org/core/sis-utility Low Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.serviceloader;cardinality:=multiple,osgi.extender;filter:="(osgi.extender=osgi.serviceloader.processor)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest spi-producer * Low Product pom parent-artifactid core Medium Product pom name Apache SIS utilities High Product Manifest bundle-docurl http://sis.apache.org/core/sis-utility Low Product manifest Bundle-Description Miscellaneous utilities. Medium Version central version 0.6 Highest Version file version 0.6 Highest Version Manifest Implementation-Version 0.6 High Version pom version 0.6 Highest
snakeyaml-1.17.jarDescription:
YAML 1.1 parser and emitter for Java License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/snakeyaml-1.17.jar
MD5: ab621c3cee316236ad04a6f0fe4dd17c
SHA1: 7a27ea250c5130b2922b86dea63cbb1cc10a660c
SHA256: 5666b36f9db46f06dd5a19d73bbff3b588d5969c0f4b8848fde0f5ec849430a5
Evidence Type Source Name Value Confidence Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor pom name SnakeYAML High Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor pom artifactid snakeyaml Low Vendor pom groupid yaml Highest Vendor file name snakeyaml High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom description YAML 1.1 parser and emitter for Java Medium Vendor pom url http://www.snakeyaml.org Highest Vendor manifest Bundle-Description YAML 1.1 parser and emitter for Java Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom artifactid snakeyaml Highest Product pom name SnakeYAML High Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product file name snakeyaml High Product pom groupid yaml Low Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom description YAML 1.1 parser and emitter for Java Medium Product manifest Bundle-Description YAML 1.1 parser and emitter for Java Medium Product pom url http://www.snakeyaml.org Medium Version file version 1.17 Highest Version pom version 1.17 Highest
maven: org.yaml:snakeyaml:1.17 Confidence :High tagsoup-1.2.1.jarDescription:
TagSoup is a SAX-compliant parser written in Java that, instead of parsing well-formed or valid XML, parses HTML as it is found in the wild: poor, nasty and brutish, though quite often far from short. TagSoup is designed for people who have to process this stuff using some semblance of a rational application design. By providing a SAX interface, it allows standard XML tools to be applied to even the worst HTML. TagSoup also includes a command-line processor that reads HTML files and can generate either clean HTML or well-formed XML that is a close approximation to XHTML. License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/tagsoup-1.2.1.jar
MD5: ae73a52cdcbec10cd61d9ef22fab5936
SHA1: 5584627487e984c03456266d3f8802eb85a9ce97
SHA256: ac97f7b4b1d8e9337edfa0e34044f8d0efe7223f6ad8f3a85d54cc1018ea2e04
Evidence Type Source Name Value Confidence Vendor jar package name cowan Low Vendor jar package name ccil Low Vendor pom name TagSoup High Vendor pom artifactid tagsoup Low Vendor pom url http://home.ccil.org/~cowan/XML/tagsoup/ Highest Vendor file name tagsoup High Vendor pom groupid ccil.cowan.tagsoup Highest Vendor jar package name tagsoup Low Vendor central groupid org.ccil.cowan.tagsoup Highest Vendor pom description TagSoup is a SAX-compliant parser written in Java that, instead of parsing well-formed or valid XML, parses HTML as it is found in the wild: poor, nasty and brutish, though quite often far from short. TagSoup is designed for people who have to process this stuff using some semblance of a rational application design. By providing a SAX interface, it allows standard XML tools to be applied to even the worst HTML. TagSoup also includes a command-line processor that reads HTML files and can generate either clean HTML or well-formed XML that is a close approximation to XHTML. Low Product jar package name cowan Low Product pom name TagSoup High Product pom groupid ccil.cowan.tagsoup Low Product pom artifactid tagsoup Highest Product pom url http://home.ccil.org/~cowan/XML/tagsoup/ Medium Product file name tagsoup High Product central artifactid tagsoup Highest Product jar package name tagsoup Low Product pom description TagSoup is a SAX-compliant parser written in Java that, instead of parsing well-formed or valid XML, parses HTML as it is found in the wild: poor, nasty and brutish, though quite often far from short. TagSoup is designed for people who have to process this stuff using some semblance of a rational application design. By providing a SAX interface, it allows standard XML tools to be applied to even the worst HTML. TagSoup also includes a command-line processor that reads HTML files and can generate either clean HTML or well-formed XML that is a close approximation to XHTML. Low Version file version 1.2.1 Highest Version central version 1.2.1 Highest Version pom version 1.2.1 Highest
Related Dependencies tagsoup-1.2.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/tagsoup-1.2.1.jar MD5: ae73a52cdcbec10cd61d9ef22fab5936 SHA1: 5584627487e984c03456266d3f8802eb85a9ce97 SHA256: ac97f7b4b1d8e9337edfa0e34044f8d0efe7223f6ad8f3a85d54cc1018ea2e04 tagsoup-1.2.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-html/tagsoup-1.2.1.jar MD5: ae73a52cdcbec10cd61d9ef22fab5936 SHA1: 5584627487e984c03456266d3f8802eb85a9ce97 SHA256: ac97f7b4b1d8e9337edfa0e34044f8d0efe7223f6ad8f3a85d54cc1018ea2e04 tika-core-1.17.jarDescription:
This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also
includes the core facades for the Tika API.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/tika-core-1.17.jar
MD5: dc1ba32dd6647a99822cf91e9c6a249d
SHA1: b450102c2aee98107474d2f92661d947b9cef183
SHA256: 77c0a63d7693dc968553f92ef061469979b04d458bb11996d7738c45c5f66b5c
Evidence Type Source Name Value Confidence Vendor pom organization url http://www.apache.org Medium Vendor Manifest bundle-docurl http://tika.apache.org/ Low Vendor Manifest Implementation-Vendor-Id org.apache.tika Medium Vendor pom parent-artifactid tika-parent Low Vendor pom name Apache Tika core High Vendor pom parent-groupid org.apache.tika Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor Manifest implementation-url http://tika.apache.org/ Low Vendor Manifest bundle-symbolicname org.apache.tika.core Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.tika Highest Vendor manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom artifactid tika-core Low Vendor pom url http://tika.apache.org/ Highest Vendor file name tika-core High Vendor pom organization name The Apache Software Foundation High Product Manifest bundle-docurl http://tika.apache.org/ Low Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org Low Product pom parent-groupid org.apache.tika Low Product pom name Apache Tika core High Product pom url http://tika.apache.org/ Medium Product pom artifactid tika-core Highest Product pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest implementation-url http://tika.apache.org/ Low Product Manifest bundle-symbolicname org.apache.tika.core Medium Product pom groupid apache.tika Low Product Manifest Implementation-Title Apache Tika core High Product pom parent-artifactid tika-parent Medium Product Manifest Bundle-Name Apache Tika core Medium Product manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest specification-title Apache Tika core Medium Product file name tika-core High Version file version 1.17 Highest Version Manifest Implementation-Version 1.17 High Version pom version 1.17 Highest
Related Dependencies tika-parsers-1.17.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/tika-parsers-1.17.jar MD5: 1ed1107da299a57372c21eed26cfec0d SHA1: 4277c54fcaed542fbc8a0001fdb4c23baccc0132 SHA256: c96e424d73ac3b637e7b348b781df311952b98e92c43d8ead3a45eee21c4bb3d cpe: cpe:/a:apache:tika:1.17 Published Vulnerabilities CVE-2018-1338 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. Vulnerable Software & Versions: (show all )
CVE-2018-1339 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. Vulnerable Software & Versions: (show all )
trove4j-3.0.3.jarDescription:
The Trove library provides high speed regular and primitive
collections for Java.
License:
GNU Lesser General Public License 2.1: http://www.gnu.org/licenses/lgpl-2.1.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/trove4j-3.0.3.jar
MD5: 8fc4d4e0129244f9fd39650c5f30feb2
SHA1: 42ccaf4761f0dfdfa805c9e340d99a755907e2dd
SHA256: 3c8616203d61a12a7e3487e8b34f3c198c2b5ba9e90da0c7ea32d99cd4958012
Evidence Type Source Name Value Confidence Vendor pom artifactid trove4j Low Vendor jar package name trove Low Vendor file name trove4j High Vendor pom name GNU Trove High Vendor central groupid net.sf.trove4j Highest Vendor jar package name gnu Low Vendor Manifest implementation-url http://trove4j.sourceforge.net/ Low Vendor pom url http://trove4j.sf.net Highest Vendor pom groupid net.sf.trove4j Highest Vendor pom description The Trove library provides high speed regular and primitive
collections for Java.
Medium Product central artifactid trove4j Highest Product jar package name trove Low Product pom artifactid trove4j Highest Product file name trove4j High Product pom name GNU Trove High Product Manifest Implementation-Title Trove High Product Manifest implementation-url http://trove4j.sourceforge.net/ Low Product pom groupid net.sf.trove4j Low Product pom description The Trove library provides high speed regular and primitive
collections for Java.
Medium Product pom url http://trove4j.sf.net Medium Version Manifest Implementation-Version 3.0.3 High Version file version 3.0.3 Highest Version pom version 3.0.3 Highest Version central version 3.0.3 Highest
udunits-4.5.5.jarDescription:
The ucar.units Java package is for decoding and encoding
formatted unit specifications (e.g. "m/s"), converting numeric values
between compatible units (e.g. between "m/s" and "knot"), and for
performing arithmetic operations on units (e.g. dividing one unit by
another, raising a unit to a power). File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/udunits-4.5.5.jarMD5: 025ffadf77de73601443c8262c995df0SHA1: d8c8d65ade13666eedcf764889c69321c247f153SHA256: fb641ad901d1526d53f2b13bc86baec703c57d58e6001cfa54ca7734c97fb30d
Evidence Type Source Name Value Confidence Vendor pom description The ucar.units Java package is for decoding and encoding formatted unit specifications (e.g. "m/s"), converting numeric values between compatible units (e.g. between "m/s" and "knot"), and for performing arithmetic operations on units (e.g. dividing one unit by another, raising a unit to a power). Low Vendor Manifest Implementation-Vendor UCAR/Unidata High Vendor pom artifactid udunits Low Vendor pom parent-artifactid thredds-parent Low Vendor file name udunits High Vendor Manifest built-on 20150306.1537 Low Vendor pom groupid edu.ucar Highest Vendor Manifest Implementation-Vendor-Id edu.ucar Medium Vendor pom url http://www.unidata.ucar.edu/software/udunits// Highest Vendor pom name udunits High Product pom description The ucar.units Java package is for decoding and encoding formatted unit specifications (e.g. "m/s"), converting numeric values between compatible units (e.g. between "m/s" and "knot"), and for performing arithmetic operations on units (e.g. dividing one unit by another, raising a unit to a power). Low Product file name udunits High Product Manifest Implementation-Title udunits High Product Manifest built-on 20150306.1537 Low Product pom artifactid udunits Highest Product pom parent-artifactid thredds-parent Medium Product pom url http://www.unidata.ucar.edu/software/udunits// Medium Product pom groupid edu.ucar Low Product pom name udunits High Version file version 4.5.5 Highest Version Manifest Implementation-Version 4.5.5 High Version pom version 4.5.5 Highest
Related Dependencies udunits-4.5.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/udunits-4.5.5.jar MD5: 025ffadf77de73601443c8262c995df0 SHA1: d8c8d65ade13666eedcf764889c69321c247f153 SHA256: fb641ad901d1526d53f2b13bc86baec703c57d58e6001cfa54ca7734c97fb30d maven: edu.ucar:udunits:4.5.5 Confidence :High vorbis-java-core-0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/vorbis-java-core-0.8.jarMD5: 71b623b57f56daf112bddb3337ee896dSHA1: 7e9937c2575cda2e3fc116415117c74f23e43fa6SHA256: 879bb0c8923fea686609e207fd9050ab246e001868341c725929405e755cf68e
Evidence Type Source Name Value Confidence Vendor jar package name gagravarr Low Vendor pom url Gagravarr/VorbisJava Highest Vendor pom groupid gagravarr Highest Vendor pom parent-groupid org.gagravarr Medium Vendor pom artifactid vorbis-java-core Low Vendor pom parent-artifactid vorbis-java-parent Low Vendor file name vorbis-java-core High Vendor pom name Ogg and Vorbis for Java, Core High Product pom parent-artifactid vorbis-java-parent Medium Product pom groupid gagravarr Low Product pom url Gagravarr/VorbisJava High Product file name vorbis-java-core High Product pom name Ogg and Vorbis for Java, Core High Product pom parent-groupid org.gagravarr Low Product pom artifactid vorbis-java-core Highest Version file version 0.8 Highest Version pom version 0.8 Highest
Related Dependencies vorbis-java-core-0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/vorbis-java-core-0.8.jar MD5: 71b623b57f56daf112bddb3337ee896d SHA1: 7e9937c2575cda2e3fc116415117c74f23e43fa6 SHA256: 879bb0c8923fea686609e207fd9050ab246e001868341c725929405e755cf68e maven: org.gagravarr:vorbis-java-core:0.8 Confidence :High vorbis-java-tika-0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/vorbis-java-tika-0.8.jarMD5: 85c7b34d5f94e66bf0c79f5d673db750SHA1: 4ddbb27ac5884a0f0398a63d46a89d3bc87dc457SHA256: a1b62281a99aec10dc69db1d2f8250952dca5841eedf1167b6b6f9585e2d0d26
Evidence Type Source Name Value Confidence Vendor jar package name gagravarr Low Vendor file name vorbis-java-tika High Vendor pom name Apache Tika plugin for Ogg, Vorbis and FLAC High Vendor pom url Gagravarr/VorbisJava Highest Vendor pom groupid gagravarr Highest Vendor pom parent-groupid org.gagravarr Medium Vendor pom parent-artifactid vorbis-java-parent Low Vendor jar package name tika Low Vendor pom artifactid vorbis-java-tika Low Product pom parent-artifactid vorbis-java-parent Medium Product file name vorbis-java-tika High Product pom name Apache Tika plugin for Ogg, Vorbis and FLAC High Product pom groupid gagravarr Low Product pom artifactid vorbis-java-tika Highest Product pom url Gagravarr/VorbisJava High Product jar package name tika Low Product pom parent-groupid org.gagravarr Low Version file version 0.8 Highest Version pom version 0.8 Highest
Related Dependencies vorbis-java-tika-0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/vorbis-java-tika-0.8.jar MD5: 85c7b34d5f94e66bf0c79f5d673db750 SHA1: 4ddbb27ac5884a0f0398a63d46a89d3bc87dc457 SHA256: a1b62281a99aec10dc69db1d2f8250952dca5841eedf1167b6b6f9585e2d0d26 maven: org.gagravarr:vorbis-java-tika:0.8 Confidence :Highcpe: cpe:/a:apache:tika:0.8 Confidence :Highest suppress Published Vulnerabilities CVE-2016-6809 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization. Vulnerable Software & Versions:
CVE-2018-1338 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18. Vulnerable Software & Versions: (show all )
CVE-2018-1339 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18. Vulnerable Software & Versions: (show all )
xmlbeans-2.6.0.jarDescription:
XmlBeans main jar License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/xmlbeans-2.6.0.jar
MD5: 6591c08682d613194dacb01e95c78c2c
SHA1: 29e80d2dd51f9dcdef8f9ffaee0d4dc1c9bbfc87
SHA256: c77974359688b2823b48fa9a33da68559d64f8474441480d9df4f9e254332a96
Evidence Type Source Name Value Confidence Vendor pom groupid apache.xmlbeans Highest Vendor jar package name impl Low Vendor jar package name apache Low Vendor jar package name xmlbeans Low Vendor pom organization name XmlBeans High Vendor pom url http://xmlbeans.apache.org Highest Vendor pom artifactid xmlbeans Low Vendor manifest: org/apache/xmlbeans/ Implementation-Vendor Apache Software Foundation Medium Vendor file name xmlbeans High Vendor pom description XmlBeans main jar Medium Vendor central groupid org.apache.xmlbeans Highest Vendor pom name XmlBeans High Vendor pom organization url http://xmlbeans.apache.org/ Medium Product jar package name impl Low Product pom groupid apache.xmlbeans Low Product jar package name xmlbeans Low Product manifest: org/apache/xmlbeans/ Implementation-Title org.apache.xmlbeans Medium Product file name xmlbeans High Product pom description XmlBeans main jar Medium Product pom organization name XmlBeans Low Product central artifactid xmlbeans Highest Product pom artifactid xmlbeans Highest Product pom name XmlBeans High Product pom url http://xmlbeans.apache.org Medium Product pom organization url http://xmlbeans.apache.org/ Low Version file version 2.6.0 Highest Version central version 2.6.0 Highest Version pom version 2.6.0 Highest
xmlschema-core-2.2.2.jarDescription:
Commons XMLSchema is a light weight schema object model that can be used to manipulate or
generate XML schema. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/xmlschema-core-2.2.2.jar
MD5: 9c8eddbc128f5d6f7ac218be8d602909
SHA1: 3346ea4712a8bc80dbc1877628bfca1d6c4d55ef
SHA256: 664873ab0591e3bd02e6657f35218798e29fd7605acf1e0140e6db871bf7d6fc
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Vendor Manifest bundle-symbolicname org.apache.ws.xmlschema.core Medium Vendor Manifest bundle-docurl http://ws.apache.org/xmlschema/ Low Vendor pom name XmlSchema Core High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid xmlschema Low Vendor pom groupid apache.ws.xmlschema Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.ws.xmlschema Medium Vendor pom artifactid xmlschema-core Low Vendor file name xmlschema-core High Product pom parent-groupid org.apache.ws.xmlschema Low Product pom description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Product manifest Bundle-Description Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema. Low Product Manifest bundle-symbolicname org.apache.ws.xmlschema.core Medium Product Manifest Bundle-Name XmlSchema Core Medium Product pom artifactid xmlschema-core Highest Product pom parent-artifactid xmlschema Medium Product Manifest bundle-docurl http://ws.apache.org/xmlschema/ Low Product pom name XmlSchema Core High Product pom groupid apache.ws.xmlschema Low Product file name xmlschema-core High Version file version 2.2.2 Highest Version pom version 2.2.2 Highest
maven: org.apache.ws.xmlschema:xmlschema-core:2.2.2 Confidence :Highcpe: cpe:/a:ws_project:ws:2.2.2 Confidence :Low suppress xmpcore-5.1.3.jarDescription:
The XMP Library for Java is based on the C++ XMPCore library
and the API is similar.
License:
The BSD License: http://www.adobe.com/devnet/xmp/library/eula-xmp-library-java.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/xmpcore-5.1.3.jar
MD5: 08d154cf297e87471637df85172f93e6
SHA1: 57e70c3b10ff269fff9adfa7a31d61af0df30757
SHA256: 821be907f1e514ebb50f0ca04b2c098370a3cb5e5f9ddcc2ecf81e73eb265daa
Evidence Type Source Name Value Confidence Vendor pom name XMP Library for Java High Vendor jar package name adobe Low Vendor Manifest builddate 2016 Sep 02 16:31:16-CEST Low Vendor Manifest implementation-engbuild 003 Low Vendor pom artifactid xmpcore Low Vendor pom description
The XMP Library for Java is based on the C++ XMPCore library
and the API is similar.
Medium Vendor Manifest implementation-major 5 Low Vendor jar package name impl Low Vendor file name xmpcore High Vendor jar package name xmp Low Vendor pom url http://www.adobe.com/devnet/xmp.html Highest Vendor Manifest implementation-micro 3 Low Vendor pom groupid adobe.xmp Highest Vendor Manifest implementation-minor 1 Low Vendor Manifest Implementation-Vendor Copyright 2006-2009 Adobe Systems Incorporated. All rights reserved High Vendor central groupid com.adobe.xmp Highest Product pom name XMP Library for Java High Product pom artifactid xmpcore Highest Product central artifactid xmpcore Highest Product Manifest builddate 2016 Sep 02 16:31:16-CEST Low Product Manifest implementation-engbuild 003 Low Product pom description
The XMP Library for Java is based on the C++ XMPCore library
and the API is similar.
Medium Product Manifest implementation-major 5 Low Product jar package name impl Low Product file name xmpcore High Product Manifest Implementation-Title Adobe XMP Core High Product jar package name xmp Low Product Manifest implementation-micro 3 Low Product Manifest implementation-minor 1 Low Product pom url http://www.adobe.com/devnet/xmp.html Medium Product pom groupid adobe.xmp Low Version central version 5.1.3 Highest Version file version 5.1.3 Highest Version pom version 5.1.3 Highest
Related Dependencies xmpcore-5.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/xmpcore-5.1.3.jar MD5: 08d154cf297e87471637df85172f93e6 SHA1: 57e70c3b10ff269fff9adfa7a31d61af0df30757 SHA256: 821be907f1e514ebb50f0ca04b2c098370a3cb5e5f9ddcc2ecf81e73eb265daa xz-1.6.jarDescription:
XZ data compression License:
Public Domain File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/xz-1.6.jar
MD5: f1bd86b27cb86528aadc973dcd60f6ca
SHA1: 05b6f921f1810bdf90e25471968f741f87168b64
SHA256: a594643d73cc01928cf6ca5ce100e094ea9d73af760a5d4fb6b75fa673ecec96
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.tukaani.xz Medium Vendor jar package name tukaani Low Vendor pom name XZ for Java High Vendor pom artifactid xz Low Vendor jar package name xz Low Vendor Manifest bundle-docurl http://tukaani.org/xz/java.html Low Vendor Manifest implementation-url http://tukaani.org/xz/java.html Low Vendor pom description XZ data compression Medium Vendor pom groupid tukaani Highest Vendor file name xz High Vendor pom url http://tukaani.org/xz/java.html Highest Vendor central groupid org.tukaani Highest Product Manifest bundle-symbolicname org.tukaani.xz Medium Product pom artifactid xz Highest Product pom name XZ for Java High Product pom groupid tukaani Low Product jar package name xz Low Product pom url http://tukaani.org/xz/java.html Medium Product Manifest bundle-docurl http://tukaani.org/xz/java.html Low Product Manifest implementation-url http://tukaani.org/xz/java.html Low Product pom description XZ data compression Medium Product file name xz High Product Manifest Bundle-Name XZ data compression Medium Product Manifest Implementation-Title XZ data compression High Product central artifactid xz Highest Version Manifest Implementation-Version 1.6 High Version file version 1.6 Highest Version pom version 1.6 Highest Version central version 1.6 Highest
cpe: cpe:/a:tukaani:xz:1.6 Confidence :Low suppress maven: org.tukaani:xz:1.6 ✓ Confidence :Highest Published Vulnerabilities CVE-2015-4035 suppress
Severity:Medium CVSS Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name. Vulnerable Software & Versions:
creativecommons.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/creativecommons/creativecommons.jarMD5: c575bfaaa19919b18a4a11f0e15af4ccSHA1: 42d525ff8dfc79b495a78b42b9ff67c9f75e4fdfSHA256: 9d17e32db7ac7d916b755f4cf3b1f1738a388822766c7f0d6d4512452d6aeb4d
Evidence Type Source Name Value Confidence Vendor file name creativecommons High Vendor jar package name creativecommons Low Vendor jar package name nutch Low Product file name creativecommons High Product jar package name nutch Low
exchange-jexl.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/exchange-jexl/exchange-jexl.jarMD5: 365156890b0cc329ef234ac49f0b55cfSHA1: 97ac335c5476dc037f806f6421a55a494f019190SHA256: 5dd225be7552579562119857b2d02c384381de56d1ff59ce33a6ba8a25f47571
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name exchange-jexl High Vendor jar package name exchange Low Product jar package name jexl Low Product jar package name nutch Low Product file name exchange-jexl High Product jar package name exchange Low
feed.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/feed/feed.jarMD5: 9349da33e60bbe491bbd3d5b8db9d5ecSHA1: 2e74e6049f2fc7d198aaa10665d92abd3b9c14a3SHA256: aaac923fbfb03cc5e1cabbdcc1c7d62c298cd1be9a9e1234df56327ecd02f2b9
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name feed High Product jar package name nutch Low Product file name feed High Product jar package name feed Low
jdom-2.0.2.jarDescription:
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
License:
Similar to Apache License but with the acknowledgment clause removed: https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/feed/jdom-2.0.2.jar
MD5: f2ce377fffc36a069117c578c14139ba
SHA1: d06c71e0df0ac4b94deb737718580ccce22d92e8
SHA256: 2bdf7a48fddc9259f5aa420eee328e939d71302a6a1b79a176e4fd47ee988b97
Evidence Type Source Name Value Confidence Vendor pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Vendor manifest: org/jdom2/xpath/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/transform/ Implementation-Vendor jdom.org Medium Vendor pom groupid jdom Highest Vendor file name jdom High Vendor manifest: org/jdom2/input/ Implementation-Vendor jdom.org Medium Vendor pom organization url http://www.jdom.org Medium Vendor manifest: org/jdom2/ Implementation-Vendor jdom.org Medium Vendor central groupid org.jdom Highest Vendor manifest: org/jdom2/filter/ Implementation-Vendor jdom.org Medium Vendor pom organization name JDOM High Vendor pom artifactid jdom Low Vendor pom url http://www.jdom.org Highest Vendor pom name JDOM High Vendor jar package name jdom2 Low Vendor manifest: org/jdom2/adapters/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/output/ Implementation-Vendor jdom.org Medium Product manifest: org/jdom2/ Implementation-Title org.jdom2 Medium Product manifest: org/jdom2/filter/ Implementation-Title org.jdom2.filter Medium Product pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Product pom organization url http://www.jdom.org Low Product manifest: org/jdom2/filter/ Specification-Title JDOM Filter Classes Medium Product pom organization name JDOM Low Product pom artifactid jdom Highest Product pom url http://www.jdom.org Medium Product manifest: org/jdom2/ Specification-Title JDOM Classes Medium Product manifest: org/jdom2/adapters/ Specification-Title JDOM Adapter Classes Medium Product manifest: org/jdom2/input/ Specification-Title JDOM Input Classes Medium Product file name jdom High Product manifest: org/jdom2/input/ Implementation-Title org.jdom2.input Medium Product manifest: org/jdom2/xpath/ Implementation-Title org.jdom2.xpath Medium Product manifest: org/jdom2/xpath/ Specification-Title JDOM XPath Classes Medium Product manifest: org/jdom2/transform/ Specification-Title JDOM Transformation Classes Medium Product manifest: org/jdom2/output/ Specification-Title JDOM Output Classes Medium Product central artifactid jdom Highest Product pom name JDOM High Product manifest: org/jdom2/adapters/ Implementation-Title org.jdom2.adapters Medium Product manifest: org/jdom2/output/ Implementation-Title org.jdom2.output Medium Product manifest: org/jdom2/transform/ Implementation-Title org.jdom2.transform Medium Product pom groupid jdom Low Version central version 2.0.2 Highest Version file version 2.0.2 Highest Version pom version 2.0.2 Highest
headings.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/headings/headings.jarMD5: 0dddea20f643576406dae73e96f2776bSHA1: 350e7366e555757cc9ec47d769b0e11c54d1303dSHA256: 5f9f645c22c3166f0f474e8967dac9a206cc2c2c6fc522e0cf3f3efa575bd526
Evidence Type Source Name Value Confidence Vendor file name headings High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product file name headings High Product jar package name headings Low Product jar package name nutch Low Product jar package name parse Low
index-anchor.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-anchor/index-anchor.jarMD5: a83ce16aebbc266b75fc77093c886f38SHA1: 0b87638bd6325d755c51874cb85f6c839ec756f7SHA256: c67a41a3bf1bb4a5e89f93344cac4360d6df36a2dd1ca8270415b4169d275031
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor jar package name nutch Low Vendor file name index-anchor High Vendor jar package name apache Low Product jar package name indexer Low Product jar package name nutch Low Product file name index-anchor High Product jar package name anchor Low
index-basic.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-basic/index-basic.jarMD5: 9b200351856e76b696bea0c1844bbb86SHA1: 59576fc9c84e9d076179d63b1056a312f8dd77a2SHA256: 57cc0355e2ac6144d6ac7cf283e8efdf70c01623be14b570d8f0237f6178cde2
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name index-basic High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name basic Low Product jar package name indexer Low Product file name index-basic High Product jar package name nutch Low
geoip2-2.10.0.jarDescription:
GeoIP2 webservice client and database reader License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/geoip2-2.10.0.jar
MD5: 68a42e4a3c3befa52bb2324320e09800
SHA1: aea0f79a7b9a403a220e350e3599d2d72754b71e
SHA256: efa5dab783a54531a60a1826eb46518a0505075aac87303193b1a1e2f58d3656
Evidence Type Source Name Value Confidence Vendor Manifest implementation-url http://dev.maxmind.com/geoip/geoip2/web-services Low Vendor pom artifactid geoip2 Low Vendor pom description GeoIP2 webservice client and database reader Medium Vendor pom url http://dev.maxmind.com/geoip/geoip2/web-services Highest Vendor Manifest Implementation-Vendor-Id com.maxmind.geoip2 Medium Vendor pom organization url http://www.maxmind.com/ Medium Vendor pom organization name MaxMind, Inc. High Vendor pom name MaxMind GeoIP2 API High Vendor pom groupid maxmind.geoip2 Highest Vendor file name geoip2 High Vendor Manifest Implementation-Vendor MaxMind, Inc. High Product Manifest implementation-url http://dev.maxmind.com/geoip/geoip2/web-services Low Product pom description GeoIP2 webservice client and database reader Medium Product Manifest specification-title MaxMind GeoIP2 API Medium Product pom groupid maxmind.geoip2 Low Product pom organization name MaxMind, Inc. Low Product pom url http://dev.maxmind.com/geoip/geoip2/web-services Medium Product Manifest Implementation-Title MaxMind GeoIP2 API High Product pom artifactid geoip2 Highest Product pom name MaxMind GeoIP2 API High Product file name geoip2 High Product pom organization url http://www.maxmind.com/ Low Version pom version 2.10.0 Highest Version file version 2.10.0 Highest Version Manifest Implementation-Version 2.10.0 High
cpe: cpe:/a:geoip:geoip:2.10.0 Confidence :Low suppress maven: com.maxmind.geoip2:geoip2:2.10.0 Confidence :High index-geoip.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/index-geoip.jarMD5: c3440c88cbea0a6e8ce3279901d1c055SHA1: 1bdc4d71d5371e341ca57f729ea10143f7740e1eSHA256: cb656018a68bdd703c2086b8d25d9b1619b3ccb6259b09768c8e1d54a090da9f
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name index-geoip High Product jar package name indexer Low Product jar package name geoip Low Product jar package name nutch Low Product file name index-geoip High
cpe: cpe:/a:geoip:geoip:- Confidence :Low suppress jackson-databind-2.9.2.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/jackson-databind-2.9.2.jar
MD5: 312a220f449bdeda184b7007e6ca5540
SHA1: 1d8d8cb7cf26920ba57fb61fa56da88cc123b21f
SHA256: d06823e75174e566fc4a169cb3d162b128eebedc5de336a179d6513b59a0758a
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name com.fasterxml.jackson.databind Medium Vendor pom description General data-binding functionality for Jackson: works on core streaming API Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name jackson-databind High Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor Manifest implementation-build-date 2017-10-14 03:28:49+0000 Low Vendor file name jackson-databind High Vendor pom artifactid jackson-databind Low Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest automatic-module-name com.fasterxml.jackson.databind Medium Product pom description General data-binding functionality for Jackson: works on core streaming API Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest Bundle-Name jackson-databind Medium Product pom name jackson-databind High Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom artifactid jackson-databind Highest Product Manifest specification-title jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Product Manifest implementation-build-date 2017-10-14 03:28:49+0000 Low Product file name jackson-databind High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product pom parent-artifactid jackson-base Medium Version Manifest Implementation-Version 2.9.2 High Version file version 2.9.2 Highest Version pom version 2.9.2 Highest
cpe: cpe:/a:fasterxml:jackson-databind:2.9.2 Confidence :Highest suppress maven: com.fasterxml.jackson.core:jackson-databind:2.9.2 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.9.2 Confidence :Low suppress Published Vulnerabilities CVE-2017-17485 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. Vulnerable Software & Versions: (show all )
CVE-2018-5968 suppress
Severity:Medium CVSS Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. Vulnerable Software & Versions: (show all )
CVE-2018-7489 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. Vulnerable Software & Versions: (show all )
maxmind-db-1.2.2.jarDescription:
Reader for MaxMind DB License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-geoip/maxmind-db-1.2.2.jar
MD5: 67c5e87f8a45275b7a3e1a7e176e556f
SHA1: 78c22a03de1e222b0751855aff7bb6e6db5569e5
SHA256: d4e35cecd5389c73cd7796085b8096804133504fa0cbc55b32e6b567ead738da
Evidence Type Source Name Value Confidence Vendor file name maxmind-db High Vendor pom groupid maxmind.db Highest Vendor pom artifactid maxmind-db Low Vendor pom description Reader for MaxMind DB Medium Vendor jar package name db Low Vendor pom organization url http://www.maxmind.com/ Medium Vendor pom organization name MaxMind, Inc. High Vendor jar package name maxmind Low Vendor pom name MaxMind DB Reader High Vendor pom url http://dev.maxmind.com/ Highest Product file name maxmind-db High Product pom organization name MaxMind, Inc. Low Product pom description Reader for MaxMind DB Medium Product jar package name db Low Product pom artifactid maxmind-db Highest Product pom groupid maxmind.db Low Product pom name MaxMind DB Reader High Product pom organization url http://www.maxmind.com/ Low Product pom url http://dev.maxmind.com/ Medium Version file version 1.2.2 Highest Version pom version 1.2.2 Highest
maven: com.maxmind.db:maxmind-db:1.2.2 Confidence :High index-jexl-filter.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-jexl-filter/index-jexl-filter.jarMD5: d4b74bd6cf7b6a2496df892dd9d2764fSHA1: f48517ce9bc7b0cfa94ebd9170c3f4a6366027aeSHA256: dc2b6761e569cabb36ff55436db63a9d74675bb7c8972584a37fa85a4e30270a
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name index-jexl-filter High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name indexer Low Product file name index-jexl-filter High Product jar package name jexl Low Product jar package name nutch Low
index-links.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-links/index-links.jarMD5: 85c8a95fc1acd0619ac8a7a6be2e96eeSHA1: ebff87369c96e66f4f25312518751a3de51b5a28SHA256: 9b5b82c5d8c32ae7339ec5022bda97023beef77891fe512b9ebcc0525ca41f5c
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name index-links High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name links Low Product jar package name indexer Low Product file name index-links High Product jar package name nutch Low
cpe: cpe:/a:links:links:- Confidence :Low suppress index-metadata.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-metadata/index-metadata.jarMD5: 0f2281f87b63bfb0a4c21d2fe4912d15SHA1: f600b945cd7d19166ddc3085ad5daa8014039955SHA256: c25976d3a0f92148983e1d1acd2d266195214053a969e5511ef3fb6252dca494
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name index-metadata High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name indexer Low Product file name index-metadata High Product jar package name nutch Low Product jar package name metadata Low
index-more.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-more/index-more.jarMD5: acafc826d0d6446b05347a015b78deacSHA1: 6012ab38f780091ac6ee318183a24b9e9f6ddb94SHA256: a664f11da148fd918cb832089a77a0a85328c6553acfd59d457bc6eb788c3e45
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name index-more High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name indexer Low Product file name index-more High Product jar package name nutch Low Product jar package name more Low
index-replace.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-replace/index-replace.jarMD5: bff61b310609c490019eff5c3a5f9389SHA1: b83678ca2bc1184104c324855dbb5608fc707aacSHA256: f108558c7bbf08e2b7fdc9a36a7bf08b46e463be9e18a018f231cdfae562060e
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name index-replace High Product jar package name indexer Low Product jar package name replace Low Product jar package name nutch Low Product file name index-replace High
index-static.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/index-static/index-static.jarMD5: 9a57428552a541b2cca5d8a785234031SHA1: 6b33f272a002d79fe9f61e28401cab5859be180fSHA256: 33a45856da51d08fa63cc132dfb6c803397dcf9fa3a295af3632f8155e712a81
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name index-static High Product jar package name indexer Low Product jar package name nutch Low Product jar package name staticfield Low Product file name index-static High
aws-java-sdk-cloudsearch-1.10.0.jarDescription:
The AWS Java SDK for Amazon CloudSearch module holds the client classes that are used for communicating with Amazon CloudSearch Service File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/aws-java-sdk-cloudsearch-1.10.0.jarMD5: 09f6067cea5e3c7825c6ed675e005a5aSHA1: 4f05fc8683fdc88433ed557229ed02c07a2a835cSHA256: 21b03fe03c1364f29a815f3ce7c40a22e3857436da679080a516c3db95d145ed
Evidence Type Source Name Value Confidence Vendor pom artifactid aws-java-sdk-cloudsearch Low Vendor jar package name amazonaws Low Vendor pom parent-groupid com.amazonaws Medium Vendor jar package name services Low Vendor pom url https://aws.amazon.com/sdkforjava Highest Vendor file name aws-java-sdk-cloudsearch High Vendor pom groupid amazonaws Highest Vendor pom name AWS Java SDK for Amazon CloudSearch High Vendor pom parent-artifactid aws-java-sdk-pom Low Vendor pom description The AWS Java SDK for Amazon CloudSearch module holds the client classes that are used for communicating with Amazon CloudSearch Service Low Product pom parent-artifactid aws-java-sdk-pom Medium Product jar package name services Low Product pom parent-groupid com.amazonaws Low Product pom url https://aws.amazon.com/sdkforjava Medium Product pom groupid amazonaws Low Product file name aws-java-sdk-cloudsearch High Product jar package name model Low Product pom name AWS Java SDK for Amazon CloudSearch High Product pom artifactid aws-java-sdk-cloudsearch Highest Product pom description The AWS Java SDK for Amazon CloudSearch module holds the client classes that are used for communicating with Amazon CloudSearch Service Low Version file version 1.10.0 Highest Version pom version 1.10.0 Highest
maven: com.amazonaws:aws-java-sdk-cloudsearch:1.10.0 Confidence :High aws-java-sdk-core-1.10.0.jarDescription:
The AWS SDK for Java - Core module holds the classes that is used by the individual service clients to interact with Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/aws-java-sdk-core-1.10.0.jarMD5: a405834c8e249d574700412d1466c381SHA1: 9732a4e80aad23101faa442700c2172a37257c43SHA256: c23bc1c6fe594484f38fed08edd8fe00bc6593b2cb8cd99c723c28a31a16d7c0
Evidence Type Source Name Value Confidence Vendor jar package name amazonaws Low Vendor pom name AWS SDK for Java - Core High Vendor pom parent-groupid com.amazonaws Medium Vendor pom url https://aws.amazon.com/sdkforjava Highest Vendor pom groupid amazonaws Highest Vendor file name aws-java-sdk-core High Vendor pom artifactid aws-java-sdk-core Low Vendor pom description The AWS SDK for Java - Core module holds the classes that is used by the individual service clients to interact with Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes. Low Vendor pom parent-artifactid aws-java-sdk-pom Low Product pom parent-artifactid aws-java-sdk-pom Medium Product pom name AWS SDK for Java - Core High Product pom parent-groupid com.amazonaws Low Product pom url https://aws.amazon.com/sdkforjava Medium Product pom groupid amazonaws Low Product pom artifactid aws-java-sdk-core Highest Product file name aws-java-sdk-core High Product pom description The AWS SDK for Java - Core module holds the classes that is used by the individual service clients to interact with Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes. Low Version file version 1.10.0 Highest Version pom version 1.10.0 Highest
maven: com.amazonaws:aws-java-sdk-core:1.10.0 Confidence :High commons-codec-1.6.jarDescription:
The codec package contains simple encoder and decoders for
various formats such as Base64 and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/commons-codec-1.6.jar
MD5: 5970f54883b4831b24b97f1125ba27e6
SHA1: b7f0fc8f61ecadeb3695f0b9464755eee44374d4
SHA256: 54b34e941b8e1414bd3e40d736efd3481772dc26db3296f6aa45cec9f6203d86
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2011-12-02 21:37:07-0500 Low Vendor pom groupid commons-codec Highest Vendor file name commons-codec High Vendor pom artifactid commons-codec Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-docurl http://commons.apache.org/codec/ Low Vendor pom name Commons Codec High Vendor Manifest bundle-symbolicname org.apache.commons.codec Medium Vendor pom description The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom url http://commons.apache.org/codec/ Highest Product pom artifactid commons-codec Highest Product pom groupid commons-codec Low Product manifest Bundle-Description The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2011-12-02 21:37:07-0500 Low Product file name commons-codec High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/codec/ Medium Product Manifest Implementation-Title Commons Codec High Product Manifest bundle-docurl http://commons.apache.org/codec/ Low Product pom parent-groupid org.apache.commons Low Product Manifest specification-title Commons Codec Medium Product pom name Commons Codec High Product Manifest bundle-symbolicname org.apache.commons.codec Medium Product pom description The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product Manifest Bundle-Name Commons Codec Medium Version Manifest Implementation-Version 1.6 High Version file version 1.6 Highest Version pom version 1.6 Highest
maven: commons-codec:commons-codec:1.6 Confidence :High commons-logging-1.1.3.jarDescription:
Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/commons-logging-1.1.3.jar
MD5: 92eb5aabc1b47287de53d45c086a435c
SHA1: f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f
SHA256: 70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid commons-logging Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Vendor Manifest bundle-symbolicname org.apache.commons.logging Medium Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom name Commons Logging High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid commons-logging Low Vendor pom url http://commons.apache.org/proper/commons-logging/ Highest Vendor file name commons-logging High Vendor manifest Bundle-Description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Vendor Manifest implementation-build tags/LOGGING_1_1_3_RC2@r1483540; 2013-05-16 22:04:41+0200 Low Product pom url http://commons.apache.org/proper/commons-logging/ Medium Product pom parent-artifactid commons-parent Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-logging/ Low Product pom description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Product Manifest bundle-symbolicname org.apache.commons.logging Medium Product pom artifactid commons-logging Highest Product pom name Commons Logging High Product Manifest Implementation-Title Commons Logging High Product Manifest Bundle-Name Commons Logging Medium Product pom parent-groupid org.apache.commons Low Product file name commons-logging High Product manifest Bundle-Description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Product Manifest implementation-build tags/LOGGING_1_1_3_RC2@r1483540; 2013-05-16 22:04:41+0200 Low Product pom groupid commons-logging Low Product Manifest specification-title Commons Logging Medium Version Manifest Implementation-Version 1.1.3 High Version file version 1.1.3 Highest Version pom version 1.1.3 Highest
Related Dependencies commons-logging-1.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/commons-logging-1.1.3.jar MD5: 92eb5aabc1b47287de53d45c086a435c SHA1: f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f SHA256: 70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784 commons-logging-1.1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-logging-1.1.3.jar MD5: 92eb5aabc1b47287de53d45c086a435c SHA1: f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f SHA256: 70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784 maven: commons-logging:commons-logging:1.1.3 Confidence :High httpclient-4.3.6.jarDescription:
HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/httpclient-4.3.6.jarMD5: 2d29a27bb6c6b44bc8a608a0e5d09735SHA1: 4c47155e3e6c9a41a28db36680b828ced53b8af4SHA256: 79838d9eaef73d4f852c63a480830c3a2d4b590f0ab3ae815a489463e4714004
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor pom description
HttpComponents Client
Medium Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/4.3.6-RC1/httpclient@r1636012; 2014-11-02 14:45:03+0100 Low Product pom description
HttpComponents Client
Medium Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product Manifest implementation-build tags/4.3.6-RC1/httpclient@r1636012; 2014-11-02 14:45:03+0100 Low Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid httpclient Highest Version file version 4.3.6 Highest Version Manifest Implementation-Version 4.3.6 High Version pom version 4.3.6 Highest
maven: org.apache.httpcomponents:httpclient:4.3.6 Confidence :Highcpe: cpe:/a:apache:httpclient:4.3.6 Confidence :Low suppress httpcore-4.3.3.jarDescription:
HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/httpcore-4.3.3.jarMD5: c26171852f9810cd3d2416604a387e71SHA1: f91b7a4aadc5cf486df6e4634748d7dd7a73f06dSHA256: 5285de80af1651c489313b91a9f40c65a4cdcb6b3bde716fcc028d16869a5a93
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor Manifest implementation-build tags/4.3.3-RC1/httpcore@r1632770; 2014-10-18 13:50:12+0200 Low Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
HttpComponents Core (blocking I/O)
Medium Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest implementation-build tags/4.3.3-RC1/httpcore@r1632770; 2014-10-18 13:50:12+0200 Low Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom description
HttpComponents Core (blocking I/O)
Medium Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Version pom version 4.3.3 Highest Version file version 4.3.3 Highest Version Manifest Implementation-Version 4.3.3 High
maven: org.apache.httpcomponents:httpcore:4.3.3 Confidence :High indexer-cloudsearch.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/indexer-cloudsearch.jarMD5: dbfb1b5b482ab93497ec7c11785ff247SHA1: 67cc4dede16cfd63763fe6f2ffee0109f5124893SHA256: b0e3f3c9a34bdcb51b0d7d58e37b6c0c8c7d834ece83e753a6cc24869aeae65e
Evidence Type Source Name Value Confidence Vendor file name indexer-cloudsearch High Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name cloudsearch Low Product file name indexer-cloudsearch High Product jar package name indexwriter Low Product jar package name nutch Low
jackson-annotations-2.5.0.jarDescription:
Core annotations used for value types, used by Jackson data binding package.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/jackson-annotations-2.5.0.jar
MD5: db2a8e900965c9618cac9abec038e3de
SHA1: a2a55a3375bc1cef830ca426d68d2ea22961190e
SHA256: 0ca408c24202a7626ec8b861e99d85eca5e38b73311dd6dd12e3e9deecc3fe94
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Vendor pom parent-artifactid jackson-parent Low Vendor Manifest implementation-build-date 2015-01-01 15:31:50-0800 Low Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name Jackson-annotations High Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom artifactid jackson-annotations Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description Core annotations used for value types, used by Jackson data binding package. Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom description Core annotations used for value types, used by Jackson data binding package.
Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor file name jackson-annotations High Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-annotations Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest implementation-build-date 2015-01-01 15:31:50-0800 Low Product Manifest Implementation-Title Jackson-annotations High Product Manifest Bundle-Name Jackson-annotations Medium Product pom artifactid jackson-annotations Highest Product pom name Jackson-annotations High Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom parent-artifactid jackson-parent Medium Product manifest Bundle-Description Core annotations used for value types, used by Jackson data binding package. Medium Product Manifest specification-title Jackson-annotations Medium Product pom description Core annotations used for value types, used by Jackson data binding package.
Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product file name jackson-annotations High Version Manifest Implementation-Version 2.5.0 High Version file version 2.5.0 Highest Version pom version 2.5.0 Highest
cpe: cpe:/a:fasterxml:jackson:2.5.0 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-annotations:2.5.0 Confidence :High jackson-core-2.5.3.jarDescription:
Core Jackson abstractions, basic JSON streaming API implementation
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/jackson-core-2.5.3.jar
MD5: 5763215f9054614336ffa55d46a69e15
SHA1: a8b8a6dfc8a17890e4c7ff8aed810763d265b68b
SHA256: c9a900c30c702d371be2d3714938dfa6de616599c8eb39f8e3cf7aedd62dfd32
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson Low Vendor pom parent-artifactid jackson-parent Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom url FasterXML/jackson Highest Vendor file name jackson-core High Vendor pom artifactid jackson-core Low Vendor pom description Core Jackson abstractions, basic JSON streaming API implementation
Medium Vendor Manifest implementation-build-date 2015-04-24 17:11:14+0000 Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom name Jackson-core High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor manifest Bundle-Description Core Jackson abstractions, basic JSON streaming API implementation Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom url FasterXML/jackson High Product pom parent-groupid com.fasterxml.jackson Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product file name jackson-core High Product Manifest Implementation-Title Jackson-core High Product pom description Core Jackson abstractions, basic JSON streaming API implementation
Medium Product pom parent-artifactid jackson-parent Medium Product Manifest implementation-build-date 2015-04-24 17:11:14+0000 Low Product Manifest specification-title Jackson-core Medium Product pom name Jackson-core High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Jackson-core Medium Product pom artifactid jackson-core Highest Product manifest Bundle-Description Core Jackson abstractions, basic JSON streaming API implementation Medium Version pom version 2.5.3 Highest Version Manifest Implementation-Version 2.5.3 High Version file version 2.5.3 Highest
cpe: cpe:/a:fasterxml:jackson:2.5.3 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-core:2.5.3 Confidence :High jackson-databind-2.5.3.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/jackson-databind-2.5.3.jar
MD5: b04f954ff7a76091cd6a303ebba8c67d
SHA1: c37875ff66127d93e5f672708cb2dcc14c8232ab
SHA256: 7a47be42e41328a6fc0d4a77983eb587c5e3d74156fa7c0fa93f817bcd199fc3
Evidence Type Source Name Value Confidence Vendor pom description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-artifactid jackson-parent Low Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name jackson-databind High Vendor Manifest implementation-build-date 2015-04-24 17:24:14+0000 Low Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor file name jackson-databind High Vendor pom artifactid jackson-databind Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom description General data-binding functionality for Jackson: works on core streaming API Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest Bundle-Name jackson-databind Medium Product pom name jackson-databind High Product Manifest implementation-build-date 2015-04-24 17:24:14+0000 Low Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom artifactid jackson-databind Highest Product Manifest specification-title jackson-databind Medium Product pom parent-artifactid jackson-parent Medium Product Manifest Implementation-Title jackson-databind High Product manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Product file name jackson-databind High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Version pom version 2.5.3 Highest Version Manifest Implementation-Version 2.5.3 High Version file version 2.5.3 Highest
cpe: cpe:/a:fasterxml:jackson-databind:2.5.3 Confidence :Highest suppress maven: com.fasterxml.jackson.core:jackson-databind:2.5.3 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.5.3 Confidence :Low suppress Published Vulnerabilities CVE-2017-15095 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. Vulnerable Software & Versions: (show all )
CVE-2017-17485 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. Vulnerable Software & Versions: (show all )
CVE-2017-7525 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. Vulnerable Software & Versions: (show all )
CVE-2018-5968 suppress
Severity:Medium CVSS Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. Vulnerable Software & Versions: (show all )
CVE-2018-7489 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-184 Incomplete Blacklist
FasterXML jackson-databind before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. Vulnerable Software & Versions: (show all )
joda-time-2.8.jarDescription:
Date and time library to replace JDK date handling License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-cloudsearch/joda-time-2.8.jar
MD5: 4c17df2ad20161112283dbe6475e70d2
SHA1: 9f2785d7184b97d005a44241ccaf980f43b9ccdb
SHA256: 55ae8d6baf406ccfec88cc444de4a452c5725859b70a076ba50a7a7b75f68ed1
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Joda.org Low Vendor Manifest bundle-symbolicname joda-time Medium Vendor Manifest bundle-docurl http://www.joda.org/joda-time/ Low Vendor pom organization url http://www.joda.org Medium Vendor pom url http://www.joda.org/joda-time/ Highest Vendor Manifest Implementation-Vendor-Id org.joda Medium Vendor Manifest Implementation-Vendor Joda.org High Vendor pom description Date and time library to replace JDK date handling Medium Vendor Manifest implementation-url http://www.joda.org/joda-time/ Low Vendor pom organization name Joda.org High Vendor Manifest extension-name joda-time Medium Vendor pom groupid joda-time Highest Vendor pom artifactid joda-time Low Vendor file name joda-time High Vendor pom name Joda-Time High Product Manifest Bundle-Name Joda-Time Medium Product Manifest bundle-symbolicname joda-time Medium Product Manifest bundle-docurl http://www.joda.org/joda-time/ Low Product pom artifactid joda-time Highest Product pom description Date and time library to replace JDK date handling Medium Product pom organization name Joda.org Low Product Manifest implementation-url http://www.joda.org/joda-time/ Low Product Manifest extension-name joda-time Medium Product Manifest Implementation-Title org.joda.time High Product Manifest specification-title Joda-Time Medium Product pom organization url http://www.joda.org Low Product pom url http://www.joda.org/joda-time/ Medium Product file name joda-time High Product pom groupid joda-time Low Product pom name Joda-Time High Version pom version 2.8 Highest Version Manifest Implementation-Version 2.8 High Version file version 2.8 Highest
maven: joda-time:joda-time:2.8 Confidence :High indexer-csv.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-csv/indexer-csv.jarMD5: 80c4d0d0f0f29a509d2e3a14b875cef3SHA1: cacc77aec4d381a8167854eb581ec8f938cddfc7SHA256: c7dbc41c4cf8eb3347292297bcb33341f67bc9f6d8d68b148aa6633f0920f585
Evidence Type Source Name Value Confidence Vendor jar package name indexwriter Low Vendor file name indexer-csv High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name indexwriter Low Product file name indexer-csv High Product jar package name nutch Low Product jar package name csv Low
indexer-dummy.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-dummy/indexer-dummy.jarMD5: a1d57fc514c569c9521c362d2b6de5f9SHA1: ba11e5146d856cab92e046b22d6a9ed590ab1d16SHA256: 9c9de2d1b854bada74a05bd5356ab0eaa40e53d9bf90f038a2656875e151fb67
Evidence Type Source Name Value Confidence Vendor file name indexer-dummy High Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name dummy Low Product file name indexer-dummy High Product jar package name indexwriter Low Product jar package name nutch Low
commons-codec-1.9.jarDescription:
The Apache Commons Codec package contains simple encoder and decoders for
various formats such as Base64 and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/commons-codec-1.9.jar
MD5: 75615356605c8128013da9e3ac62a249
SHA1: 9ce04e34240f674bc72680f8b843b1457383161a
SHA256: ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom url http://commons.apache.org/proper/commons-codec/ Highest Vendor Manifest implementation-build tags/1.9-RC1@r1552874; 2013-12-20 22:56:50-0500 Low Vendor pom groupid commons-codec Highest Vendor file name commons-codec High Vendor pom artifactid commons-codec Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Vendor pom name Apache Commons Codec High Vendor Manifest bundle-symbolicname org.apache.commons.codec Medium Product manifest Bundle-Description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product pom artifactid commons-codec Highest Product pom groupid commons-codec Low Product Manifest implementation-build tags/1.9-RC1@r1552874; 2013-12-20 22:56:50-0500 Low Product file name commons-codec High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-codec/ Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-codec/ Low Product pom description The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities. Low Product Manifest specification-title Apache Commons Codec Medium Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Codec High Product Manifest bundle-symbolicname org.apache.commons.codec Medium Product Manifest Implementation-Title Apache Commons Codec High Product Manifest Bundle-Name Apache Commons Codec Medium Version pom version 1.9 Highest Version Manifest Implementation-Version 1.9 High Version file version 1.9 Highest
Related Dependencies commons-codec-1.9.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/commons-codec-1.9.jar MD5: 75615356605c8128013da9e3ac62a249 SHA1: 9ce04e34240f674bc72680f8b843b1457383161a SHA256: ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce commons-codec-1.9.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-codec-1.9.jar MD5: 75615356605c8128013da9e3ac62a249 SHA1: 9ce04e34240f674bc72680f8b843b1457383161a SHA256: ad19d2601c3abf0b946b5c3a4113e226a8c1e3305e395b90013b78dd94a723ce maven: commons-codec:commons-codec:1.9 Confidence :High commons-lang3-3.4.jarDescription:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/commons-lang3-3.4.jar
MD5: 8667a442ee77e509fbe8176b94726eb2
SHA1: 5fe28b9518e58819180a43a850fbc0dd24b7c050
SHA256: 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor pom groupid apache.commons Highest Vendor pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor file name commons-lang3 High Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Vendor manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/LANG_3_4_RC2@r1671054; 2015-04-03 12:30:21+0000 Low Vendor pom url http://commons.apache.org/proper/commons-lang/ Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Apache Commons Lang High Product pom artifactid commons-lang3 Highest Product Manifest Implementation-Title Apache Commons Lang High Product Manifest Bundle-Name Apache Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product file name commons-lang3 High Product Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-lang/ Medium Product Manifest specification-title Apache Commons Lang Medium Product manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product Manifest implementation-build tags/LANG_3_4_RC2@r1671054; 2015-04-03 12:30:21+0000 Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom name Apache Commons Lang High Version Manifest Implementation-Version 3.4 High Version pom version 3.4 Highest Version file version 3.4 Highest
Related Dependencies commons-lang3-3.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-lang3-3.4.jar MD5: 8667a442ee77e509fbe8176b94726eb2 SHA1: 5fe28b9518e58819180a43a850fbc0dd24b7c050 SHA256: 734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b maven: org.apache.commons:commons-lang3:3.4 Confidence :High gson-2.6.2.jarDescription:
Gson JSON library File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/gson-2.6.2.jarMD5: 302e660f8e4928b7417ce145af88cacdSHA1: f1bc476cc167b18e66c297df599b2377131a8947SHA256: b8545ba775f641f8bba86027f06307152279fee89a46a4006df1bf2f874d4d9d
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Gson JSON library Medium Vendor pom groupid google.code.gson Highest Vendor pom parent-groupid com.google.code.gson Medium Vendor pom artifactid gson Low Vendor file name gson High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom parent-artifactid gson-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Gson High Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product pom parent-artifactid gson-parent Medium Product pom name Gson High Product manifest Bundle-Description Gson JSON library Medium Product file name gson High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-groupid com.google.code.gson Low Version pom version 2.6.2 Highest Version file version 2.6.2 Highest
maven: com.google.code.gson:gson:2.6.2 Confidence :High guava-19.0.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/guava-19.0.jar
MD5: 43bfc49bdc7324f6daaa60c1ee9f3972
SHA1: 6ce200f6b23222af3d8abb6b6459e6c44f4bb0e9
SHA256: 58d4cc2e05ebb012bbac568b032f75623be1cb6fb096f3c60c72a86f7f057de4
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom groupid google.guava Highest Vendor pom artifactid guava Low Vendor Manifest bundle-docurl https://guava-libraries.googlecode.com/ Low Vendor pom name Guava: Google Core Libraries for Java High Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor file name guava High Vendor pom parent-artifactid guava-parent Low Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor pom parent-groupid com.google.guava Medium Product Manifest bundle-symbolicname com.google.guava Medium Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product Manifest bundle-docurl https://guava-libraries.googlecode.com/ Low Product pom parent-artifactid guava-parent Medium Product pom name Guava: Google Core Libraries for Java High Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product file name guava High Product pom parent-groupid com.google.guava Low Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product pom groupid google.guava Low Version file version 19.0 Highest Version pom version 19.0 Highest
maven: com.google.guava:guava:19.0 Confidence :High httpasyncclient-4.1.1.jarDescription:
Apache HttpComponents AsyncClient
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/httpasyncclient-4.1.1.jarMD5: abaee2878c8aedf57b917ea8e7063a32SHA1: dd624f5a0ff43eb5cdf828d9739d3177ee00a5a9SHA256: 27cb2c5eba8e85799f38b7cb0341406ef967e061f91018c68733ec6856ff7633
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor pom parent-artifactid httpcomponents-asyncclient Low Vendor pom url http://hc.apache.org/httpcomponents-asyncclient Highest Vendor pom artifactid httpasyncclient Low Vendor pom name Apache HttpAsyncClient High Vendor file name httpasyncclient High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-asyncclient Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/4.1.1-RC1/httpasyncclient@r1711834; 2015-11-01 18:59:35+0100 Low Vendor pom description
Apache HttpComponents AsyncClient
Medium Product pom artifactid httpasyncclient Highest Product pom name Apache HttpAsyncClient High Product file name httpasyncclient High Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-asyncclient Low Product Manifest specification-title HttpComponents Apache HttpAsyncClient Medium Product Manifest implementation-build tags/4.1.1-RC1/httpasyncclient@r1711834; 2015-11-01 18:59:35+0100 Low Product pom url http://hc.apache.org/httpcomponents-asyncclient Medium Product pom parent-groupid org.apache.httpcomponents Low Product Manifest Implementation-Title HttpComponents Apache HttpAsyncClient High Product pom parent-artifactid httpcomponents-asyncclient Medium Product pom description
Apache HttpComponents AsyncClient
Medium Version Manifest Implementation-Version 4.1.1 High Version file version 4.1.1 Highest Version pom version 4.1.1 Highest
maven: org.apache.httpcomponents:httpasyncclient:4.1.1 Confidence :Highcpe: cpe:/a:apache:httpasyncclient:4.1.1 Confidence :Low suppress httpclient-4.5.2.jarDescription:
Apache HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/httpclient-4.5.2.jarMD5: e0a45df625cb96b69505e59bb25a0189SHA1: 733db77aa8d9b2d68015189df76ab06304406e50SHA256: 0dffc621400d6c632f55787d996b8aeca36b30746a716e079a985f24d8074057
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build tags/4.5.2-RC1/httpclient@r1731537; 2016-02-21 17:03:53+0100 Low Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
Apache HttpComponents Client
Medium Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest implementation-build tags/4.5.2-RC1/httpclient@r1731537; 2016-02-21 17:03:53+0100 Low Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom description
Apache HttpComponents Client
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid httpclient Highest Version Manifest Implementation-Version 4.5.2 High Version pom version 4.5.2 Highest Version file version 4.5.2 Highest
Related Dependencies httpclient-4.5.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/httpclient-4.5.2.jar MD5: e0a45df625cb96b69505e59bb25a0189 SHA1: 733db77aa8d9b2d68015189df76ab06304406e50 SHA256: 0dffc621400d6c632f55787d996b8aeca36b30746a716e079a985f24d8074057 cpe: cpe:/a:apache:httpclient:4.5.2 Confidence :Low suppress maven: org.apache.httpcomponents:httpclient:4.5.2 Confidence :High httpcore-4.4.4.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/httpcore-4.4.4.jarMD5: e7776f2b03a4c62d691a90d3c68c93c0SHA1: b31526a230871fbe285fbcbe2813f9c0839ae9b0SHA256: f7bc09dc8a7003822d109634ffd3845d579d12e725ae54673e323a7ce7f5e325
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor Manifest implementation-build tags/4.4.4-RC1/httpcore@r1710658; 2015-10-26 18:15:56+0100 Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Vendor pom description
Apache HttpComponents Core (blocking I/O)
Medium Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product Manifest implementation-build tags/4.4.4-RC1/httpcore@r1710658; 2015-10-26 18:15:56+0100 Low Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product pom description
Apache HttpComponents Core (blocking I/O)
Medium Version Manifest Implementation-Version 4.4.4 High Version pom version 4.4.4 Highest Version file version 4.4.4 Highest
maven: org.apache.httpcomponents:httpcore:4.4.4 Confidence :High httpcore-nio-4.4.4.jarDescription:
Apache HttpComponents Core (non-blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/httpcore-nio-4.4.4.jarMD5: 562f930326530c262c04d7b4f6b1d055SHA1: 16badfc2d99db264c486ba8c57ae577301a58bd9SHA256: f21be11ed00a7c655204c03d3ff38c2e8ac88db0913da3598ce5f9ffd686ae1f
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest implementation-build tags/4.4.4-RC1/httpcore-nio@r1710658; 2015-10-26 18:15:56+0100 Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpCore NIO High Vendor pom artifactid httpcore-nio Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore-nio High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Product pom artifactid httpcore-nio Highest Product pom groupid apache.httpcomponents Low Product Manifest specification-title HttpComponents Apache HttpCore NIO Medium Product Manifest implementation-build tags/4.4.4-RC1/httpcore-nio@r1710658; 2015-10-26 18:15:56+0100 Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom name Apache HttpCore NIO High Product Manifest Implementation-Title HttpComponents Apache HttpCore NIO High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product file name httpcore-nio High Version Manifest Implementation-Version 4.4.4 High Version pom version 4.4.4 Highest Version file version 4.4.4 Highest
maven: org.apache.httpcomponents:httpcore-nio:4.4.4 Confidence :High indexer-elastic-rest.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/indexer-elastic-rest.jarMD5: 4458966a936b6b15f1a884792cef5134SHA1: 78e615b276311e1149ec0b9b597745c3e01ad7b1SHA256: 611757dceff8b9a23d8fc72d23233e939bdbb60ff6aa3f05112c92a90dbe0ddc
Evidence Type Source Name Value Confidence Vendor file name indexer-elastic-rest High Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name indexer-elastic-rest High Product jar package name elasticrest Low Product jar package name indexwriter Low Product jar package name nutch Low
jest-2.0.3.jarDescription:
ElasticSearch Java REST client - Apache HTTP Client package License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/jest-2.0.3.jar
MD5: 2d3ea2c80e90c0b8c255b93c1c9bd1a9
SHA1: b8f9ed1423489b361804e47f640515ea9f1fa08d
SHA256: 300f8d0e2e15da47767824743e0cee3031669f8aa38baecb1e407fcb985f3c3d
Evidence Type Source Name Value Confidence Vendor pom name Jest Apache HC Jar High Vendor pom parent-artifactid jest-parent Low Vendor pom url searchbox-io/Jest Highest Vendor file name jest High Vendor pom description ElasticSearch Java REST client - Apache HTTP Client package Medium Vendor pom artifactid jest Low Vendor pom groupid io.searchbox Highest Vendor jar package name io Low Vendor jar package name client Low Vendor jar package name searchbox Low Product pom name Jest Apache HC Jar High Product file name jest High Product pom groupid io.searchbox Low Product pom parent-artifactid jest-parent Medium Product pom description ElasticSearch Java REST client - Apache HTTP Client package Medium Product pom artifactid jest Highest Product pom url searchbox-io/Jest High Product jar package name client Low Product jar package name searchbox Low Version file version 2.0.3 Highest Version pom version 2.0.3 Highest
maven: io.searchbox:jest:2.0.3 Confidence :High jest-common-2.0.3.jarDescription:
ElasticSearch Java REST client - shared library package License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/jest-common-2.0.3.jar
MD5: 558390f7840e523db28b8d1e14f09fdc
SHA1: f304c66894aaf2f6c17a886bc826f09c7a161cf9
SHA256: c790fd40f68871187ded4e213fb9fa8b3c973ba04f300b7b0420eaf069caa50f
Evidence Type Source Name Value Confidence Vendor pom name Jest Common Jar High Vendor pom parent-artifactid jest-parent Low Vendor pom url searchbox-io/Jest Highest Vendor pom artifactid jest-common Low Vendor pom description ElasticSearch Java REST client - shared library package Medium Vendor file name jest-common High Vendor pom groupid io.searchbox Highest Vendor jar package name io Low Vendor jar package name searchbox Low Product pom name Jest Common Jar High Product pom artifactid jest-common Highest Product pom groupid io.searchbox Low Product pom parent-artifactid jest-parent Medium Product pom description ElasticSearch Java REST client - shared library package Medium Product file name jest-common High Product pom url searchbox-io/Jest High Product jar package name searchbox Low Version file version 2.0.3 Highest Version pom version 2.0.3 Highest
maven: io.searchbox:jest-common:2.0.3 Confidence :High slf4j-api-1.7.21.jarDescription:
The slf4j API File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic-rest/slf4j-api-1.7.21.jarMD5: c9be56284a92dcb2576679282eff80bfSHA1: 139535a69a4239db087de9bab0bee568bf8e0b70SHA256: 1d5aeb6bd98b0fdd151269eae941c05f6468a791ea0f1e68d8e7fe518af3e7df
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom artifactid slf4j-api Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom parent-artifactid slf4j-parent Low Vendor manifest Bundle-Description The slf4j API Medium Vendor pom description The slf4j API Medium Vendor pom name SLF4J API Module High Vendor file name slf4j-api High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Bundle-Name slf4j-api Medium Product pom parent-groupid org.slf4j Low Product pom description The slf4j API Medium Product Manifest Implementation-Title slf4j-api High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom artifactid slf4j-api Highest Product manifest Bundle-Description The slf4j API Medium Product pom name SLF4J API Module High Product file name slf4j-api High Product pom groupid slf4j Low Version pom version 1.7.21 Highest Version Manifest Implementation-Version 1.7.21 High Version file version 1.7.21 Highest
cpe: cpe:/a:slf4j:slf4j:1.7.21 Confidence :Low suppress maven: org.slf4j:slf4j-api:1.7.21 Confidence :High HdrHistogram-2.1.6.jarDescription:
HdrHistogram supports the recording and analyzing sampled data value
counts across a configurable integer value range with configurable value
precision within the range. Value precision is expressed as the number of
significant digits in the value recording, and provides control over value
quantization behavior across the value range and the subsequent value
resolution at any given level.
License:
Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/HdrHistogram-2.1.6.jar
MD5: 565bf21a1fec0dc39e8b9d5eb0642344
SHA1: 7495feb7f71ee124bd2a7e7d83590e296d71d80e
SHA256: 1d44b3a32d268aa453ee7a9bb89650dfccb159a3160df49d92f299f2b72e9988
Evidence Type Source Name Value Confidence Vendor pom description HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level. Low Vendor manifest Bundle-Description HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level. Low Vendor pom groupid hdrhistogram Highest Vendor pom name HdrHistogram High Vendor pom artifactid HdrHistogram Low Vendor Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium Vendor Manifest Implementation-Vendor-Id org.hdrhistogram Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom url http://hdrhistogram.github.io/HdrHistogram/ Highest Vendor file name HdrHistogram High Product Manifest bundle-symbolicname org.hdrhistogram.HdrHistogram Medium Product file name HdrHistogram High Product Manifest Implementation-Title HdrHistogram High Product pom description HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level. Low Product manifest Bundle-Description HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level. Low Product pom groupid hdrhistogram Low Product Manifest specification-title HdrHistogram Medium Product pom name HdrHistogram High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom url http://hdrhistogram.github.io/HdrHistogram/ Medium Product Manifest Bundle-Name HdrHistogram Medium Product pom artifactid HdrHistogram Highest Version file version 2.1.6 Highest Version pom version 2.1.6 Highest Version Manifest Implementation-Version 2.1.6 High
maven: org.hdrhistogram:HdrHistogram:2.1.6 Confidence :High compiler-0.9.3.jarDescription:
Implementation of mustache.js for Java License:
Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/compiler-0.9.3.jar
MD5: 5df26dd0bf9ed3bb0af6e2dbe9cacf2b
SHA1: 2815e016c63bec4f18704ea4f5489106a5b01a99
SHA256: 478ce317231ff42024bf7b6f1447a15e6d961358b564ac158ebfe4c53fdd404f
Evidence Type Source Name Value Confidence Vendor jar package name github Low Vendor file name compiler High Vendor pom description Implementation of mustache.js for Java Medium Vendor pom groupid github.spullara.mustache.java Highest Vendor pom name compiler High Vendor pom parent-groupid com.github.spullara.mustache.java Medium Vendor pom url http://github.com/spullara/mustache.java Highest Vendor pom parent-artifactid mustache.java Low Vendor jar package name mustachejava Low Vendor pom artifactid compiler Low Product file name compiler High Product pom description Implementation of mustache.js for Java Medium Product pom groupid github.spullara.mustache.java Low Product pom name compiler High Product pom artifactid compiler Highest Product jar package name mustachejava Low Product pom parent-artifactid mustache.java Medium Product pom url http://github.com/spullara/mustache.java Medium Product pom parent-groupid com.github.spullara.mustache.java Low Version file version 0.9.3 Highest Version pom version 0.9.3 Highest
maven: com.github.spullara.mustache.java:compiler:0.9.3 Confidence :High elasticsearch-5.3.0.jarDescription:
Elasticsearch subproject :core License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/elasticsearch-5.3.0.jar
MD5: 47618fe580cbffe31f4dbd9beaa07670
SHA1: f42e60773fa004188020327fcfbd5b946f9834c6
SHA256: 6e3f78d7d70dd42087f9923c0e93b1b49d9c55bf1221771c1a9bc5d0d83a4e5a
Evidence Type Source Name Value Confidence Vendor central groupid org.elasticsearch Highest Vendor Manifest module-source /core Low Vendor jar package name elasticsearch Low Vendor Manifest build-date 2017-03-23T03:31:50.652Z Low Vendor pom name core High Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor pom groupid elasticsearch Highest Vendor pom description Elasticsearch subproject :core Medium Vendor file name elasticsearch High Vendor pom artifactid elasticsearch Low Vendor pom url elastic/elasticsearch Highest Vendor Manifest module-origin elastic/elasticsearch.git Low Product pom artifactid elasticsearch Highest Product Manifest module-source /core Low Product Manifest build-date 2017-03-23T03:31:50.652Z Low Product central artifactid elasticsearch Highest Product pom name core High Product Manifest Implementation-Title org.elasticsearch#core;5.3.0 High Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product Manifest change 3adb13b Low Product pom url elastic/elasticsearch High Product pom description Elasticsearch subproject :core Medium Product file name elasticsearch High Product pom groupid elasticsearch Low Product Manifest module-origin elastic/elasticsearch.git Low Version file version 5.3.0 Highest Version central version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version pom version 5.3.0 Highest
hppc-0.7.1.jarDescription:
High Performance Primitive Collections.
Fundamental data structures (maps, sets, lists, stacks, queues) generated for
combinations of object and primitive types to conserve JVM memory and speed
up execution. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/hppc-0.7.1.jarMD5: 2ff89be5b49144c330190cf7137c3a26SHA1: 8b5057f74ea378c0150a1860874a3ebdcb713767SHA256: 40d2a57f59e9eae7b018d3b4841954087ee40a5c1db6a54c3ea87742e3890391
Evidence Type Source Name Value Confidence Vendor jar package name carrotsearch Low Vendor pom parent-artifactid hppc-parent Low Vendor jar package name hppc Low Vendor pom parent-groupid com.carrotsearch Medium Vendor file name hppc High Vendor pom groupid carrotsearch Highest Vendor pom description High Performance Primitive Collections. Fundamental data structures (maps, sets, lists, stacks, queues) generated for combinations of object and primitive types to conserve JVM memory and speed up execution. Low Vendor pom artifactid hppc Low Vendor pom name HPPC Collections High Product pom artifactid hppc Highest Product pom parent-artifactid hppc-parent Medium Product jar package name hppc Low Product pom groupid carrotsearch Low Product file name hppc High Product pom parent-groupid com.carrotsearch Low Product pom description High Performance Primitive Collections. Fundamental data structures (maps, sets, lists, stacks, queues) generated for combinations of object and primitive types to conserve JVM memory and speed up execution. Low Product pom name HPPC Collections High Version file version 0.7.1 Highest Version pom version 0.7.1 Highest
maven: com.carrotsearch:hppc:0.7.1 Confidence :High httpasyncclient-4.1.2.jarDescription:
Apache HttpComponents AsyncClient
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/httpasyncclient-4.1.2.jarMD5: 262ed539a7d65addfe71b40345671a00SHA1: 95aa3e6fb520191a0970a73cf09f62948ee614beSHA256: a9967aa6baa767b1f4881171ad212100c62dfa1da2e7fe93c5e85f10e07969bf
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor pom parent-artifactid httpcomponents-asyncclient Low Vendor pom url http://hc.apache.org/httpcomponents-asyncclient Highest Vendor pom artifactid httpasyncclient Low Vendor pom name Apache HttpAsyncClient High Vendor file name httpasyncclient High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-asyncclient Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/4.1.2-RC2/httpasyncclient@r1748985; 2016-06-18 14:51:08+0200 Low Vendor pom description
Apache HttpComponents AsyncClient
Medium Product pom artifactid httpasyncclient Highest Product pom name Apache HttpAsyncClient High Product file name httpasyncclient High Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-asyncclient Low Product Manifest specification-title HttpComponents Apache HttpAsyncClient Medium Product pom url http://hc.apache.org/httpcomponents-asyncclient Medium Product pom parent-groupid org.apache.httpcomponents Low Product Manifest Implementation-Title HttpComponents Apache HttpAsyncClient High Product pom parent-artifactid httpcomponents-asyncclient Medium Product Manifest implementation-build tags/4.1.2-RC2/httpasyncclient@r1748985; 2016-06-18 14:51:08+0200 Low Product pom description
Apache HttpComponents AsyncClient
Medium Version Manifest Implementation-Version 4.1.2 High Version pom version 4.1.2 Highest Version file version 4.1.2 Highest
maven: org.apache.httpcomponents:httpasyncclient:4.1.2 Confidence :Highcpe: cpe:/a:apache:httpasyncclient:4.1.2 Confidence :Low suppress httpcore-4.4.5.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/httpcore-4.4.5.jarMD5: 77e3c6477ecd4112078869b023d93ae5SHA1: e7501a1b34325abb00d17dde96150604a0658b54SHA256: 64d5453874cab7e40a7065cb01a9a9ca1053845a9786b478878b679e0580cec3
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest implementation-build tags/4.4.5-RC1/httpcore@r1747417; 2016-06-08 18:38:23+0200 Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Vendor pom description
Apache HttpComponents Core (blocking I/O)
Medium Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest implementation-build tags/4.4.5-RC1/httpcore@r1747417; 2016-06-08 18:38:23+0200 Low Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product pom description
Apache HttpComponents Core (blocking I/O)
Medium Version file version 4.4.5 Highest Version Manifest Implementation-Version 4.4.5 High Version pom version 4.4.5 Highest
maven: org.apache.httpcomponents:httpcore:4.4.5 Confidence :High httpcore-nio-4.4.5.jarDescription:
Apache HttpComponents Core (non-blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/httpcore-nio-4.4.5.jarMD5: e570d76d11b6fdf941173ab78ae4288bSHA1: f4be009e7505f6ceddf21e7960c759f413f15056SHA256: 9da82cfb9f50318333d3892e00904f3b74af0825f0f6de32eea7090a2565d0d1
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build tags/4.4.5-RC1/httpcore-nio@r1747417; 2016-06-08 18:38:23+0200 Low Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpCore NIO High Vendor pom artifactid httpcore-nio Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore-nio High Product Manifest implementation-build tags/4.4.5-RC1/httpcore-nio@r1747417; 2016-06-08 18:38:23+0200 Low Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom description
Apache HttpComponents Core (non-blocking I/O)
Medium Product pom artifactid httpcore-nio Highest Product pom groupid apache.httpcomponents Low Product Manifest specification-title HttpComponents Apache HttpCore NIO Medium Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom name Apache HttpCore NIO High Product Manifest Implementation-Title HttpComponents Apache HttpCore NIO High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product file name httpcore-nio High Version file version 4.4.5 Highest Version Manifest Implementation-Version 4.4.5 High Version pom version 4.4.5 Highest
maven: org.apache.httpcomponents:httpcore-nio:4.4.5 Confidence :High indexer-elastic.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/indexer-elastic.jarMD5: 1bf829580913cd6bbdff4011d221e2a9SHA1: 7ddfa7ce1f6df044e62b2bb37d3e8b27eb98e034SHA256: 0d09f495b32cc798dcf1d2079e09e6a57e76a68c7e8c2c295d0b36129ab3705f
Evidence Type Source Name Value Confidence Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name indexer-elastic High Product jar package name indexwriter Low Product jar package name nutch Low Product file name indexer-elastic High Product jar package name elastic Low
jackson-core-2.8.6.jarDescription:
Core Jackson abstractions, basic JSON streaming API implementation License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jackson-core-2.8.6.jar
MD5: fc62c06dbb91d1c9130c405edaa35a88
SHA1: 2ef7b1cc34de149600f5e75bc2d5bf40de894e60
SHA256: 10a8d607dc66aadee9ef24e8b3d83f04b6c0e033926558cc64e408bcbda0ca9f
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor pom parent-artifactid jackson-parent Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom url FasterXML/jackson-core Highest Vendor file name jackson-core High Vendor pom artifactid jackson-core Low Vendor pom description Core Jackson abstractions, basic JSON streaming API implementation Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom name Jackson-core High Vendor Manifest implementation-build-date 2017-01-12 04:34:59+0000 Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor manifest Bundle-Description Core Jackson abstractions, basic JSON streaming API implementation Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom parent-groupid com.fasterxml.jackson Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product file name jackson-core High Product pom description Core Jackson abstractions, basic JSON streaming API implementation Medium Product Manifest Implementation-Title Jackson-core High Product pom url FasterXML/jackson-core High Product pom parent-artifactid jackson-parent Medium Product Manifest specification-title Jackson-core Medium Product pom name Jackson-core High Product Manifest implementation-build-date 2017-01-12 04:34:59+0000 Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Jackson-core Medium Product pom artifactid jackson-core Highest Product manifest Bundle-Description Core Jackson abstractions, basic JSON streaming API implementation Medium Version pom version 2.8.6 Highest Version Manifest Implementation-Version 2.8.6 High Version file version 2.8.6 Highest
Related Dependencies jackson-dataformat-smile-2.8.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jackson-dataformat-smile-2.8.6.jar MD5: 8392f99adb59993e7a6bab416a9f4d0e SHA1: 71590ad45cee21249774e2f93e5eca66e446cef3 SHA256: 29e558d99d84ffd95265a4cc77299c9a9cdd8b351c84780c04cd30fed2b75553 jackson-dataformat-yaml-2.8.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jackson-dataformat-yaml-2.8.6.jar MD5: 555c706856fca059f4f6f9cc4b882dd3 SHA1: 8bd44d50f9a6cdff9c7578ea39d524eb519e35ab SHA256: baa98060ab810d6310710c94fb8aad93deec296f20032d33d5e6a1ed4b1d6347 jackson-dataformat-cbor-2.8.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jackson-dataformat-cbor-2.8.6.jar MD5: 995884f1eb3d863a7d63ee9485e515ed SHA1: b88721371cfa2d7242bb5e52fe70861aa061c050 SHA256: 56342125176e0ec807b50e93e12bc6043c6dc5211c9a25d6fa33a5d9c827c4f0 cpe: cpe:/a:fasterxml:jackson:2.8.6 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-core:2.8.6 Confidence :High jna-4.2.2.jarDescription:
Java Native Access License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jna-4.2.2.jar
MD5: 78eb97e642452eb30aea5f76e52a7603
SHA1: 5012450aee579c3118ff09461d5ce210e0cdc2a9
SHA256: 1f38af54e06c6e6f6dbf39ba2c052b952dea5dddb4871127b34639ddeb11bdbe
Evidence Type Source Name Value Confidence Vendor pom url java-native-access/jna Highest Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor manifest Bundle-Description JNA Library Medium Vendor jar (hint) package name oracle Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor pom description Java Native Access Medium Vendor file name jna High Vendor pom artifactid jna Low Vendor pom groupid net.java.dev.jna Highest Vendor jar package name jna Low Vendor Manifest specification-vendor JNA Development Team Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Vendor pom name Java Native Access High Vendor central groupid net.java.dev.jna Highest Vendor jar package name sun Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest Implementation-Title com.sun.jna High Product manifest Bundle-Description JNA Library Medium Product Manifest bundle-symbolicname com.sun.jna Medium Product pom description Java Native Access Medium Product file name jna High Product Manifest specification-title Java Native Access (JNA) Medium Product pom groupid net.java.dev.jna Low Product pom url java-native-access/jna High Product central artifactid jna Highest Product jar package name jna Low Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Product pom name Java Native Access High Product pom artifactid jna Highest Version file version 4.2.2 Highest Version central version 4.2.2 Highest Version pom version 4.2.2 Highest
joda-time-2.9.5.jarDescription:
Date and time library to replace JDK date handling License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/joda-time-2.9.5.jar
MD5: 1312d538a0cc48d20366cb4c90f22622
SHA1: 5f01da7306363fad2028b916f3eab926262de928
SHA256: 8241b5c97d83c207924b585c214f42a0c7b27cb744f93c33a07c09784f6fb5ef
Evidence Type Source Name Value Confidence Vendor Manifest specification-vendor Joda.org Low Vendor Manifest bundle-symbolicname joda-time Medium Vendor Manifest bundle-docurl http://www.joda.org/joda-time/ Low Vendor pom organization url http://www.joda.org Medium Vendor pom url http://www.joda.org/joda-time/ Highest Vendor Manifest Implementation-Vendor-Id org.joda Medium Vendor Manifest Implementation-Vendor Joda.org High Vendor pom description Date and time library to replace JDK date handling Medium Vendor Manifest implementation-url http://www.joda.org/joda-time/ Low Vendor pom organization name Joda.org High Vendor Manifest extension-name joda-time Medium Vendor pom groupid joda-time Highest Vendor pom artifactid joda-time Low Vendor file name joda-time High Vendor pom name Joda-Time High Product Manifest Bundle-Name Joda-Time Medium Product Manifest bundle-symbolicname joda-time Medium Product Manifest bundle-docurl http://www.joda.org/joda-time/ Low Product pom artifactid joda-time Highest Product pom description Date and time library to replace JDK date handling Medium Product pom organization name Joda.org Low Product Manifest implementation-url http://www.joda.org/joda-time/ Low Product Manifest extension-name joda-time Medium Product Manifest Implementation-Title org.joda.time High Product Manifest specification-title Joda-Time Medium Product pom organization url http://www.joda.org Low Product pom url http://www.joda.org/joda-time/ Medium Product file name joda-time High Product pom groupid joda-time Low Product pom name Joda-Time High Version pom version 2.9.5 Highest Version Manifest Implementation-Version 2.9.5 High Version file version 2.9.5 Highest
maven: joda-time:joda-time:2.9.5 Confidence :High jopt-simple-5.0.2.jarDescription:
A Java library for parsing command line options License:
The MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jopt-simple-5.0.2.jar
MD5: 22d04887411554d11534653a40ea325a
SHA1: 98cafc6081d5632b61be2c9e60650b64ddbc637c
SHA256: 457877c79e038f390557db5f8e92c4436fb4f4b3ba63f28bc228500fee080193
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description A Java library for parsing command line options Medium Vendor pom description A Java library for parsing command line options Medium Vendor Manifest bundle-symbolicname net.sf.jopt-simple.jopt-simple Medium Vendor pom artifactid jopt-simple Low Vendor pom groupid net.sf.jopt-simple Highest Vendor pom url http://pholser.github.io/jopt-simple Highest Vendor file name jopt-simple High Vendor pom name JOpt Simple High Product manifest Bundle-Description A Java library for parsing command line options Medium Product pom description A Java library for parsing command line options Medium Product pom groupid net.sf.jopt-simple Low Product Manifest bundle-symbolicname net.sf.jopt-simple.jopt-simple Medium Product pom url http://pholser.github.io/jopt-simple Medium Product file name jopt-simple High Product Manifest Bundle-Name jopt-simple Medium Product pom artifactid jopt-simple Highest Product pom name JOpt Simple High Version pom version 5.0.2 Highest Version file version 5.0.2 Highest
maven: net.sf.jopt-simple:jopt-simple:5.0.2 Confidence :High lang-mustache-client-5.3.0.jarDescription:
Mustache scripting integration for Elasticsearch License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lang-mustache-client-5.3.0.jar
MD5: 17b7d2c3e7354bb45ed78fe1771fe796
SHA1: 079c2752942a3ae1716c35c67c04ebdd8159526b
SHA256: ccb43698028f44806b4f5d64fdec962137c191531b50233036d62867138ec367
Evidence Type Source Name Value Confidence Vendor jar package name elasticsearch Low Vendor Manifest build-date 2017-03-23T03:33:26.342Z Low Vendor pom name lang-mustache High Vendor central groupid org.elasticsearch.plugin High Vendor central groupid org.codelibs.elasticsearch.module High Vendor jar package name script Low Vendor pom description Elasticsearch module: lang-mustache Medium Vendor pom url codelibs/elasticsearch-module Highest Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor pom description Mustache scripting integration for Elasticsearch Medium Vendor jar package name mustache Low Vendor pom groupid elasticsearch.plugin Highest Vendor pom artifactid lang-mustache Low Vendor pom url elastic/elasticsearch Highest Vendor pom groupid codelibs.elasticsearch.module Highest Vendor file name lang-mustache-client High Vendor Manifest module-source /modules/lang-mustache Low Vendor Manifest module-origin elastic/elasticsearch.git Low Vendor pom artifactid lang-mustache-client Low Product pom groupid elasticsearch.plugin Low Product Manifest build-date 2017-03-23T03:33:26.342Z Low Product pom name lang-mustache High Product Manifest Implementation-Title org.elasticsearch.plugin#lang-mustache;5.3.0 High Product pom artifactid lang-mustache-client Highest Product pom url codelibs/elasticsearch-module High Product pom groupid codelibs.elasticsearch.module Low Product jar package name script Low Product pom description Elasticsearch module: lang-mustache Medium Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product central artifactid lang-mustache High Product pom artifactid lang-mustache Highest Product Manifest change 3adb13b Low Product pom url elastic/elasticsearch High Product pom description Mustache scripting integration for Elasticsearch Medium Product jar package name mustache Low Product central artifactid lang-mustache-client High Product file name lang-mustache-client High Product Manifest module-source /modules/lang-mustache Low Product Manifest module-origin elastic/elasticsearch.git Low Version file version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version central version 5.3.0 High Version pom version 5.3.0 Highest
log4j-core-2.7.jarDescription:
The Apache Log4j Implementation License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/log4j-core-2.7.jar
MD5: 2b63e0e5063fdaccf669a1e26384f3fd
SHA1: a3f2b4e64c61a7fc1ed8f1e5ba371933404ed98a
SHA256: 5bb84e110d5f18cee47021a024d358227612dd6dac7b97fa781f85c6ad3ccee4
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description The Apache Log4j Implementation Medium Vendor Manifest specification-vendor Apache Software Foundation Low Vendor pom parent-artifactid log4j Low Vendor file name log4j-core High Vendor Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom artifactid log4j-core Low Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor pom parent-groupid org.apache.logging.log4j Medium Vendor pom name Apache Log4j Core High Vendor Manifest bundle-docurl http://www.apache.org Low Vendor pom description The Apache Log4j Implementation Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest log4jreleasemanager Ralph Goers Low Vendor pom groupid apache.logging.log4j Highest Product Manifest Bundle-Name Apache Log4j Core Medium Product manifest Bundle-Description The Apache Log4j Implementation Medium Product pom groupid apache.logging.log4j Low Product file name log4j-core High Product Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Product pom parent-artifactid log4j Medium Product pom name Apache Log4j Core High Product Manifest specification-title Apache Log4j Core Medium Product Manifest bundle-docurl http://www.apache.org Low Product pom parent-groupid org.apache.logging.log4j Low Product pom description The Apache Log4j Implementation Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest Implementation-Title Apache Log4j Core High Product pom artifactid log4j-core Highest Product Manifest log4jreleasemanager Ralph Goers Low Version Manifest Implementation-Version 2.7 High Version pom version 2.7 Highest Version file version 2.7 Highest
Related Dependencies log4j-api-2.7.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/log4j-api-2.7.jar MD5: 8c6059adc8248076dfbfec5b875ead3d SHA1: 8de00e382a817981b737be84cb8def687d392963 SHA256: 2119221bfc18bc8b13f807a1eaa9bc12324efd0c6fb2a993a0a2445d4b47c263 cpe: cpe:/a:apache:log4j:2.7 maven: org.apache.logging.log4j:log4j-core:2.7 Confidence :Highcpe: cpe:/a:apache:log4j:2.7 Confidence :Highest suppress Published Vulnerabilities CVE-2017-5645 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. Vulnerable Software & Versions: (show all )
lucene-analyzers-common-6.4.1.jarDescription:
Additional Analyzers File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-analyzers-common-6.4.1.jarMD5: d731696ac8d53bec151dc901355b1672SHA1: c6f0f593503080204e9d33189cdc59320f55db37SHA256: 3aad3a2da515645bf9fe350650844509b0b41774f03c329500da21a084e8f7d7
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom description Additional Analyzers Medium Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-analyzers-common High Vendor pom artifactid lucene-analyzers-common Low Vendor jar package name analysis Low Vendor pom name Lucene Common Analyzers High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom parent-groupid org.apache.lucene Low Product pom description Additional Analyzers Medium Product Manifest extension-name org.apache.lucene Medium Product file name lucene-analyzers-common High Product Manifest specification-title Lucene Search Engine: analyzers-common Medium Product central artifactid lucene-analyzers-common Highest Product pom artifactid lucene-analyzers-common Highest Product pom parent-artifactid lucene-parent Medium Product jar package name analysis Low Product pom name Lucene Common Analyzers High Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
Related Dependencies lucene-analyzers-common-6.4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-similarity/lucene-analyzers-common-6.4.1.jar MD5: d731696ac8d53bec151dc901355b1672 SHA1: c6f0f593503080204e9d33189cdc59320f55db37 SHA256: 3aad3a2da515645bf9fe350650844509b0b41774f03c329500da21a084e8f7d7 lucene-backward-codecs-6.4.1.jarDescription:
Codecs for older versions of Lucene.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-backward-codecs-6.4.1.jarMD5: dedab88216952bc26acda53f552fc450SHA1: b0ab8aca2b0025b8733411778b6d27afe1c451f5SHA256: cb7a0b212993455fc617313500af8e49550c22ec2ebdc04f28b187b4a4e80a6e
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor file name lucene-backward-codecs High Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name codecs Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom description
Codecs for older versions of Lucene.
Medium Vendor pom name Lucene Memory High Vendor pom artifactid lucene-backward-codecs Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product file name lucene-backward-codecs High Product pom parent-groupid org.apache.lucene Low Product Manifest specification-title Lucene Search Engine: backward-codecs Medium Product central artifactid lucene-backward-codecs Highest Product pom artifactid lucene-backward-codecs Highest Product jar package name codecs Low Product Manifest extension-name org.apache.lucene Medium Product pom description
Codecs for older versions of Lucene.
Medium Product pom name Lucene Memory High Product pom parent-artifactid lucene-parent Medium Product jar package name lucene50 Low Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-core-6.4.1.jarDescription:
Apache Lucene Java Core File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-core-6.4.1.jarMD5: 3b2931c1a4052f9ebe75f299ff393fefSHA1: 2a18924b9e0ed86b318902cb475a0b9ca4d7be5bSHA256: 0646d5ce1b746557c8ba1d99adc0b3740f34b5b8130e87c7304dc1b686e87dd5
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor pom name Lucene Core High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom description Apache Lucene Java Core Medium Vendor file name lucene-core High Vendor pom artifactid lucene-core Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom artifactid lucene-core Highest Product pom parent-groupid org.apache.lucene Low Product central artifactid lucene-core Highest Product Manifest extension-name org.apache.lucene Medium Product pom name Lucene Core High Product pom description Apache Lucene Java Core Medium Product file name lucene-core High Product Manifest specification-title Lucene Search Engine: core Medium Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
Related Dependencies lucene-core-6.4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-similarity/lucene-core-6.4.1.jar MD5: 3b2931c1a4052f9ebe75f299ff393fef SHA1: 2a18924b9e0ed86b318902cb475a0b9ca4d7be5b SHA256: 0646d5ce1b746557c8ba1d99adc0b3740f34b5b8130e87c7304dc1b686e87dd5 lucene-grouping-6.4.1.jarDescription:
Lucene Grouping Module File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-grouping-6.4.1.jarMD5: 242440d7255ccf5655a653926726cc59SHA1: 8297adfa469abd571079ee75a1645fc5124fff5bSHA256: 8731fd129be3d686810c60cb49037fb9f54c3d55f97755a92a97dadae5464e93
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor pom name Lucene Grouping High Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor pom description Lucene Grouping Module Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-grouping High Vendor jar package name search Low Vendor pom artifactid lucene-grouping Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom name Lucene Grouping High Product pom parent-groupid org.apache.lucene Low Product Manifest specification-title Lucene Search Engine: grouping Medium Product pom artifactid lucene-grouping Highest Product pom description Lucene Grouping Module Medium Product Manifest extension-name org.apache.lucene Medium Product central artifactid lucene-grouping Highest Product file name lucene-grouping High Product jar package name search Low Product pom parent-artifactid lucene-parent Medium Product jar package name grouping Low Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-highlighter-6.4.1.jarDescription:
This is the highlighter for apache lucene java
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-highlighter-6.4.1.jarMD5: 8d88c54080410583a8fd1f7a1b3c4848SHA1: 95c0f76fc7893240483b25a5c420bed77a10d05dSHA256: 1bf9d7ee20310519766769a217a97a594d1a7b7fcf13772d458c3571214bba7a
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom artifactid lucene-highlighter Low Vendor pom parent-artifactid lucene-parent Low Vendor file name lucene-highlighter High Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description
This is the highlighter for apache lucene java
Medium Vendor Manifest extension-name org.apache.lucene Medium Vendor pom name Lucene Highlighter High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor jar package name search Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom parent-groupid org.apache.lucene Low Product pom artifactid lucene-highlighter Highest Product file name lucene-highlighter High Product pom description
This is the highlighter for apache lucene java
Medium Product Manifest extension-name org.apache.lucene Medium Product pom name Lucene Highlighter High Product jar package name search Low Product Manifest specification-title Lucene Search Engine: highlighter Medium Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Product central artifactid lucene-highlighter Highest Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-join-6.4.1.jarDescription:
Lucene Join Module File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-join-6.4.1.jarMD5: 411fa68c42ec64b5c6fb24c9f9e47174SHA1: 6d2f1ff94dba19b9bc6f15930b7104b890cab1ceSHA256: d512f5402c9f03e099299ee66c0113ba4efe34e70daf26f32a7911e23a1b900f
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor pom description Lucene Join Module Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor pom name Lucene Join High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor jar package name search Low Vendor file name lucene-join High Vendor pom artifactid lucene-join Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom parent-groupid org.apache.lucene Low Product jar package name join Low Product pom description Lucene Join Module Medium Product Manifest extension-name org.apache.lucene Medium Product pom artifactid lucene-join Highest Product pom name Lucene Join High Product jar package name search Low Product central artifactid lucene-join Highest Product file name lucene-join High Product pom parent-artifactid lucene-parent Medium Product Manifest specification-title Lucene Search Engine: join Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-memory-6.4.1.jarDescription:
High-performance single-document index to compare against Query
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-memory-6.4.1.jarMD5: cb5e53686efc7a50785b6dc325db54c3SHA1: 825a946902f03a38257851733da908949d69f3daSHA256: 0db49388fab1bdd7e090c79f65938ec670bb043a45b4089a504c1232fbf124d7
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor jar package name index Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description
High-performance single-document index to compare against Query
Medium Vendor file name lucene-memory High Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom artifactid lucene-memory Low Vendor pom name Lucene Memory High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product jar package name index Low Product pom parent-groupid org.apache.lucene Low Product pom description
High-performance single-document index to compare against Query
Medium Product file name lucene-memory High Product Manifest specification-title Lucene Search Engine: memory Medium Product Manifest extension-name org.apache.lucene Medium Product jar package name memory Low Product central artifactid lucene-memory Highest Product pom name Lucene Memory High Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Product pom artifactid lucene-memory Highest Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-misc-6.4.1.jarDescription:
Miscellaneous Lucene extensions File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-misc-6.4.1.jarMD5: 8cb14c004eb6005827fcb6fa9363dda6SHA1: 4d147a6f0fcfc54630260d1bb3deecfc0d0d10f7SHA256: 6a65f9d1772ad78b79699aa0b508b1692fb2e373dfa727e1d1e8b186f04bbeba
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom artifactid lucene-misc Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-misc High Vendor jar package name uninverting Low Vendor pom name Lucene Miscellaneous High Vendor pom description Miscellaneous Lucene extensions Medium Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom artifactid lucene-misc Highest Product central artifactid lucene-misc Highest Product Manifest specification-title Lucene Search Engine: misc Medium Product pom parent-groupid org.apache.lucene Low Product Manifest extension-name org.apache.lucene Medium Product file name lucene-misc High Product pom parent-artifactid lucene-parent Medium Product jar package name uninverting Low Product pom name Lucene Miscellaneous High Product pom description Miscellaneous Lucene extensions Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-queries-6.4.1.jarDescription:
Lucene Queries Module File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-queries-6.4.1.jarMD5: 491a4ebf10171f1a1722f32ba380d2fdSHA1: 6de41d984c16185a244b52c4d069b00f5b2b120fSHA256: a374e1ef2bb431574a8d3969714f041ffe8940b41aa2d430b17de091deb79a11
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom artifactid lucene-queries Low Vendor jar package name queries Low Vendor pom parent-artifactid lucene-parent Low Vendor pom name Lucene Queries High Vendor file name lucene-queries High Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom description Lucene Queries Module Medium Product jar package name function Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product central artifactid lucene-queries Highest Product jar package name queries Low Product pom name Lucene Queries High Product file name lucene-queries High Product pom parent-groupid org.apache.lucene Low Product pom artifactid lucene-queries Highest Product Manifest extension-name org.apache.lucene Medium Product pom description Lucene Queries Module Medium Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Product Manifest specification-title Lucene Search Engine: queries Medium Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-queryparser-6.4.1.jarDescription:
Lucene QueryParsers module File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-queryparser-6.4.1.jarMD5: 1dc52342115c8040fbe0d83a2464da52SHA1: 1fc5795a072770a2c47dce11a3c85a80f3437af6SHA256: 48ac3492d593752af5c7ce106711528fd2b23055c015d7cb52980b69d5bda727
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name queryparser Low Vendor pom artifactid lucene-queryparser Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor pom description Lucene QueryParsers module Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor pom name Lucene QueryParsers High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-queryparser High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product jar package name flexible Low Product jar package name queryparser Low Product pom artifactid lucene-queryparser Highest Product pom parent-groupid org.apache.lucene Low Product pom description Lucene QueryParsers module Medium Product Manifest extension-name org.apache.lucene Medium Product Manifest specification-title Lucene Search Engine: queryparser Medium Product pom name Lucene QueryParsers High Product file name lucene-queryparser High Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Product central artifactid lucene-queryparser Highest Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-sandbox-6.4.1.jarDescription:
Lucene Sandbox File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-sandbox-6.4.1.jarMD5: 33ec38f2b4498e6c50078f3b0b6b6f8dSHA1: d4a49664668c58aa23aba74717f3d74a61378d7cSHA256: 1e3ebde0adb8875819289f73b6906adf6bf5a9f2c3588bff15e35cab2f931526
Evidence Type Source Name Value Confidence Vendor file name lucene-sandbox High Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom name Lucene Sandbox High Vendor pom description Lucene Sandbox Medium Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom artifactid lucene-sandbox Low Product file name lucene-sandbox High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom name Lucene Sandbox High Product pom description Lucene Sandbox Medium Product central artifactid lucene-sandbox Highest Product Manifest specification-title Lucene Search Engine: sandbox Medium Product pom parent-groupid org.apache.lucene Low Product pom artifactid lucene-sandbox Highest Product Manifest extension-name org.apache.lucene Medium Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-spatial-6.4.1.jarDescription:
Geospatial Indexing and Query for Apache Lucene
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-spatial-6.4.1.jarMD5: 1f5841a307dce3babcf1e224931122f5SHA1: d6ceb47fdea913a8f468a240a6ea307368094463SHA256: 0e4a267557905eca8ff20b5afa61625f4ff235123ac9566f0b335411d7fd5569
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor jar package name spatial Low Vendor pom parent-artifactid lucene-parent Low Vendor file name lucene-spatial High Vendor pom artifactid lucene-spatial Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor pom description
Geospatial Indexing and Query for Apache Lucene
Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom name Lucene Spatial High Product central artifactid lucene-spatial Highest Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product jar package name spatial Low Product pom artifactid lucene-spatial Highest Product file name lucene-spatial High Product pom parent-groupid org.apache.lucene Low Product Manifest specification-title Lucene Search Engine: spatial Medium Product Manifest extension-name org.apache.lucene Medium Product pom description
Geospatial Indexing and Query for Apache Lucene
Medium Product jar package name geopoint Low Product pom parent-artifactid lucene-parent Medium Product pom name Lucene Spatial High Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-spatial-extras-6.4.1.jarDescription:
Advanced Spatial Shape Strategies for Apache Lucene
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-spatial-extras-6.4.1.jarMD5: dcb96415b0b35bec0360b669d17f3e70SHA1: 5b764e5f95f610f79622ca0e957bfc23f094e4c7SHA256: 300edc244d2149b2ceea75a9536948418facf41f7912a1f392e7428109bb1d4d
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor jar package name spatial Low Vendor pom parent-artifactid lucene-parent Low Vendor pom description
Advanced Spatial Shape Strategies for Apache Lucene
Medium Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor pom artifactid lucene-spatial-extras Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-spatial-extras High Vendor pom name Lucene Spatial Extras High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product jar package name spatial Low Product pom artifactid lucene-spatial-extras Highest Product pom description
Advanced Spatial Shape Strategies for Apache Lucene
Medium Product pom parent-groupid org.apache.lucene Low Product Manifest specification-title Lucene Search Engine: spatial-extras Medium Product Manifest extension-name org.apache.lucene Medium Product jar package name prefix Low Product file name lucene-spatial-extras High Product pom name Lucene Spatial Extras High Product central artifactid lucene-spatial-extras Highest Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-spatial3d-6.4.1.jarDescription:
Lucene Spatial shapes implemented using 3D planar geometry
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-spatial3d-6.4.1.jarMD5: 082dd921e2ff377cf485b466997c2797SHA1: 2c58459e671040046305dbee698fce1e6a1de71dSHA256: cefb26a55b12c34e54e056b7a009a86094182dca3c8a91a08f9227589b9d4412
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor pom description
Lucene Spatial shapes implemented using 3D planar geometry
Medium Vendor jar package name apache Low Vendor pom name Lucene Spatial 3D High Vendor jar package name spatial3d Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor file name lucene-spatial3d High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom artifactid lucene-spatial3d Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom artifactid lucene-spatial3d Highest Product pom description
Lucene Spatial shapes implemented using 3D planar geometry
Medium Product pom parent-groupid org.apache.lucene Low Product Manifest specification-title Lucene Search Engine: spatial3d Medium Product pom name Lucene Spatial 3D High Product jar package name spatial3d Low Product Manifest extension-name org.apache.lucene Medium Product central artifactid lucene-spatial3d Highest Product jar package name geom Low Product file name lucene-spatial3d High Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
lucene-suggest-6.4.1.jarDescription:
Lucene Suggest Module File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/lucene-suggest-6.4.1.jarMD5: b4d40620ee418942f26957116a0d7803SHA1: 47014b400916eea259645a9e3118558ef6e95441SHA256: e8e306c001c5e38f7918e0a5233c058e05ce4224872d3739a62f429252d4c4ef
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom name Lucene Suggest High Vendor jar package name search Low Vendor pom description Lucene Suggest Module Medium Vendor pom artifactid lucene-suggest Low Vendor file name lucene-suggest High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom artifactid lucene-suggest Highest Product pom parent-groupid org.apache.lucene Low Product central artifactid lucene-suggest Highest Product Manifest specification-title Lucene Search Engine: suggest Medium Product Manifest extension-name org.apache.lucene Medium Product pom name Lucene Suggest High Product jar package name search Low Product pom description Lucene Suggest Module Medium Product pom parent-artifactid lucene-parent Medium Product file name lucene-suggest High Product pom groupid apache.lucene Low Product jar package name suggest Low Version pom version 6.4.1 Highest Version central version 6.4.1 Highest Version file version 6.4.1 Highest
netty-3.10.6.Final.jarDescription:
The Netty project is an effort to provide an asynchronous event-driven
network application framework and tools for rapid development of
maintainable high performance and high scalability protocol servers and
clients. In other words, Netty is a NIO client server framework which
enables quick and easy development of network applications such as protocol
servers and clients. It greatly simplifies and streamlines network
programming such as TCP and UDP socket server.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-3.10.6.Final.jar
MD5: e9cdf01138257f48d796fb2cf67af53e
SHA1: 18ed04a0e502896552854926e908509db2987a00
SHA256: 8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49
Evidence Type Source Name Value Confidence Vendor pom artifactid netty Low Vendor pom name Netty High Vendor pom groupid io.netty Highest Vendor manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor Manifest bundle-symbolicname org.jboss.netty Medium Vendor pom organization name The Netty Project High Vendor pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor pom url http://netty.io/ Highest Vendor Manifest bundle-docurl http://netty.io/ Low Vendor file name netty High Vendor pom organization url http://netty.io/ Medium Product pom name Netty High Product manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product Manifest Bundle-Name Netty Medium Product pom artifactid netty Highest Product pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product Manifest bundle-symbolicname org.jboss.netty Medium Product pom groupid io.netty Low Product pom organization name The Netty Project Low Product pom url http://netty.io/ Medium Product pom organization url http://netty.io/ Low Product Manifest bundle-docurl http://netty.io/ Low Product file name netty High Version file version 3.10.6 Highest Version pom version 3.10.6.Final Highest
cpe: cpe:/a:netty_project:netty:3.10.6 Confidence :Low suppress maven: io.netty:netty:3.10.6.Final Confidence :High netty-transport-4.1.7.Final.jarDescription:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. License:
http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-transport-4.1.7.Final.jar
MD5: fd8ef33a8196b1bd528c855b0cec77e2
SHA1: 469e86d4dda1dca8b88d2b1faa8e0f078243ba12
SHA256: 5c6aaaa855a1ef42885f99cd3ea602f523ef0fe172fda26f1ac693d35abb251b
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest bundle-symbolicname io.netty.transport Medium Vendor Manifest implementation-url http://netty.io/netty-transport/ Low Vendor pom parent-artifactid netty-parent Low Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor pom groupid io.netty Highest Vendor pom name Netty/Transport High Vendor manifest Bundle-Description Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Low Vendor file name netty-transport High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom artifactid netty-transport Low Vendor Manifest bundle-docurl http://netty.io/ Low Product pom artifactid netty-transport Highest Product pom parent-artifactid netty-parent Medium Product Manifest bundle-symbolicname io.netty.transport Medium Product Manifest implementation-url http://netty.io/netty-transport/ Low Product pom groupid io.netty Low Product pom name Netty/Transport High Product manifest Bundle-Description Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. Low Product file name netty-transport High Product Manifest Implementation-Title Netty/Transport High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest bundle-docurl http://netty.io/ Low Product Manifest Bundle-Name Netty/Transport Medium Version file version 4.1.7 Highest Version pom version 4.1.7.Final Highest Version Manifest Implementation-Version 4.1.7.Final High
Related Dependencies netty-common-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-common-4.1.7.Final.jar MD5: 22205f8e3d1f53f044c6435069b960d1 SHA1: 06766071efa0426fb33101d1758a8d0e09d16ac7 SHA256: ba2a4ecd7fd3e8e927d3c45151d773708e9b1cf1ac6ac9b52f20d92f33c59f83 maven: io.netty:netty-common:4.1.7.Final ✓ netty-codec-http-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-codec-http-4.1.7.Final.jar MD5: 7b0bd7b942af23fe3b4ea26f5ee0836e SHA1: 9f957998c651e7b73d6dc878f704d81b4c085387 SHA256: a0ee1a4cc44b38c8b57f191af7b9cd8bc4faebfb26874cb4db69ba1804c7c437 netty-codec-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-codec-4.1.7.Final.jar MD5: 9d84fb00a5c5ce9832b7be1731d650b6 SHA1: b3ecd69e7ab0eb2054b26ad3efb13c34204ffe19 SHA256: ed04f91d941147e49fb4a991abc9d360acc111aaec320dddf3715eeffb0c0a52 netty-handler-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-handler-4.1.7.Final.jar MD5: 25ffbefa3a00bb4faebdfa5adfe48127 SHA1: 6f7dfa01c1af4280c154213b6d548405df352df9 SHA256: 62bba9aee0453dfede6db21f35b55e3df96d8c88d9f64fdfe6d1bd0fe91c1bb7 netty-buffer-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-buffer-4.1.7.Final.jar MD5: bc04e55b3677eef9750d094a4649f2fb SHA1: 65e89b4d0737cf1ed3eac2916ebf365f5312294c SHA256: bb2b4d9fe3ec818a1e90ac916ba3bb33472e6062c473027d1bcdacb2cc87ff70 netty-resolver-4.1.7.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-resolver-4.1.7.Final.jar MD5: 4d56009797fbe42840831b852c492203 SHA1: 077734f94029b47887f6f9392d1fc62729e155aa SHA256: 5a140027e78971ec417759b475a8d474667aa35b6514509b1eafc069886877da cpe: cpe:/a:netty_project:netty:4.1.7 Confidence :Low suppress maven: io.netty:netty-transport:4.1.7.Final Confidence :High percolator-client-5.3.0.jarDescription:
Percolator module adds capability to index queries and query these queries by specifying documents License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/percolator-client-5.3.0.jar
MD5: e41ae712118063701c5aa8f50913b234
SHA1: 97f8f70b84e68fa8f653e8f86e7a7573c5fe93f6
SHA256: c20fcb6e74f57c0d33d485a2f5b5606e7bdc78a069f35cf7747e5d8d1a0550e5
Evidence Type Source Name Value Confidence Vendor Manifest module-source /modules/percolator Low Vendor pom description Percolator module adds capability to index queries and query these queries by specifying documents Medium Vendor jar package name elasticsearch Low Vendor pom name percolator High Vendor central groupid org.elasticsearch.plugin High Vendor central groupid org.codelibs.elasticsearch.module High Vendor pom artifactid percolator-client Low Vendor pom url codelibs/elasticsearch-module Highest Vendor Manifest build-date 2017-03-23T03:33:29.753Z Low Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor pom description Elasticsearch module: percolator Medium Vendor pom groupid elasticsearch.plugin Highest Vendor jar package name percolator Low Vendor pom url elastic/elasticsearch Highest Vendor file name percolator-client High Vendor pom groupid codelibs.elasticsearch.module Highest Vendor pom artifactid percolator Low Vendor Manifest module-origin elastic/elasticsearch.git Low Product Manifest module-source /modules/percolator Low Product pom groupid elasticsearch.plugin Low Product pom description Percolator module adds capability to index queries and query these queries by specifying documents Medium Product Manifest Implementation-Title org.elasticsearch.plugin#percolator;5.3.0 High Product pom name percolator High Product pom url codelibs/elasticsearch-module High Product pom groupid codelibs.elasticsearch.module Low Product pom artifactid percolator Highest Product pom artifactid percolator-client Highest Product Manifest build-date 2017-03-23T03:33:29.753Z Low Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product Manifest change 3adb13b Low Product pom description Elasticsearch module: percolator Medium Product pom url elastic/elasticsearch High Product jar package name percolator Low Product file name percolator-client High Product central artifactid percolator-client High Product Manifest module-origin elastic/elasticsearch.git Low Product central artifactid percolator High Version file version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version central version 5.3.0 High Version pom version 5.3.0 Highest
reindex-client-5.3.0.jarDescription:
The Reindex module adds APIs to reindex from one index to another or update documents in place. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/reindex-client-5.3.0.jar
MD5: 893fc6ce0b723da2ed6616eeef838b49
SHA1: bac4ecfdc2faf10d0332e01f60e1f1bf491a4e9d
SHA256: 765b30e54db5c60c5cc934b556549266ecf5ca35e020cc6eab8b4dea5abb58c1
Evidence Type Source Name Value Confidence Vendor jar package name index Low Vendor jar package name elasticsearch Low Vendor pom description Elasticsearch module: reindex Medium Vendor Manifest module-source /modules/reindex Low Vendor central groupid org.elasticsearch.plugin High Vendor central groupid org.codelibs.elasticsearch.module High Vendor pom artifactid reindex-client Low Vendor file name reindex-client High Vendor pom artifactid reindex Low Vendor pom url codelibs/elasticsearch-module Highest Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor jar package name reindex Low Vendor pom name reindex High Vendor pom groupid elasticsearch.plugin Highest Vendor pom url elastic/elasticsearch Highest Vendor pom description The Reindex module adds APIs to reindex from one index to another or update documents in place. Medium Vendor pom groupid codelibs.elasticsearch.module Highest Vendor Manifest module-origin elastic/elasticsearch.git Low Vendor Manifest build-date 2017-03-23T03:33:33.310Z Low Product jar package name index Low Product pom groupid elasticsearch.plugin Low Product pom description Elasticsearch module: reindex Medium Product Manifest module-source /modules/reindex Low Product pom url codelibs/elasticsearch-module High Product pom groupid codelibs.elasticsearch.module Low Product file name reindex-client High Product pom artifactid reindex Highest Product central artifactid reindex-client High Product Manifest Implementation-Title org.elasticsearch.plugin#reindex;5.3.0 High Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product Manifest change 3adb13b Low Product pom url elastic/elasticsearch High Product jar package name reindex Low Product pom name reindex High Product pom description The Reindex module adds APIs to reindex from one index to another or update documents in place. Medium Product central artifactid reindex High Product pom artifactid reindex-client Highest Product Manifest module-origin elastic/elasticsearch.git Low Product Manifest build-date 2017-03-23T03:33:33.310Z Low Version file version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version central version 5.3.0 High Version pom version 5.3.0 Highest
rest-5.3.0.jarDescription:
Elasticsearch subproject :client:rest License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/rest-5.3.0.jar
MD5: 664099075d3606badad97ccbb267f82d
SHA1: 7bbde50676527dbb8c5722f7ad526ea3d856a705
SHA256: f57a0dfb418e213e0eb3ecd7484996b6c349fcacf4e82e071d51a21a28765582
Evidence Type Source Name Value Confidence Vendor central groupid org.elasticsearch.client Highest Vendor Manifest build-date 2017-03-23T03:33:23.398Z Low Vendor jar package name elasticsearch Low Vendor pom groupid elasticsearch.client Highest Vendor pom name rest High Vendor pom description Elasticsearch subproject :client:rest Medium Vendor Manifest module-source /client/rest Low Vendor file name rest High Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor pom url elastic/elasticsearch Highest Vendor pom artifactid rest Low Vendor Manifest module-origin elastic/elasticsearch.git Low Vendor jar package name client Low Product Manifest build-date 2017-03-23T03:33:23.398Z Low Product Manifest Implementation-Title org.elasticsearch.client#rest;5.3.0 High Product pom groupid elasticsearch.client Low Product pom name rest High Product pom description Elasticsearch subproject :client:rest Medium Product central artifactid rest Highest Product Manifest module-source /client/rest Low Product pom artifactid rest Highest Product file name rest High Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product Manifest change 3adb13b Low Product pom url elastic/elasticsearch High Product Manifest module-origin elastic/elasticsearch.git Low Product jar package name client Low Version file version 5.3.0 Highest Version central version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version pom version 5.3.0 Highest
securesm-1.1.jarDescription:
SecurityManager implementation that works around design flaws in Java License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/securesm-1.1.jar
MD5: 2ce8857836ff479756cf0cccd3f1fddf
SHA1: 1e423447d020041534be94c0f31a49fbdc1f2950
SHA256: 804330562c1cd2efc7fb2cfa3a5cfba6c308ee47664b1397da9d01f89d8a0d7c
Evidence Type Source Name Value Confidence Vendor jar package name elasticsearch Low Vendor pom groupid elasticsearch Highest Vendor pom description SecurityManager implementation that works around design flaws in Java Medium Vendor pom artifactid securesm Low Vendor pom name Elasticsearch SecureSM High Vendor file name securesm High Product pom artifactid securesm Highest Product pom description SecurityManager implementation that works around design flaws in Java Medium Product pom name Elasticsearch SecureSM High Product file name securesm High Product pom groupid elasticsearch Low Version file version 1.1 Highest Version pom version 1.1 Highest
maven: org.elasticsearch:securesm:1.1 Confidence :High snakeyaml-1.15.jarDescription:
YAML 1.1 parser and emitter for Java License:
Apache License Version 2.0: LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/snakeyaml-1.15.jar
MD5: c6502713ff649a557b767b990830c786
SHA1: 3b132bea69e8ee099f416044970997bde80f4ea6
SHA256: 79ea8aac6590f49ee8390c2f17ed9343079e85b44158a097b301dfee42af86ec
Evidence Type Source Name Value Confidence Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor pom name SnakeYAML High Vendor Manifest bundle-symbolicname org.yaml.snakeyaml Medium Vendor pom artifactid snakeyaml Low Vendor pom groupid yaml Highest Vendor file name snakeyaml High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom description YAML 1.1 parser and emitter for Java Medium Vendor pom url http://www.snakeyaml.org Highest Vendor manifest Bundle-Description YAML 1.1 parser and emitter for Java Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom artifactid snakeyaml Highest Product pom name SnakeYAML High Product Manifest bundle-symbolicname org.yaml.snakeyaml Medium Product file name snakeyaml High Product pom groupid yaml Low Product Manifest Bundle-Name SnakeYAML Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom description YAML 1.1 parser and emitter for Java Medium Product manifest Bundle-Description YAML 1.1 parser and emitter for Java Medium Product pom url http://www.snakeyaml.org Medium Version pom version 1.15 Highest Version file version 1.15 Highest
maven: org.yaml:snakeyaml:1.15 Confidence :High t-digest-3.0.jarDescription:
Data structure which allows accurate estimation of quantiles and related rank statistics License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/t-digest-3.0.jar
MD5: e7ede835f73c70cc662ca4d241250f1a
SHA1: 84ccf145ac2215e6bfa63baa3101c0af41017cfc
SHA256: 5271fc25f94c01fa7a0e30a522118705bf3db7441a0b9636e5122b05a3d9c35d
Evidence Type Source Name Value Confidence Vendor file name t-digest High Vendor pom groupid tdunning Highest Vendor pom artifactid t-digest Low Vendor jar package name math Low Vendor jar package name tdunning Low Vendor jar package name stats Low Vendor pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Vendor pom url tdunning/t-digest Highest Vendor pom name T-Digest High Product file name t-digest High Product jar package name math Low Product pom groupid tdunning Low Product pom url tdunning/t-digest High Product jar package name stats Low Product pom artifactid t-digest Highest Product pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Product pom name T-Digest High Version pom version 3.0 Highest Version file version 3.0 Highest
maven: com.tdunning:t-digest:3.0 Confidence :High transport-5.3.0.jarDescription:
Elasticsearch subproject :client:transport License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/transport-5.3.0.jar
MD5: 32739db134381ff5300bff00ff57681b
SHA1: 11e7a05a74993deb5da6d99b24b5d95e65cf5fd3
SHA256: cf45e81dcec982f2b665fb4e3213596109f9d8ebe399d9c3d17223ad0e6a7074
Evidence Type Source Name Value Confidence Vendor central groupid org.elasticsearch.client Highest Vendor jar package name elasticsearch Low Vendor pom groupid elasticsearch.client Highest Vendor jar package name transport Low Vendor file name transport High Vendor pom artifactid transport Low Vendor Manifest module-source /client/transport Low Vendor Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Vendor Manifest change 3adb13b Low Vendor pom name transport High Vendor pom description Elasticsearch subproject :client:transport Medium Vendor pom url elastic/elasticsearch Highest Vendor Manifest build-date 2017-03-23T03:33:42.611Z Low Vendor Manifest module-origin elastic/elasticsearch.git Low Vendor jar package name client Low Product pom groupid elasticsearch.client Low Product jar package name transport Low Product file name transport High Product Manifest module-source /client/transport Low Product Manifest branch 3adb13b1f49935973b974a2517caa0d4d59bf4d0 Low Product Manifest change 3adb13b Low Product jar package name prebuilttransportclient Low Product pom url elastic/elasticsearch High Product Manifest Implementation-Title org.elasticsearch.client#transport;5.3.0 High Product pom name transport High Product pom description Elasticsearch subproject :client:transport Medium Product central artifactid transport Highest Product pom artifactid transport Highest Product Manifest build-date 2017-03-23T03:33:42.611Z Low Product Manifest module-origin elastic/elasticsearch.git Low Product jar package name client Low Version file version 5.3.0 Highest Version central version 5.3.0 Highest Version Manifest Implementation-Version 5.3.0 High Version pom version 5.3.0 Highest
Related Dependencies transport-netty4-client-5.3.0.jar transport-netty3-client-5.3.0.jar indexer-rabbit.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-rabbit/indexer-rabbit.jarMD5: 8b633c161993b7da25a1cbb65cffe30eSHA1: a857e4ef82208354ffbf8981a1829af0ec47c213SHA256: 85e41b03a0d43e106faf1cb1a1e7170aec5f57cc81bc5880d48bdca584d615d3
Evidence Type Source Name Value Confidence Vendor file name indexer-rabbit High Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name rabbit Low Product file name indexer-rabbit High Product jar package name indexwriter Low Product jar package name nutch Low
commons-io-2.5.jarDescription:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/commons-io-2.5.jar
MD5: e2d74794fba570ec2115fb9d5b05dc9b
SHA1: 2852e6e05fbb95076fc091f6d1780f1f8fe35e0f
SHA256: a10418348d234968600ccb1d988efcbbd08716e1d96936ccc1880e7d22513474
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-io Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-io/ Low Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-io/ Low Vendor file name commons-io High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-io Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/commons-io-2.5@r1739098; 2016-04-14 09:19:54-0400 Low Vendor manifest Bundle-Description The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Vendor pom name Apache Commons IO High Vendor pom description
The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest bundle-symbolicname org.apache.commons.io Medium Vendor pom url http://commons.apache.org/proper/commons-io/ Highest Product Manifest implementation-url http://commons.apache.org/proper/commons-io/ Low Product pom artifactid commons-io Highest Product Manifest specification-title Apache Commons IO Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-io/ Low Product file name commons-io High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-io/ Medium Product Manifest Bundle-Name Apache Commons IO Medium Product Manifest implementation-build tags/commons-io-2.5@r1739098; 2016-04-14 09:19:54-0400 Low Product pom parent-groupid org.apache.commons Low Product Manifest Implementation-Title Apache Commons IO High Product manifest Bundle-Description The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Product pom groupid commons-io Low Product pom name Apache Commons IO High Product pom description
The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more. Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest bundle-symbolicname org.apache.commons.io Medium Version Manifest Implementation-Version 2.5 High Version file version 2.5 Highest Version pom version 2.5 Highest
maven: commons-io:commons-io:2.5 Confidence :High commons-math3-3.6.1.jarDescription:
The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/commons-math3-3.6.1.jar
MD5: 5b730d97e4e6368069de1983937c508e
SHA1: e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf
SHA256: 1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor file name commons-math3 High Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Vendor pom artifactid commons-math3 Low Vendor pom groupid apache.commons Highest Vendor pom description The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor pom url http://commons.apache.org/proper/commons-math/ Highest Vendor pom name Apache Commons Math High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build 16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-math/ Low Vendor manifest Bundle-Description The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor Manifest bundle-symbolicname org.apache.commons.math3 Medium Product file name commons-math3 High Product Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Product pom description The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product pom parent-artifactid commons-parent Medium Product pom artifactid commons-math3 Highest Product Manifest Implementation-Title Apache Commons Math High Product pom name Apache Commons Math High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product Manifest implementation-build 16abfe5de688cc52fb0396e0609cb33044b15653; 2016-03-17 13:30:43-0400 Low Product Manifest Bundle-Name Apache Commons Math Medium Product pom groupid apache.commons Low Product Manifest implementation-url http://commons.apache.org/proper/commons-math/ Low Product pom parent-groupid org.apache.commons Low Product pom url http://commons.apache.org/proper/commons-math/ Medium Product manifest Bundle-Description The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product Manifest specification-title Apache Commons Math Medium Product Manifest bundle-symbolicname org.apache.commons.math3 Medium Version pom version 3.6.1 Highest Version Manifest Implementation-Version 3.6.1 High Version file version 3.6.1 Highest
maven: org.apache.commons:commons-math3:3.6.1 Confidence :High indexer-solr.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/indexer-solr.jarMD5: 72caaf406bd235d8a7a5c8d30609cbb0SHA1: 74b3f3ff674dd77b9abdd88354f6431275cefc60SHA256: 0a7cd5f6c5691bc7c37968a9e5c2b744101eb5deb28f34aa7c2de7f0bbb9a185
Evidence Type Source Name Value Confidence Vendor file name indexer-solr High Vendor jar package name indexwriter Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name indexer-solr High Product jar package name indexwriter Low Product jar package name nutch Low Product jar package name solr Low
cpe: cpe:/a:apache:solr:- Confidence :Low suppress Published Vulnerabilities CVE-2012-6612 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407. Vulnerable Software & Versions: (show all )
CVE-2013-6397 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries. Vulnerable Software & Versions: (show all )
CVE-2013-6407 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Vulnerable Software & Versions: (show all )
CVE-2013-6408 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407. Vulnerable Software & Versions: (show all )
CVE-2015-8795 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js. Vulnerable Software & Versions:
CVE-2015-8796 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL. Vulnerable Software & Versions:
CVE-2015-8797 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI. Vulnerable Software & Versions:
CVE-2017-3163 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access. Vulnerable Software & Versions: (show all )
jcl-over-slf4j-1.7.24.jarDescription:
JCL 1.2 implemented over SLF4J File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/jcl-over-slf4j-1.7.24.jarMD5: c4f92652e13f3095fc95fcdcb5b514d7SHA1: e6a8629079856a2aa7862c6327ccf6dd1988d7fcSHA256: 53c6d81ae92ab7a67abf03439b0a2c3872cfe04bab3bf8db9c58fd03f5e71948
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname jcl.over.slf4j Medium Vendor pom name JCL 1.2 implemented over SLF4J High Vendor pom url http://www.slf4j.org Highest Vendor file name jcl-over-slf4j High Vendor pom groupid slf4j Highest Vendor pom description JCL 1.2 implemented over SLF4J Medium Vendor manifest Bundle-Description JCL 1.2 implemented over SLF4J Medium Vendor pom parent-artifactid slf4j-parent Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor pom artifactid jcl-over-slf4j Low Product Manifest bundle-symbolicname jcl.over.slf4j Medium Product file name jcl-over-slf4j High Product manifest Bundle-Description JCL 1.2 implemented over SLF4J Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product pom parent-groupid org.slf4j Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom name JCL 1.2 implemented over SLF4J High Product Manifest Implementation-Title jcl-over-slf4j High Product pom description JCL 1.2 implemented over SLF4J Medium Product Manifest Bundle-Name jcl-over-slf4j Medium Product pom artifactid jcl-over-slf4j Highest Product pom groupid slf4j Low Version Manifest Implementation-Version 1.7.24 High Version file version 1.7.24 Highest Version pom version 1.7.24 Highest
cpe: cpe:/a:slf4j:slf4j:1.7.24 Confidence :Low suppress maven: org.slf4j:jcl-over-slf4j:1.7.24 Confidence :High noggit-0.8.jarDescription:
Noggit is the world's fastest streaming JSON parser for Java. License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/noggit-0.8.jar
MD5: 6856f2ceab2dd7128595e4659d22d581
SHA1: ba4ad65a62d7dfcf97a8d42c82ae7d8824f9087f
SHA256: dd9901c7d72ffd97d952271e3c486ddc9c78dd25a74db69ddbf2670431c7c81f
Evidence Type Source Name Value Confidence Vendor file name noggit High Vendor pom groupid noggit Highest Vendor pom url http://github.com/yonik/noggit Highest Vendor pom name Noggit High Vendor jar package name noggit Low Vendor pom artifactid noggit Low Vendor pom description Noggit is the world's fastest streaming JSON parser for Java. Medium Product file name noggit High Product pom groupid noggit Low Product pom artifactid noggit Highest Product pom name Noggit High Product pom url http://github.com/yonik/noggit Medium Product pom description Noggit is the world's fastest streaming JSON parser for Java. Medium Version file version 0.8 Highest Version pom version 0.8 Highest
maven: org.noggit:noggit:0.8 Confidence :High slf4j-api-1.7.24.jarDescription:
The slf4j API File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/slf4j-api-1.7.24.jarMD5: d18638036e314cdd66f04e2d248b7df9SHA1: 3f6b4bd4f8dbe8d4bea06d107a3826469b85c3e9SHA256: baf3c7fe15fefeaf9e5b000d94547379dc48370f22a8797e239c127e7d7756ec
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom artifactid slf4j-api Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom parent-artifactid slf4j-parent Low Vendor manifest Bundle-Description The slf4j API Medium Vendor pom description The slf4j API Medium Vendor pom name SLF4J API Module High Vendor file name slf4j-api High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Bundle-Name slf4j-api Medium Product pom parent-groupid org.slf4j Low Product pom description The slf4j API Medium Product Manifest Implementation-Title slf4j-api High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom artifactid slf4j-api Highest Product manifest Bundle-Description The slf4j API Medium Product pom name SLF4J API Module High Product file name slf4j-api High Product pom groupid slf4j Low Version Manifest Implementation-Version 1.7.24 High Version file version 1.7.24 Highest Version pom version 1.7.24 Highest
cpe: cpe:/a:slf4j:slf4j:1.7.24 Confidence :Low suppress maven: org.slf4j:slf4j-api:1.7.24 Confidence :High solr-solrj-7.3.1.jarDescription:
Apache Solr Solrj File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/solr-solrj-7.3.1.jarMD5: 41bd59579858d3c6a2e7cdc3dd3e71d8SHA1: b82c4b775fdddefd1bc39583a396d93453f89144SHA256: e17029d67f0f821bf30811338fcf0e465c93b5aeeb56fe9174619f1f9b76d819
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.solr Highest Vendor pom groupid apache.solr Highest Vendor pom name Apache Solr Solrj High Vendor pom description Apache Solr Solrj Medium Vendor jar package name apache Low Vendor pom artifactid solr-solrj Low Vendor pom parent-artifactid solr-parent Low Vendor file name solr-solrj High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name solr Low Vendor Manifest extension-name org.apache.solr Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.solr Medium Vendor jar package name client Low Product Manifest Implementation-Title org.apache.solr High Product pom name Apache Solr Solrj High Product pom parent-groupid org.apache.solr Low Product pom description Apache Solr Solrj Medium Product file name solr-solrj High Product pom groupid apache.solr Low Product jar package name solr Low Product Manifest extension-name org.apache.solr Medium Product pom parent-artifactid solr-parent Medium Product pom artifactid solr-solrj Highest Product central artifactid solr-solrj Highest Product jar package name solrj Low Product Manifest specification-title Apache Solr Search Server: solr-solrj Medium Product jar package name client Low Version pom version 7.3.1 Highest Version file version 7.3.1 Highest Version central version 7.3.1 Highest
Published Vulnerabilities CVE-2018-8026 suppress
Severity:Low CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-611 Improper Restriction of XML External Entity Reference ('XXE')
This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the Solr server or the internal network. The manipulated files can be uploaded as configsets using Solr's API, allowing to exploit that vulnerability. Vulnerable Software & Versions: (show all )
zookeeper-3.4.11.jarLicense:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-solr/zookeeper-3.4.11.jar
MD5: 213d5365d10e9ae22dfa4d9a1b12ca2f
SHA1: dc767a0b76db57b9ed442ff80418f3c078f670b7
SHA256: 72d402ed238019b638aefb3b592ddde9c52cfbb7956aadcbd419b8c76febc1b1
Evidence Type Source Name Value Confidence Vendor jar package name apache Low Vendor file name zookeeper High Vendor central groupid org.apache.zookeeper Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.zookeeper Highest Vendor jar package name zookeeper Low Vendor Manifest bundle-symbolicname org.apache.hadoop.zookeeper Medium Vendor Manifest built-on phunt-MBP13.local Low Vendor pom artifactid zookeeper Low Vendor Manifest built-at 11/01/2017 19:08 GMT Low Vendor jar package name server Low Vendor Manifest bundle-docurl http://hadoop.apache.org/zookeeper Low Product file name zookeeper High Product central artifactid zookeeper Highest Product jar package name zookeeper Low Product pom artifactid zookeeper Highest Product Manifest Implementation-Title org.apache.zookeeper High Product Manifest bundle-symbolicname org.apache.hadoop.zookeeper Medium Product Manifest built-on phunt-MBP13.local Low Product Manifest built-at 11/01/2017 19:08 GMT Low Product pom groupid apache.zookeeper Low Product Manifest Bundle-Name ZooKeeper Bundle Medium Product jar package name server Low Product Manifest bundle-docurl http://hadoop.apache.org/zookeeper Low Version pom version 3.4.11 Highest Version central version 3.4.11 Highest Version file version 3.4.11 Highest
Published Vulnerabilities CVE-2014-0085 suppress
Severity:Low CVSS Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-255 Credentials Management
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been updated; previous text mistakenly identified the source of the flaw as Zookeeper. Previous text: Apache Zookeeper logs cleartext admin passwords, which allows local users to obtain sensitive information by reading the log. Vulnerable Software & Versions: (show all )
CVE-2018-8012 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-285 Improper Authorization
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader. Vulnerable Software & Versions: (show all )
language-identifier.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/language-identifier/language-identifier.jarMD5: 22c12e90a616fee137f745c3c997a403SHA1: 6786f46737842ae523287dcaa1f41a7af9932040SHA256: 669d40f2a7ae389c336636b3d741a0b809734f8e8544e95df00706a594fde3f5
Evidence Type Source Name Value Confidence Vendor file name language-identifier High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name analysis Low Product file name language-identifier High Product jar package name nutch Low Product jar package name analysis Low Product jar package name lang Low
cglib-nodep-2.1_3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/cglib-nodep-2.1_3.jarMD5: db0e461169599af137eb24478c5292ceSHA1: 58d3be5953547c0019e5704d6ed4ffda3b0c7c66SHA256: e77f0b091a800acd15217bbc3c3629c1af0925b55b271fc5d0586422985639bb
Evidence Type Source Name Value Confidence Vendor central groupid cglib Highest Vendor pom groupid cglib Highest Vendor pom url http://cglib.sourceforge.net/ Highest Vendor file name cglib-nodep High Vendor jar package name cglib Low Vendor jar package name sf Low Vendor pom name cglib High Vendor pom artifactid cglib-nodep Low Vendor jar package name net Low Product pom groupid cglib Low Product pom url http://cglib.sourceforge.net/ Medium Product file name cglib-nodep High Product pom artifactid cglib-nodep Highest Product jar package name cglib Low Product jar package name sf Low Product central artifactid cglib-nodep Highest Product pom name cglib High Version file version 2.1.3 Highest Version pom version 2.1_3 Highest Version central version 2.1_3 Highest
Related Dependencies cglib-nodep-2.1_3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/cglib-nodep-2.1_3.jar MD5: db0e461169599af137eb24478c5292ce SHA1: 58d3be5953547c0019e5704d6ed4ffda3b0c7c66 SHA256: e77f0b091a800acd15217bbc3c3629c1af0925b55b271fc5d0586422985639bb commons-collections-3.2.1.jarDescription:
Types that extend and augment the Java Collections Framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-collections-3.2.1.jar
MD5: 13bc641afd7fd95e09b260f69c1e4c91
SHA1: 761ea405b9b37ced573d2df0d1e3a4e0f9edc668
SHA256: 87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-collections Low Vendor file name commons-collections High Vendor manifest Bundle-Description Types that extend and augment the Java Collections Framework. Medium Vendor pom url http://commons.apache.org/collections/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-collections Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.commons.collections Medium Vendor pom description Types that extend and augment the Java Collections Framework. Medium Vendor Manifest bundle-docurl http://commons.apache.org/collections/ Low Vendor pom name Commons Collections High Product Manifest Bundle-Name Commons Collections Medium Product Manifest Implementation-Title Commons Collections High Product file name commons-collections High Product manifest Bundle-Description Types that extend and augment the Java Collections Framework. Medium Product Manifest specification-title Commons Collections Medium Product pom artifactid commons-collections Highest Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Low Product Manifest bundle-symbolicname org.apache.commons.collections Medium Product pom description Types that extend and augment the Java Collections Framework. Medium Product Manifest bundle-docurl http://commons.apache.org/collections/ Low Product pom url http://commons.apache.org/collections/ Medium Product pom groupid commons-collections Low Product pom name Commons Collections High Version Manifest Implementation-Version 3.2.1 High Version pom version 3.2.1 Highest Version file version 3.2.1 Highest
Related Dependencies commons-collections-3.2.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-collections-3.2.1.jar MD5: 13bc641afd7fd95e09b260f69c1e4c91 SHA1: 761ea405b9b37ced573d2df0d1e3a4e0f9edc668 SHA256: 87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b Published Vulnerabilities CVE-2015-6420 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. Vulnerable Software & Versions: (show all )
CVE-2017-15708 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version. Vulnerable Software & Versions: (show all )
commons-exec-1.1.jarDescription:
A library to reliably execute external processes from within the JVM License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-exec-1.1.jar
MD5: 74ec90baf201f7dea71272f09cac30bd
SHA1: 07dfdf16fade726000564386825ed6d911a44ba1
SHA256: e969402c143f527967fdfec29ce756a75e29ea0f3104bf99ab3406dac03a6767
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom name Commons Exec High Vendor pom url http://commons.apache.org/exec/ Highest Vendor Manifest bundle-docurl http://commons.apache.org/exec/ Low Vendor pom groupid apache.commons Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor manifest Bundle-Description A library to reliably execute external processes from within the JVM Medium Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.commons.exec Medium Vendor file name commons-exec High Vendor pom artifactid commons-exec Low Vendor pom description A library to reliably execute external processes from within the JVM Medium Product pom name Commons Exec High Product Manifest bundle-docurl http://commons.apache.org/exec/ Low Product pom parent-artifactid commons-parent Medium Product manifest Bundle-Description A library to reliably execute external processes from within the JVM Medium Product pom artifactid commons-exec Highest Product Manifest Bundle-Name Commons Exec Medium Product pom groupid apache.commons Low Product pom url http://commons.apache.org/exec/ Medium Product pom parent-groupid org.apache.commons Low Product Manifest bundle-symbolicname org.apache.commons.exec Medium Product Manifest Implementation-Title Commons Exec High Product file name commons-exec High Product Manifest specification-title Commons Exec Medium Product pom description A library to reliably execute external processes from within the JVM Medium Version Manifest Implementation-Version 1.1 High Version file version 1.1 Highest Version pom version 1.1 Highest
maven: org.apache.commons:commons-exec:1.1 Confidence :High commons-jxpath-1.3.jarDescription:
A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-jxpath-1.3.jar
MD5: 61a9aa8ff43ba10853571d57f724bf88
SHA1: c22d7d0f0f40eb7059a23cfa61773a416768b137
SHA256: fcbc0ad917d9d6a73c6df21fac322e00d213ef19cd94815a007c407a8a3ff449
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.jxpath Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures. Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom name Commons JXPath High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom url http://commons.apache.org/jxpath/ Highest Vendor pom groupid commons-jxpath Highest Vendor file name commons-jxpath High Vendor manifest Bundle-Description A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures. Low Vendor pom artifactid commons-jxpath Low Vendor Manifest bundle-docurl http://commons.apache.org/jxpath/ Low Product pom url http://commons.apache.org/jxpath/ Medium Product pom artifactid commons-jxpath Highest Product Manifest bundle-symbolicname org.apache.commons.jxpath Medium Product pom groupid commons-jxpath Low Product Manifest Bundle-Name Commons JXPath Medium Product Manifest Implementation-Title Commons JXPath High Product pom parent-artifactid commons-parent Medium Product pom description A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures. Low Product pom name Commons JXPath High Product pom parent-groupid org.apache.commons Low Product file name commons-jxpath High Product manifest Bundle-Description A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures. Low Product Manifest specification-title Commons JXPath Medium Product Manifest bundle-docurl http://commons.apache.org/jxpath/ Low Version Manifest Implementation-Version 1.3 High Version pom version 1.3 Highest Version file version 1.3 Highest
Related Dependencies commons-jxpath-1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/commons-jxpath-1.3.jar MD5: 61a9aa8ff43ba10853571d57f724bf88 SHA1: c22d7d0f0f40eb7059a23cfa61773a416768b137 SHA256: fcbc0ad917d9d6a73c6df21fac322e00d213ef19cd94815a007c407a8a3ff449 maven: commons-jxpath:commons-jxpath:1.3 Confidence :High commons-lang3-3.3.2.jarDescription:
Apache Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/commons-lang3-3.3.2.jar
MD5: 3128bf75a2549ebe38663401191bacab
SHA1: 90a3822c38ec8c996e84c16a3477ef632cbc87a3
SHA256: 6b81d10754dadf184d386011486e6509c2cc0c3d33565ced4fb4402b9413d47d
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor pom groupid apache.commons Highest Vendor file name commons-lang3 High Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Vendor manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/LANG_3_3_2_RC1@r1585295; 2014-04-06 14:18:52+0200 Low Vendor pom url http://commons.apache.org/proper/commons-lang/ Highest Vendor pom name Apache Commons Lang High Product pom artifactid commons-lang3 Highest Product Manifest Implementation-Title Apache Commons Lang High Product Manifest Bundle-Name Apache Commons Lang Medium Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product file name commons-lang3 High Product Manifest bundle-docurl http://commons.apache.org/proper/commons-lang/ Low Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-lang/ Medium Product Manifest specification-title Apache Commons Lang Medium Product manifest Bundle-Description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product pom description Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
Low Product Manifest implementation-build tags/LANG_3_3_2_RC1@r1585295; 2014-04-06 14:18:52+0200 Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom name Apache Commons Lang High Version file version 3.3.2 Highest Version Manifest Implementation-Version 3.3.2 High Version pom version 3.3.2 Highest
maven: org.apache.commons:commons-lang3:3.3.2 Confidence :High cssparser-0.9.14.jarDescription:
A CSS parser which implements SAC (the Simple API for CSS). License:
GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/cssparser-0.9.14.jar
MD5: d374eacd2b72cccf676e60f5b4b9a6ff
SHA1: 25f3d437b3cd4d4e6fab904d18967c64e4ab671d
SHA256: b0c1184ba7a13aed2a049f1792555fad82113081dc7edda4f39f2d7a6bb74d1a
Evidence Type Source Name Value Confidence Vendor jar package name parser Low Vendor file name cssparser High Vendor pom name CSS Parser High Vendor pom description A CSS parser which implements SAC (the Simple API for CSS). Medium Vendor pom groupid net.sourceforge.cssparser Highest Vendor jar package name css Low Vendor jar package name steadystate Low Vendor pom url http://cssparser.sourceforge.net/ Highest Vendor pom artifactid cssparser Low Product jar package name parser Low Product file name cssparser High Product pom groupid net.sourceforge.cssparser Low Product pom name CSS Parser High Product pom url http://cssparser.sourceforge.net/ Medium Product pom description A CSS parser which implements SAC (the Simple API for CSS). Medium Product pom artifactid cssparser Highest Product jar package name css Low Version pom version 0.9.14 Highest Version file version 0.9.14 Highest
maven: net.sourceforge.cssparser:cssparser:0.9.14 Confidence :High gson-2.3.jarDescription:
Google Gson library License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/gson-2.3.jar
MD5: 6da6d8d4f1554196599bcb76896b3393
SHA1: 5fc52c41ef0239d1093a1eb7c3697036183677ce
SHA256: 9466512cd8cf0bd66a8a3661685373f7b3deafded11096e044926ff5c82c7a4c
Evidence Type Source Name Value Confidence Vendor central groupid com.google.code.gson Highest Vendor pom groupid google.code.gson Highest Vendor jar package name google Low Vendor pom url http://code.google.com/p/google-gson/ Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor manifest Bundle-Description Google Gson library Medium Vendor jar package name internal Low Vendor pom organization name Google, Inc. High Vendor pom name Gson High Vendor Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Vendor pom artifactid gson Low Vendor file name gson High Vendor pom organization url http://www.google.com Medium Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom description Google Gson library Medium Vendor jar package name gson Low Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom organization url http://www.google.com Low Product manifest Bundle-Description Google Gson library Medium Product jar package name internal Low Product pom name Gson High Product central artifactid gson Highest Product Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Product pom organization name Google, Inc. Low Product file name gson High Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product pom url http://code.google.com/p/google-gson/ Medium Product pom description Google Gson library Medium Product jar package name gson Low Version pom version 2.3 Highest Version central version 2.3 Highest Version file version 2.3 Highest
guava-18.0.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/guava-18.0.jar
MD5: 947641f6bb535b1d942d1bc387c45290
SHA1: cce0823396aa693798f8882e64213b1772032b09
SHA256: d664fbfc03d2e5ce9cab2a44fb01f1d0bf9dfebeccc1a473b1f9ea31f79f6f99
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom groupid google.guava Highest Vendor pom artifactid guava Low Vendor Manifest bundle-docurl https://guava-libraries.googlecode.com/ Low Vendor pom name Guava: Google Core Libraries for Java High Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor file name guava High Vendor pom parent-artifactid guava-parent Low Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor pom parent-groupid com.google.guava Medium Product Manifest bundle-symbolicname com.google.guava Medium Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product Manifest bundle-docurl https://guava-libraries.googlecode.com/ Low Product pom parent-artifactid guava-parent Medium Product pom name Guava: Google Core Libraries for Java High Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product file name guava High Product pom parent-groupid com.google.guava Low Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product pom groupid google.guava Low Version file version 18.0 Highest Version pom version 18.0 Highest
Related Dependencies guava-18.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/guava-18.0.jar MD5: 947641f6bb535b1d942d1bc387c45290 SHA1: cce0823396aa693798f8882e64213b1772032b09 SHA256: d664fbfc03d2e5ce9cab2a44fb01f1d0bf9dfebeccc1a473b1f9ea31f79f6f99 maven: com.google.guava:guava:18.0 Confidence :High htmlunit-2.15.jarDescription:
A headless browser intended for use in testing web-based applications. License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/htmlunit-2.15.jar
MD5: 58ccccac09ac480e5c724b61f8d2e68d
SHA1: 8d3e66215a2337cfbc5c3316820ab300022baa54
SHA256: 31a19785c30327d8819f6b2d4974ed94287617c98cbd5d62dc13741ce66c03c2
Evidence Type Source Name Value Confidence Vendor pom url http://htmlunit.sourceforge.net Highest Vendor pom organization name Gargoyle Software Inc. High Vendor pom description A headless browser intended for use in testing web-based applications. Medium Vendor pom organization url http://www.GargoyleSoftware.com/ Medium Vendor pom name HtmlUnit High Vendor Manifest url http://htmlunit.sourceforge.net Low Vendor Manifest Implementation-Vendor-Id net.sourceforge.htmlunit Medium Vendor file name htmlunit High Vendor pom groupid net.sourceforge.htmlunit Highest Vendor Manifest specification-vendor Gargoyle Software Inc. Low Vendor Manifest Implementation-Vendor Gargoyle Software Inc. High Vendor pom artifactid htmlunit Low Product pom url http://htmlunit.sourceforge.net Medium Product file name htmlunit High Product Manifest Implementation-Title HtmlUnit High Product pom description A headless browser intended for use in testing web-based applications. Medium Product pom groupid net.sourceforge.htmlunit Low Product pom organization url http://www.GargoyleSoftware.com/ Low Product pom name HtmlUnit High Product pom artifactid htmlunit Highest Product Manifest specification-title HtmlUnit Medium Product Manifest url http://htmlunit.sourceforge.net Low Product pom organization name Gargoyle Software Inc. Low Version file version 2.15 Highest Version Manifest Implementation-Version 2.15 High Version pom version 2.15 Highest
maven: net.sourceforge.htmlunit:htmlunit:2.15 Confidence :High htmlunit-core-js-2.15.jarDescription:
HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java.
Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files.
License:
Mozilla Public License version 2.0: http://www.mozilla.org/MPL/2.0/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/htmlunit-core-js-2.15.jar
MD5: 8b1545c5016bbf9ced130a820358fd97
SHA1: a16512d2d032155cfa84fa1dcce79fe0aaa8b56a
SHA256: d195d94711d839c291fa70cfbf49c5cce84f26d4cebaa7d277ded960a16a41e2
Evidence Type Source Name Value Confidence Vendor pom url http://htmlunit.sourceforge.net Highest Vendor pom groupid net.sourceforge.htmlunit Highest Vendor central groupid net.sourceforge.htmlunit Highest Vendor pom description HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java. Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files. Low Vendor pom artifactid htmlunit-core-js Low Vendor jar package name sourceforge Low Vendor jar package name htmlunit Low Vendor file name htmlunit-core-js High Vendor pom name HtmlUnit Core JS High Vendor jar package name net Low Product pom url http://htmlunit.sourceforge.net Medium Product pom artifactid htmlunit-core-js Highest Product pom groupid net.sourceforge.htmlunit Low Product pom description HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java. Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files. Low Product jar package name corejs Low Product central artifactid htmlunit-core-js Highest Product jar package name sourceforge Low Product jar package name htmlunit Low Product file name htmlunit-core-js High Product pom name HtmlUnit Core JS High Version central version 2.15 Highest Version file version 2.15 Highest Version pom version 2.15 Highest
httpclient-4.3.4.jarDescription:
HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/httpclient-4.3.4.jarMD5: 1120f36f85cb6310332674010390ff78SHA1: a9a1fef2faefed639ee0d0fba5b3b8e4eb2ff2d8SHA256: a77f2bbc346af46028d63e8807eacac3fbe8478e3d2f039f9f6053248a743cf6
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor pom description
HttpComponents Client
Medium Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build tags/4.3.4-RC1/httpclient@r1598881; 2014-05-31 17:18:30+0200 Low Product pom description
HttpComponents Client
Medium Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom url http://hc.apache.org/httpcomponents-client Medium Product Manifest implementation-build tags/4.3.4-RC1/httpclient@r1598881; 2014-05-31 17:18:30+0200 Low Product pom artifactid httpclient Highest Version Manifest Implementation-Version 4.3.4 High Version pom version 4.3.4 Highest Version file version 4.3.4 Highest
Published Vulnerabilities CVE-2014-3577 suppress
Severity:Medium CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)
org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field. Vulnerable Software & Versions: (show all )
CVE-2015-5262 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P) CWE: CWE-399 Resource Management Errors
http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. Vulnerable Software & Versions: (show all )
httpcore-4.3.2.jarDescription:
HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/httpcore-4.3.2.jarMD5: ee3d34dce4a30c7d3002cadf8c9172c1SHA1: 31fbbff1ddbf98f3aa7377c94d33b0447c646b6eSHA256: abd02320e2356f89d054dae4cf02306bef20a9cf7865b3ac94ec7552b4f1528b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2014-02-12 21:43:05+0100 Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
HttpComponents Core (blocking I/O)
Medium Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2014-02-12 21:43:05+0100 Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product pom description
HttpComponents Core (blocking I/O)
Medium Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Version pom version 4.3.2 Highest Version file version 4.3.2 Highest Version Manifest Implementation-Version 4.3.2 High
maven: org.apache.httpcomponents:httpcore:4.3.2 Confidence :High httpmime-4.3.3.jarDescription:
HttpComponents HttpClient - MIME coded entities
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/httpmime-4.3.3.jarMD5: 577024ce7a28eea8ff9ea23400e09317SHA1: e02368d7b56c0c376f227378a4f77de62864d020SHA256: 61434dbb2314cbb8d28025feb6ae53bbc45d1042daa34371d8911e1e7f570b36
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor file name httpmime High Vendor pom description
HttpComponents HttpClient - MIME coded entities
Medium Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpClient Mime High Vendor pom artifactid httpmime Low Vendor Manifest implementation-build tags/4.3.3-RC1/httpmime@r1570731; 2014-02-22 09:04:11-0500 Low Product Manifest specification-title HttpComponents Apache HttpClient Mime Medium Product file name httpmime High Product Manifest Implementation-Title HttpComponents Apache HttpClient Mime High Product pom description
HttpComponents HttpClient - MIME coded entities
Medium Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom name Apache HttpClient Mime High Product pom artifactid httpmime Highest Product pom url http://hc.apache.org/httpcomponents-client Medium Product Manifest implementation-build tags/4.3.3-RC1/httpmime@r1570731; 2014-02-22 09:04:11-0500 Low Version pom version 4.3.3 Highest Version file version 4.3.3 Highest Version Manifest Implementation-Version 4.3.3 High
maven: org.apache.httpcomponents:httpmime:4.3.3 Confidence :High ini4j-0.5.2.jarDescription:
Java API for handling configuration files in Windows .ini format. The library includes its own Map based API, Java Preferences API and Java Beans API for handling .ini files. Additionally, the library includes a feature rich (variable/macro substitution, multiply property values, etc) java.util.Properties replacement. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/ini4j-0.5.2.jar
MD5: 50738a9e30cce8f6d63d5a2b63fffd63
SHA1: 16561cb11c221b5928119e10d7636c95ee5c960d
SHA256: 631656eb38639b0ae41161f706ff7fbe04313b5b8f42892da5ec656390031fc6
Evidence Type Source Name Value Confidence Vendor pom artifactid ini4j Low Vendor pom groupid ini4j Highest Vendor jar package name ini4j Low Vendor pom name ini4j High Vendor pom url http://www.ini4j.org Highest Vendor file name ini4j High Vendor pom description Java API for handling configuration files in Windows .ini format. The library includes its own Map based API, Java Preferences API and Java Beans API for handling .ini files. Additionally, the library includes a feature rich (variable/macro substitution, multiply property values, etc) java.util.Properties replacement. Low Product pom artifactid ini4j Highest Product pom name ini4j High Product pom url http://www.ini4j.org Medium Product file name ini4j High Product pom groupid ini4j Low Product pom description Java API for handling configuration files in Windows .ini format. The library includes its own Map based API, Java Preferences API and Java Beans API for handling .ini files. Additionally, the library includes a feature rich (variable/macro substitution, multiply property values, etc) java.util.Properties replacement. Low Version file version 0.5.2 Highest Version pom version 0.5.2 Highest
Related Dependencies ini4j-0.5.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/ini4j-0.5.2.jar MD5: 50738a9e30cce8f6d63d5a2b63fffd63 SHA1: 16561cb11c221b5928119e10d7636c95ee5c960d SHA256: 631656eb38639b0ae41161f706ff7fbe04313b5b8f42892da5ec656390031fc6 maven: org.ini4j:ini4j:0.5.2 Confidence :High jetty-http-8.1.15.v20140411.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jetty-http-8.1.15.v20140411.jar
MD5: a2d0df2ebc8c428c62a152682f4c42ad
SHA1: ab816e1b5eb0e055cfa4f3aef6876de210e2be7b
SHA256: cd9bf9c4a1944ee157407450d05631e4b989382e2ac673f3308ccabca3403386
Evidence Type Source Name Value Confidence Vendor pom name Jetty :: Http Utility High Vendor file name jetty-http High Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.http Medium Vendor pom parent-groupid org.eclipse.jetty Medium Vendor pom artifactid jetty-http Low Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom name Jetty :: Http Utility High Product file name jetty-http High Product Manifest Bundle-Name Jetty :: Http Utility Medium Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom parent-groupid org.eclipse.jetty Low Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product pom artifactid jetty-http Highest Product Manifest url http://www.eclipse.org/jetty Low Product Manifest bundle-symbolicname org.eclipse.jetty.http Medium Version pom version 8.1.15.v20140411 Highest Version file version 8.1.15.v20140411 Highest Version Manifest Implementation-Version 8.1.15.v20140411 High
Related Dependencies jetty-util-8.1.15.v20140411.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jetty-util-8.1.15.v20140411.jar MD5: ed9cdb7a21bd0ba982a0f341520f3183 SHA1: 9fe1fedd4c3a0bc5dbc2f1c0588fc5c9c83014a5 SHA256: dc2cbe04fb84b79b6f7389838e4f3871d4218a82a6fcca75771d54c19a9ae3a9 jetty-websocket-8.1.15.v20140411.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jetty-websocket-8.1.15.v20140411.jar MD5: cba4b12f6ef7ac2c7a8708fdef3a19e7 SHA1: 296f3a0d556c55f0b386c1af2a4415d22a9f9e65 SHA256: 374d98cca827b47de11458033ecf43c433ae5317e26f840d75847bc9ba536129 maven: org.eclipse.jetty:jetty-http:8.1.15.v20140411 Confidence :Highcpe: cpe:/a:jetty:jetty:8.1.15.v20140411 Confidence :Low suppress cpe: cpe:/a:eclipse:jetty:8.1.15.v20140411 Confidence :Low suppress Published Vulnerabilities CVE-2017-7656 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-284 Improper Access Control
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. Vulnerable Software & Versions: (show all )
CVE-2017-7657 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-190 Integer Overflow or Wraparound
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-19 Data Processing Errors
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. Vulnerable Software & Versions: (show all )
CVE-2017-9735 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. Vulnerable Software & Versions:
jetty-io-8.1.15.v20140411.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jetty-io-8.1.15.v20140411.jar
MD5: d5fa0d9d4c890d0d08dbc00cbe613569
SHA1: 8849cf59187275366cd05f37b2fb71319291370b
SHA256: 61545238b1d7c8598d7621a9af7ecf0bda16098fc504b8e666c9f0d508bab1d5
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.eclipse.jetty.io Medium Vendor pom name Jetty :: IO Utility High Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom parent-groupid org.eclipse.jetty Medium Vendor file name jetty-io High Vendor pom artifactid jetty-io Low Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product Manifest bundle-symbolicname org.eclipse.jetty.io Medium Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom name Jetty :: IO Utility High Product pom artifactid jetty-io Highest Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom parent-groupid org.eclipse.jetty Low Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest url http://www.eclipse.org/jetty Low Product file name jetty-io High Product Manifest Bundle-Name Jetty :: IO Utility Medium Version pom version 8.1.15.v20140411 Highest Version file version 8.1.15.v20140411 Highest Version Manifest Implementation-Version 8.1.15.v20140411 High
maven: org.eclipse.jetty:jetty-io:8.1.15.v20140411 Confidence :High jna-3.4.0.jarDescription:
Java Native Access License:
LGPL, version 2.1: http://creativecommons.org/licenses/LGPL/2.1/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jna-3.4.0.jar
MD5: 52b0d8408b694de10ce93c85514aaa10
SHA1: 803ff252fedbd395baffd43b37341dc4a150a554
SHA256: 3bff6a1489b8e54cf130344bc5e8744db331045ad2fc736612576e1d80eb1f48
Evidence Type Source Name Value Confidence Vendor pom url twall/jna Highest Vendor pom groupid net.java.dev.jna Highest Vendor jar package name jna Low Vendor manifest: com/sun/jna/ Implementation-Vendor JNA Development Team Medium Vendor pom name Java Native Access High Vendor jar (hint) package name oracle Low Vendor central groupid net.java.dev.jna Highest Vendor pom description Java Native Access Medium Vendor file name jna High Vendor jar package name sun Low Vendor pom artifactid jna Low Product manifest: com/sun/jna/ Implementation-Title com.sun.jna Medium Product central artifactid jna Highest Product pom url twall/jna High Product jar package name jna Low Product manifest: com/sun/jna/ Specification-Title Java Native Access (JNA) Medium Product pom name Java Native Access High Product pom artifactid jna Highest Product pom description Java Native Access Medium Product file name jna High Product pom groupid net.java.dev.jna Low Version file version 3.4.0 Highest Version central version 3.4.0 Highest Version pom version 3.4.0 Highest
lib-htmlunit.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/lib-htmlunit.jarMD5: 81188b496f98d0f59866d3635e9e6782SHA1: 2232cdfb82f748a9784c9203adbc5530cb5db24fSHA256: 3619d8428587b60976993bf59155a6fbb1965e480220012a8a01d491f2b6a7d3
Evidence Type Source Name Value Confidence Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name lib-htmlunit High Product jar package name protocol Low Product jar package name nutch Low Product jar package name htmlunit Low Product file name lib-htmlunit High
nekohtml-1.9.21.jarDescription:
An HTML parser and tag balancer. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/nekohtml-1.9.21.jar
MD5: 34de057c7bfa45800b9c0070d46fbce2
SHA1: 6841b177ab20385a9e9e0c83be3bf8711a6bc5e4
SHA256: c88b0557a51f0e035fccb8e216738c3449fb937ee157888adfafeddb65f9c41e
Evidence Type Source Name Value Confidence Vendor jar package name html Low Vendor file name nekohtml High Vendor manifest: org/cyberneko/html/ Implementation-Vendor Andy Clark, Marc Guillemot Medium Vendor pom groupid net.sourceforge.nekohtml Highest Vendor jar package name cyberneko Low Vendor pom artifactid nekohtml Low Vendor pom description An HTML parser and tag balancer. Medium Vendor pom url http://nekohtml.sourceforge.net/ Highest Vendor central groupid net.sourceforge.nekohtml Highest Vendor pom name Neko HTML High Product jar package name html Low Product file name nekohtml High Product central artifactid nekohtml Highest Product pom artifactid nekohtml Highest Product pom description An HTML parser and tag balancer. Medium Product manifest: org/cyberneko/html/ Specification-Title Hyper-Text Markup Language (HTML) Medium Product manifest: org/cyberneko/html/ Implementation-Title CyberNeko HTML Parser Medium Product pom name Neko HTML High Product pom groupid net.sourceforge.nekohtml Low Product pom url http://nekohtml.sourceforge.net/ Medium Version central version 1.9.21 Highest Version file version 1.9.21 Highest Version pom version 1.9.21 Highest
netty-3.5.2.Final.jarDescription:
The Netty project is an effort to provide an asynchronous event-driven
network application framework and tools for rapid development of
maintainable high performance and high scalability protocol servers and
clients. In other words, Netty is a NIO client server framework which
enables quick and easy development of network applications such as protocol
servers and clients. It greatly simplifies and streamlines network
programming such as TCP and UDP socket server.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/netty-3.5.2.Final.jar
MD5: 2d75cefef03243943a3673d452b57f1f
SHA1: e6fb74a0699abe108969b2ec1f269391169a0426
SHA256: 41644d7025378c62cffc165bd99bda1f6f11db381c1f7773c56a19294eb8cd31
Evidence Type Source Name Value Confidence Vendor pom artifactid netty Low Vendor pom groupid io.netty Highest Vendor manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor Manifest bundle-symbolicname org.jboss.netty Medium Vendor pom name The Netty Project High Vendor pom organization name The Netty Project High Vendor pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Vendor pom url http://netty.io/ Highest Vendor Manifest bundle-docurl http://netty.io/ Low Vendor file name netty High Vendor pom organization url http://netty.io/ Medium Product Manifest Bundle-Name The Netty Project Medium Product manifest Bundle-Description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product pom artifactid netty Highest Product pom description The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications ... Low Product Manifest bundle-symbolicname org.jboss.netty Medium Product pom groupid io.netty Low Product pom name The Netty Project High Product pom organization name The Netty Project Low Product pom url http://netty.io/ Medium Product pom organization url http://netty.io/ Low Product Manifest bundle-docurl http://netty.io/ Low Product file name netty High Version file version 3.5.2 Highest Version pom version 3.5.2.Final Highest
Related Dependencies netty-3.5.2.Final.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/netty-3.5.2.Final.jar MD5: 2d75cefef03243943a3673d452b57f1f SHA1: e6fb74a0699abe108969b2ec1f269391169a0426 SHA256: 41644d7025378c62cffc165bd99bda1f6f11db381c1f7773c56a19294eb8cd31 cpe: cpe:/a:netty_project:netty:3.5.2 Confidence :Low suppress maven: io.netty:netty:3.5.2.Final Confidence :High Published Vulnerabilities CVE-2014-3488 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message. Vulnerable Software & Versions: (show all )
CVE-2015-2156 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-20 Improper Input Validation
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters. Vulnerable Software & Versions: (show all )
operadriver-1.5.jarDescription:
OperaDriver is a vendor-supported WebDriver implementation developed by Opera Software and volunteers that implements WebDriver's wire protocol. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/operadriver-1.5.jar
MD5: afe1503a091d63c67e8d945783e25423
SHA1: 3875fb993d2b2b937ced0246b578c3c3f3f32f9e
SHA256: c23698d992d983060fcd897e819d33e9598b242815a9ae625621d80a3bba1139
Evidence Type Source Name Value Confidence Vendor pom name OperaDriver High Vendor jar package name opera Low Vendor pom description OperaDriver is a vendor-supported WebDriver implementation developed by Opera Software and volunteers that implements WebDriver's wire protocol. Low Vendor file name operadriver High Vendor jar package name core Low Vendor pom groupid opera Highest Vendor pom artifactid operadriver Low Vendor pom url http://opera.com/developer/tools/operadriver/ Highest Vendor jar package name systems Low Product pom name OperaDriver High Product pom artifactid operadriver Highest Product pom description OperaDriver is a vendor-supported WebDriver implementation developed by Opera Software and volunteers that implements WebDriver's wire protocol. Low Product pom groupid opera Low Product file name operadriver High Product jar package name core Low Product pom url http://opera.com/developer/tools/operadriver/ Medium Product jar package name scope Low Product jar package name systems Low Version file version 1.5 Highest Version pom version 1.5 Highest
Related Dependencies operadriver-1.5.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/operadriver-1.5.jar MD5: afe1503a091d63c67e8d945783e25423 SHA1: 3875fb993d2b2b937ced0246b578c3c3f3f32f9e SHA256: c23698d992d983060fcd897e819d33e9598b242815a9ae625621d80a3bba1139 cpe: cpe:/a:opera:opera:1.5 Confidence :Low suppress maven: com.opera:operadriver:1.5 Confidence :Highcpe: cpe:/a:opera_software:opera:1.5 Confidence :Low suppress Published Vulnerabilities CVE-2003-1561 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Vulnerable Software & Versions:
CVE-2008-1761 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-399 Resource Management Errors
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access. Vulnerable Software & Versions: (show all )
CVE-2008-1764 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." Vulnerable Software & Versions: (show all )
CVE-2008-3079 suppress
Severity:High CVSS Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. Vulnerable Software & Versions:
CVE-2008-3172 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." Vulnerable Software & Versions:
CVE-2008-4293 suppress
Severity:High CVSS Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications. Vulnerable Software & Versions: (show all )
CVE-2008-4695 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-200 Information Exposure
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context. Vulnerable Software & Versions: (show all )
CVE-2008-4696 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat). Vulnerable Software & Versions: (show all )
CVE-2008-4794 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-20 Improper Input Validation
Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696. Vulnerable Software & Versions: (show all )
CVE-2008-4795 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks. Vulnerable Software & Versions: (show all )
CVE-2008-5679 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-399 Resource Management Errors
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption. Vulnerable Software & Versions: (show all )
CVE-2009-0915 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. Vulnerable Software & Versions: (show all )
CVE-2009-2068 suppress
Severity:Medium CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N) CWE: CWE-287 Improper Authentication
Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages." Vulnerable Software & Versions: (show all )
CVE-2010-5227 suppress
Severity:Medium CVSS Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are obtained from third party information. Vulnerable Software & Versions:
CVE-2015-8960 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-310 Cryptographic Issues
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue. Vulnerable Software & Versions: (show all )
CVE-2016-7152 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack. Vulnerable Software & Versions: (show all )
operalaunchers-1.1.jarDescription:
The launchers are used for starting, stopping and monitoring of Opera. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/operalaunchers-1.1.jar
MD5: efc0db3273a50c6674c77dc75bc446c4
SHA1: 8f09d3dc6dcce5580666ae6e0556a7dbb6b1a563
SHA256: a034249c66ef6e5c12767eb8cb05ad04205c7ea232d5529ffb3792b613743db2
Evidence Type Source Name Value Confidence Vendor jar package name opera Low Vendor pom description The launchers are used for starting, stopping and monitoring of Opera. Medium Vendor pom name OperaLaunchers High Vendor pom artifactid operalaunchers Low Vendor jar package name core Low Vendor file name operalaunchers High Vendor pom groupid opera Highest Vendor pom url http://opera.com/developer/tools/operadriver/ Highest Vendor jar package name systems Low Product pom description The launchers are used for starting, stopping and monitoring of Opera. Medium Product pom groupid opera Low Product pom name OperaLaunchers High Product jar package name runner Low Product jar package name core Low Product file name operalaunchers High Product pom artifactid operalaunchers Highest Product pom url http://opera.com/developer/tools/operadriver/ Medium Product jar package name systems Low Version file version 1.1 Highest Version pom version 1.1 Highest
Related Dependencies operalaunchers-1.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/operalaunchers-1.1.jar MD5: efc0db3273a50c6674c77dc75bc446c4 SHA1: 8f09d3dc6dcce5580666ae6e0556a7dbb6b1a563 SHA256: a034249c66ef6e5c12767eb8cb05ad04205c7ea232d5529ffb3792b613743db2 maven: com.opera:operalaunchers:1.1 Confidence :Highcpe: cpe:/a:opera:opera:1.1 Confidence :Low suppress cpe: cpe:/a:opera_software:opera:1.1 Confidence :Low suppress Published Vulnerabilities CVE-2003-1561 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data. Vulnerable Software & Versions:
CVE-2008-1761 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-399 Resource Management Errors
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access. Vulnerable Software & Versions: (show all )
CVE-2008-1764 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to "keyboard handling of password inputs." Vulnerable Software & Versions: (show all )
CVE-2008-3079 suppress
Severity:High CVSS Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. Vulnerable Software & Versions:
CVE-2008-3172 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." Vulnerable Software & Versions:
CVE-2008-4293 suppress
Severity:High CVSS Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors in which Opera is launched by other applications. Vulnerable Software & Versions: (show all )
CVE-2008-4695 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-200 Information Exposure
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache pathname of a cached Java applet and then launching this applet from the cache, leading to applet execution within the local-machine context. Vulnerable Software & Versions: (show all )
CVE-2008-4696 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the "optional fragment"), which is not properly escaped before storage in the History Search database (aka md.dat). Vulnerable Software & Versions: (show all )
CVE-2008-4794 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-20 Improper Input Validation
Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696. Vulnerable Software & Versions: (show all )
CVE-2008-4795 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks. Vulnerable Software & Versions: (show all )
CVE-2008-5679 suppress
Severity:High CVSS Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) CWE: CWE-399 Resource Management Errors
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption. Vulnerable Software & Versions: (show all )
CVE-2009-0915 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Opera before 9.64 allows remote attackers to conduct cross-domain scripting attacks via unspecified vectors related to plug-ins. Vulnerable Software & Versions: (show all )
CVE-2009-2068 suppress
Severity:Medium CVSS Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N) CWE: CWE-287 Improper Authentication
Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages." Vulnerable Software & Versions: (show all )
CVE-2010-5227 suppress
Severity:Medium CVSS Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)
Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .htm, .mht, .mhtml, .xht, .xhtm, or .xhtl file. NOTE: some of these details are obtained from third party information. Vulnerable Software & Versions:
CVE-2015-8960 suppress
Severity:Medium CVSS Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) CWE: CWE-310 Cryptographic Issues
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue. Vulnerable Software & Versions: (show all )
CVE-2016-7152 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack. Vulnerable Software & Versions: (show all )
phantomjsdriver-1.2.1.jarDescription:
PhantomJSDriver is a Java binding for the PhantomJS WebDriver, GhostDriver.
The binding is developed within the GhostDriver project, and distributed through public Maven repository
and Selenium official .zip package.
License:
The BSD 2-Clause License: http://opensource.org/licenses/BSD-2-Clause File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/phantomjsdriver-1.2.1.jar
MD5: 99bbea026ae4b67fb0af8ef7b56e678c
SHA1: c5106c0223512a467c03b26f8a31e4027ddaa495
SHA256: 7905d9fe26e218e8fc899cfb919c29cc53d1b81a0843312335806327b9ac481d
Evidence Type Source Name Value Confidence Vendor central groupid com.codeborne Highest Vendor pom name PhantomJSDriver High Vendor jar package name openqa Low Vendor file name phantomjsdriver High Vendor jar package name selenium Low Vendor pom artifactid phantomjsdriver Low Vendor pom url detro/ghostdriver Highest Vendor jar package name phantomjs Low Vendor pom groupid codeborne Highest Vendor pom description PhantomJSDriver is a Java binding for the PhantomJS WebDriver, GhostDriver. The binding is developed within the GhostDriver project, and distributed through public Maven repository and Selenium official .zip package. Low Product central artifactid phantomjsdriver Highest Product pom name PhantomJSDriver High Product file name phantomjsdriver High Product jar package name selenium Low Product Manifest Implementation-Title PhantomJS Driver (GhostDriver) High Product jar package name phantomjs Low Product pom artifactid phantomjsdriver Highest Product pom url detro/ghostdriver High Product pom groupid codeborne Low Product pom description PhantomJSDriver is a Java binding for the PhantomJS WebDriver, GhostDriver. The binding is developed within the GhostDriver project, and distributed through public Maven repository and Selenium official .zip package. Low Version file version 1.2.1 Highest Version Manifest Implementation-Version 1.2.1 High Version central version 1.2.1 Highest Version pom version 1.2.1 Highest
Related Dependencies phantomjsdriver-1.2.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/phantomjsdriver-1.2.1.jar MD5: 99bbea026ae4b67fb0af8ef7b56e678c SHA1: c5106c0223512a467c03b26f8a31e4027ddaa495 SHA256: 7905d9fe26e218e8fc899cfb919c29cc53d1b81a0843312335806327b9ac481d platform-3.4.0.jarDescription:
Java Native Access Platform License:
LGPL, version 2.1: http://creativecommons.org/licenses/LGPL/2.1/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/platform-3.4.0.jar
MD5: c5057d6dc3a531708e4a91249fadda3f
SHA1: e3f70017be8100d3d6923f50b3d2ee17714e9c13
SHA256: ea89d5090c8303ba4e9a0056e6d8a20429f3e021411e950bfd9eba3b6e6cf15c
Evidence Type Source Name Value Confidence Vendor file name platform High Vendor pom url twall/jna Highest Vendor pom description Java Native Access Platform Medium Vendor pom groupid net.java.dev.jna Highest Vendor pom name Java Native Access Platform High Vendor jar package name jna Low Vendor pom artifactid platform Low Vendor jar package name platform Low Vendor jar (hint) package name oracle Low Vendor central groupid net.java.dev.jna Highest Vendor jar package name sun Low Product file name platform High Product pom description Java Native Access Platform Medium Product pom name Java Native Access Platform High Product pom url twall/jna High Product jar package name jna Low Product central artifactid platform Highest Product jar package name win32 Low Product jar package name platform Low Product pom artifactid platform Highest Product pom groupid net.java.dev.jna Low Version file version 3.4.0 Highest Version central version 3.4.0 Highest Version pom version 3.4.0 Highest
protobuf-java-2.4.1.jarDescription:
Protocol Buffers are a way of encoding structured data in an efficient yet
extensible format.
License:
New BSD license: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/protobuf-java-2.4.1.jar
MD5: 1253f05305eed82f6aae1d8c8aad43da
SHA1: 0c589509ec6fd86d5d2fda37e07c08538235d3b9
SHA256: ad9769a22989e688a46af4d3accc348cc501ced22118033230542bc916e33f0b
Evidence Type Source Name Value Confidence Vendor file name protobuf-java High Vendor pom parent-groupid com.google Medium Vendor jar package name protobuf Low Vendor pom description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Low Vendor pom name Protocol Buffer Java API High Vendor jar package name google Low Vendor pom artifactid protobuf-java Low Vendor pom url http://code.google.com/p/protobuf Highest Vendor pom groupid google.protobuf Highest Vendor pom parent-artifactid google Low Product file name protobuf-java High Product jar package name protobuf Low Product pom description Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Low Product pom name Protocol Buffer Java API High Product pom artifactid protobuf-java Highest Product pom url http://code.google.com/p/protobuf Medium Product pom parent-groupid com.google Low Product pom groupid google.protobuf Low Product pom parent-artifactid google Medium Version file version 2.4.1 Highest Version pom version 2.4.1 Highest
Related Dependencies protobuf-java-2.4.1.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/protobuf-java-2.4.1.jar MD5: 1253f05305eed82f6aae1d8c8aad43da SHA1: 0c589509ec6fd86d5d2fda37e07c08538235d3b9 SHA256: ad9769a22989e688a46af4d3accc348cc501ced22118033230542bc916e33f0b Published Vulnerabilities CVE-2015-5237 suppress
Severity:Medium CVSS Score: 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P) CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. Vulnerable Software & Versions: (show all )
sac-1.3.jarDescription:
SAC is a standard interface for CSS parsers. License:
The W3C Software License: http://www.w3.org/Consortium/Legal/copyright-software-19980720 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/sac-1.3.jar
MD5: eb04fa63fc70c722f2b8ec156166343b
SHA1: cdb2dcb4e22b83d6b32b93095f644c3462739e82
SHA256: 003785669f921aafe4f137468dd20a01a36111e94fd7449f26c16e7924d82d23
Evidence Type Source Name Value Confidence Vendor jar package name w3c Low Vendor pom url http://www.w3.org/Style/CSS/SAC/ Highest Vendor jar package name css Low Vendor pom organization url http://www.w3.org/ Medium Vendor pom groupid w3c.css Highest Vendor pom artifactid sac Low Vendor jar package name sac Low Vendor pom name Simple API for CSS High Vendor pom description SAC is a standard interface for CSS parsers. Medium Vendor central groupid org.w3c.css Highest Vendor file name sac High Vendor pom organization name World Wide Web Consortium High Product central artifactid sac Highest Product pom groupid w3c.css Low Product jar package name sac Low Product pom organization url http://www.w3.org/ Low Product pom name Simple API for CSS High Product pom description SAC is a standard interface for CSS parsers. Medium Product pom url http://www.w3.org/Style/CSS/SAC/ Medium Product jar package name css Low Product pom organization name World Wide Web Consortium Low Product pom artifactid sac Highest Product file name sac High Version central version 1.3 Highest Version pom version 1.3 Highest Version file version 1.3 Highest
Related Dependencies sac-1.3.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/sac-1.3.jar MD5: eb04fa63fc70c722f2b8ec156166343b SHA1: cdb2dcb4e22b83d6b32b93095f644c3462739e82 SHA256: 003785669f921aafe4f137468dd20a01a36111e94fd7449f26c16e7924d82d23 selenium-api-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-api-2.44.0.jarMD5: 8459a4b2810ef1ca6a1d1eb201e69247SHA1: ed8379783481df59c8046f9671c0e0195acd930dSHA256: ff35f18376468e1c9494ef2f258bd59de775f4863958746c9253ab56f1256875
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom artifactid selenium-api Low Vendor file name selenium-api High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-api High Product file name selenium-api High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom artifactid selenium-api Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product pom name selenium-api High Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-api:2.44.0 Confidence :High selenium-chrome-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-chrome-driver-2.44.0.jarMD5: 0b6012949068419d0d9a1cd357479ea2SHA1: 08322dfa839ec29ed7ba3397be3b9a49dda037d5SHA256: 52e36a2935044e411f29fd08a2dcb6945533fef4edebc987f8c7194bf43c6f64
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor file name selenium-chrome-driver High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor jar package name chrome Low Vendor pom parent-artifactid selenium-parent Low Vendor pom name selenium-chrome-driver High Vendor pom groupid seleniumhq.selenium Highest Vendor pom artifactid selenium-chrome-driver Low Product file name selenium-chrome-driver High Product pom artifactid selenium-chrome-driver Highest Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product jar package name chrome Low Product pom name selenium-chrome-driver High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-chrome-driver:2.44.0 Confidence :High selenium-firefox-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-firefox-driver-2.44.0.jarMD5: 7334f584cd7b8796a21e3b0d29318616SHA1: 123ed3b0b8b70e51f6794ba1b1531a199e307249SHA256: cc6c1b643232c97cff4043c5a88caee81171a42f05e0f3fd57e490e39d6c0aad
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor file name selenium-firefox-driver High Vendor pom artifactid selenium-firefox-driver Low Vendor jar package name firefox Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-firefox-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product file name selenium-firefox-driver High Product jar package name firefox Low Product pom artifactid selenium-firefox-driver Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product pom name selenium-firefox-driver High Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-firefox-driver:2.44.0 Confidence :High selenium-htmlunit-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-htmlunit-driver-2.44.0.jarMD5: 6a997362dae10f886067535076d5fc20SHA1: aadf1303dedddddf059c8bd97b8816f28fec3cf8SHA256: 522e9faef9b5a840f53c9e4d2b81c14a41bd675c2635052b26a362889caa880b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor file name selenium-htmlunit-driver High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-htmlunit-driver High Vendor jar package name htmlunit Low Vendor pom artifactid selenium-htmlunit-driver Low Product file name selenium-htmlunit-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom name selenium-htmlunit-driver High Product pom artifactid selenium-htmlunit-driver Highest Product jar package name htmlunit Low Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-htmlunit-driver:2.44.0 Confidence :High selenium-ie-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-ie-driver-2.44.0.jarMD5: b4ee38d0bfe866d6ef880a6d4c07641fSHA1: deee9750f5d20f7c78ad44a3c896bfbea613711aSHA256: 86a5d2a1d70c447e326e72e774d66ef9854dd97a97f359be84d938163ab9d657
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor pom artifactid selenium-ie-driver Low Vendor pom name selenium-ie-driver High Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor file name selenium-ie-driver High Vendor jar package name ie Low Product pom artifactid selenium-ie-driver Highest Product pom parent-artifactid selenium-parent Medium Product pom name selenium-ie-driver High Product jar package name selenium Low Product file name selenium-ie-driver High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product jar package name ie Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-ie-driver:2.44.0 Confidence :High selenium-java-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-java-2.44.0.jarMD5: 3aa24fea75577cdcc4ab44aa22cf168cSHA1: f98c321ba1e4ec81a016bcadbf49c80c29ebdc69SHA256: 49476cac7bc9a11baa564d99272bf1f22aec412d5ea06f9fff0fa5650d696707
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name thoughtworks Low Vendor pom artifactid selenium-java Low Vendor file name selenium-java High Vendor pom name selenium-java High Vendor jar package name selenium Low Vendor jar package name webdriven Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product file name selenium-java High Product pom parent-artifactid selenium-parent Medium Product pom name selenium-java High Product jar package name selenium Low Product jar package name webdriven Low Product jar package name commands Low Product pom artifactid selenium-java Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-java:2.44.0 Confidence :High selenium-remote-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-remote-driver-2.44.0.jarMD5: 924a87a9fa5c01b89364dd0f80f7b404SHA1: ef7b79655dfab115b04dee1e2be22f2c3411c0e9SHA256: 0de066be6aaa66265d75d3fcb21f9f182a0de763b1cabf0a78b948fa2a54abed
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom name selenium-remote-driver High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor jar package name remote Low Vendor pom artifactid selenium-remote-driver Low Vendor file name selenium-remote-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom name selenium-remote-driver High Product jar package name remote Low Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product file name selenium-remote-driver High Product pom artifactid selenium-remote-driver Highest Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-remote-driver:2.44.0 Confidence :High selenium-safari-driver-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-safari-driver-2.44.0.jarMD5: 9b0825e9dd09b82a7c47780dbe890ddbSHA1: c6e505c109c85022cee747eac07965cca78b6191SHA256: 0702de3d42ee52579b14e26397e795ebbd95a1470b56406fbec788158103bf77
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom name selenium-safari-driver High Vendor pom artifactid selenium-safari-driver Low Vendor jar package name safari Low Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor file name selenium-safari-driver High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product pom name selenium-safari-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name safari Low Product jar package name selenium Low Product file name selenium-safari-driver High Product pom artifactid selenium-safari-driver Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-safari-driver:2.44.0 Confidence :High selenium-support-2.44.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/selenium-support-2.44.0.jarMD5: 52358209bfca9328ec9829bd24d8335eSHA1: 42825651e29d1b850699233687a0767063bef153SHA256: 79395abca8d2d2680f1bf9df8b3501d0ffaad55a5bd88b1eaba167999e29c017
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom artifactid selenium-support Low Vendor pom name selenium-support High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor jar package name support Low Vendor file name selenium-support High Product pom name selenium-support High Product pom artifactid selenium-support Highest Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product jar package name support Low Product file name selenium-support High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.44.0 Highest Version file version 2.44.0 Highest
maven: org.seleniumhq.selenium:selenium-support:2.44.0 Confidence :High serializer-2.7.1.jarDescription:
Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input
SAX events.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/serializer-2.7.1.jarMD5: a6b64dfe58229bdd810263fa0cc54cffSHA1: 4b4b18df434451249bb65a63f2fb69e215a6a020SHA256: a15078d243d4a20b6b4e8ae2f61ed4655e352054e121aada6f7441f1ed445a3c
Evidence Type Source Name Value Confidence Vendor manifest: org/apache/xml/serializer/ Implementation-Vendor Apache Software Foundation Medium Vendor central groupid xalan Highest Vendor pom name Xalan Java Serializer High Vendor jar package name apache Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor pom artifactid serializer Low Vendor jar package name serializer Low Vendor file name serializer High Vendor pom description Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input SAX events. Low Vendor jar package name xml Low Vendor pom url http://xml.apache.org/xalan-j/ Highest Vendor manifest: org/apache/xml/serializer/utils/ Implementation-Vendor Apache Software Foundation Medium Vendor pom groupid xalan Highest Product manifest: org/apache/xml/serializer/ Specification-Title XSL Transformations (XSLT), at http://www.w3.org/TR/xslt Medium Product pom parent-artifactid apache Medium Product pom artifactid serializer Highest Product pom name Xalan Java Serializer High Product pom parent-groupid org.apache Low Product pom url http://xml.apache.org/xalan-j/ Medium Product manifest: org/apache/xml/serializer/utils/ Implementation-Title org.apache.xml.serializer.utils Medium Product jar package name serializer Low Product pom groupid xalan Low Product manifest: org/apache/xml/serializer/ Implementation-Title org.apache.xml.serializer Medium Product file name serializer High Product pom description Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input SAX events. Low Product jar package name xml Low Product central artifactid serializer Highest Version pom version 2.7.1 Highest Version file version 2.7.1 Highest Version central version 2.7.1 Highest
Published Vulnerabilities CVE-2014-0107 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function. Vulnerable Software & Versions: (show all )
webbit-0.4.14.jarDescription:
A Java event based WebSocket and HTTP server License:
BSD License: http://www.opensource.org/licenses/bsd-license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/webbit-0.4.14.jar
MD5: 2557525150b95159e58c88f5e06e1a0a
SHA1: 3bf3f17fe41fb34c4d98663957ec0795a6b6653e
SHA256: 3dce8681b6afebf1704d307f5124963723515bf75c586a525ef68f3720743bca
Evidence Type Source Name Value Confidence Vendor pom name ${project.artifactId} High Vendor pom url http://webbitserver.org/ Highest Vendor file name webbit High Vendor pom artifactid webbit Low Vendor pom description A Java event based WebSocket and HTTP server Medium Vendor jar package name webbitserver Low Vendor pom groupid webbitserver Highest Product pom artifactid webbit Highest Product pom name ${project.artifactId} High Product pom url http://webbitserver.org/ Medium Product file name webbit High Product pom description A Java event based WebSocket and HTTP server Medium Product pom groupid webbitserver Low Version file version 0.4.14 Highest Version pom version 0.4.14 Highest
Related Dependencies webbit-0.4.14.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/webbit-0.4.14.jar MD5: 2557525150b95159e58c88f5e06e1a0a SHA1: 3bf3f17fe41fb34c4d98663957ec0795a6b6653e SHA256: 3dce8681b6afebf1704d307f5124963723515bf75c586a525ef68f3720743bca maven: org.webbitserver:webbit:0.4.14 Confidence :Highcpe: cpe:/a:id:id-software:0.4.14 Confidence :Low suppress xalan-2.7.1.jarDescription:
Xalan-Java is an XSLT processor for transforming XML documents into HTML,
text, or other XML document types. It implements XSL Transformations (XSLT)
Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from
the command line, in an applet or a servlet, or as a module in other program.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/xalan-2.7.1.jarMD5: d43aad24f2c143b675292ccfef487f9cSHA1: 75f1d83ce27bab5f29fff034fc74aa9f7266f22aSHA256: 55a2e95144acf1abe44fea91c2948525c9b1f00fcaa1d10e753e92872ffbdd1e
Evidence Type Source Name Value Confidence Vendor manifest: java_cup/runtime/ Implementation-Vendor Princeton University Medium Vendor pom description Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements XSL Transformations (XSLT) Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from the command line, in an applet or a servlet, or as a module in other program. Low Vendor central groupid xalan Highest Vendor manifest: org/apache/xpath/ Implementation-Vendor Apache Software Foundation Medium Vendor jar package name apache Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor manifest: org/apache/regexp/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: org/apache/xalan/xsltc/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: org/apache/xml/ Implementation-Vendor Apache Software Foundation Medium Vendor file name xalan High Vendor manifest: org/apache/bcel/ Implementation-Vendor Apache Software Foundation Medium Vendor pom name Xalan Java High Vendor pom artifactid xalan Low Vendor manifest: org/apache/xalan/ Implementation-Vendor Apache Software Foundation Medium Vendor pom url http://xml.apache.org/xalan-j/ Highest Vendor pom groupid xalan Highest Product pom description Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements XSL Transformations (XSLT) Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from the command line, in an applet or a servlet, or as a module in other program. Low Product manifest: org/apache/regexp/ Implementation-Title org.apache.regexp Medium Product manifest: org/apache/xpath/ Implementation-Title org.apache.xpath Medium Product manifest: org/apache/xalan/ Implementation-Title org.apache.xalan Medium Product manifest: org/apache/bcel/ Implementation-Title org.apache.bcel Medium Product pom parent-artifactid apache Medium Product manifest: org/apache/regexp/ Specification-Title Java Regular Expression package Medium Product manifest: org/apache/bcel/ Specification-Title Byte Code Engineering Library Medium Product manifest: org/apache/xalan/xsltc/ Implementation-Title org.apache.xalan.xsltc Medium Product manifest: java_cup/runtime/ Implementation-Title runtime Medium Product manifest: org/apache/xml/ Implementation-Title org.apache.xml Medium Product manifest: org/apache/xalan/ Specification-Title Java API for XML Processing Medium Product central artifactid xalan Highest Product pom parent-groupid org.apache Low Product pom url http://xml.apache.org/xalan-j/ Medium Product manifest: java_cup/runtime/ Specification-Title Runtime component of JCup Medium Product pom groupid xalan Low Product file name xalan High Product pom name Xalan Java High Product pom artifactid xalan Highest Product manifest: org/apache/xalan/xsltc/ Specification-Title Java API for XML Processing Medium Version pom version 2.7.1 Highest Version file version 2.7.1 Highest Version central version 2.7.1 Highest
Published Vulnerabilities CVE-2014-0107 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-264 Permissions, Privileges, and Access Controls
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted (1) xalan:content-header, (2) xalan:entities, (3) xslt:content-header, or (4) xslt:entities property, or a Java property that is bound to the XSLT 1.0 system-property function. Vulnerable Software & Versions: (show all )
lib-http.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-http/lib-http.jarMD5: f7baf60e455f9beee87aeb13c7a6f488SHA1: 8697754fd0f84ee384d9d9f71e903a4db7018e12SHA256: f2376a9ec1196f012ba5f7ae66e4897c949108190c3cfb38520196890e21d1ba
Evidence Type Source Name Value Confidence Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name lib-http High Product jar package name http Low Product jar package name protocol Low Product jar package name nutch Low Product file name lib-http High
nekohtml-1.9.19.jarDescription:
An HTML parser and tag balancer. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-nekohtml/nekohtml-1.9.19.jar
MD5: 62aa02563ef8a3e0aaafe0f9cefa4d38
SHA1: 8a49406347d345bade1e6152e05e5f4dcbf7def5
SHA256: c60dd5e2e6fe77c715bb12b82358aaf94ab7687b7565d197a98e79c128517bc3
Evidence Type Source Name Value Confidence Vendor jar package name html Low Vendor file name nekohtml High Vendor manifest: org/cyberneko/html/ Implementation-Vendor Andy Clark, Marc Guillemot Medium Vendor pom groupid net.sourceforge.nekohtml Highest Vendor jar package name cyberneko Low Vendor pom artifactid nekohtml Low Vendor pom description An HTML parser and tag balancer. Medium Vendor pom url http://nekohtml.sourceforge.net/ Highest Vendor central groupid net.sourceforge.nekohtml Highest Vendor pom name Neko HTML High Product jar package name html Low Product file name nekohtml High Product central artifactid nekohtml Highest Product pom artifactid nekohtml Highest Product pom description An HTML parser and tag balancer. Medium Product manifest: org/cyberneko/html/ Specification-Title Hyper-Text Markup Language (HTML) Medium Product manifest: org/cyberneko/html/ Implementation-Title CyberNeko HTML Parser Medium Product pom name Neko HTML High Product pom groupid net.sourceforge.nekohtml Low Product pom url http://nekohtml.sourceforge.net/ Medium Version pom version 1.9.19 Highest Version central version 1.9.19 Highest Version file version 1.9.19 Highest
gson-2.8.4.jarDescription:
Gson JSON library File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-rabbitmq/gson-2.8.4.jarMD5: 5c5fa99b264e68546620cb81d6340e43SHA1: d0de1ca9b69e69d1d497ee3c6009d015f64dad57SHA256: 53bc5fe7644db908e6071d6c8b59059acadce7fc14217933d7251994e8673104
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Gson JSON library Medium Vendor pom groupid google.code.gson Highest Vendor pom parent-groupid com.google.code.gson Medium Vendor pom artifactid gson Low Vendor file name gson High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom parent-artifactid gson-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Gson High Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product pom parent-artifactid gson-parent Medium Product pom name Gson High Product manifest Bundle-Description Gson JSON library Medium Product file name gson High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-groupid com.google.code.gson Low Version file version 2.8.4 Highest Version pom version 2.8.4 Highest
maven: com.google.code.gson:gson:2.8.4 Confidence :High lib-rabbitmq.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-rabbitmq/lib-rabbitmq.jarMD5: 36704bcfea72af8932e47ea900544e54SHA1: ab30ee8264b28f25176ea6184240b875eae436fdSHA256: c5b791733347601a79198b1b0a518b29a5a17d9c7ec64ede611364e4d58a46d9
Evidence Type Source Name Value Confidence Vendor jar package name rabbitmq Low Vendor file name lib-rabbitmq High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name rabbitmq Low Product file name lib-rabbitmq High Product jar package name nutch Low
lib-regex-filter.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-regex-filter/lib-regex-filter.jarMD5: 73bb5b981f9adc989a9736adaa0801f0SHA1: 6b17f2eb7e541646746fa7fc44c2530b98919cb3SHA256: 6100e276c02a9baca4a700dcceed18219cef56b73574cb6f0a1f26d0d00e8f14
Evidence Type Source Name Value Confidence Vendor file name lib-regex-filter High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name urlfilter Low Product jar package name api Low Product file name lib-regex-filter High Product jar package name nutch Low Product jar package name urlfilter Low
cssparser-0.9.16.jarDescription:
A CSS parser which implements SAC (the Simple API for CSS). License:
GNU Lesser General Public License: http://www.gnu.org/licenses/lgpl.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/cssparser-0.9.16.jar
MD5: af14f5c8070a33b588cc7e2c2986bc38
SHA1: 3f751904d467537b8ee99c612e69d4e79d6271cf
SHA256: 2627c940a33f2f94f7240cbcdea5cd0efb1eebd4c3dbd7b4b8381f2ac8a2e920
Evidence Type Source Name Value Confidence Vendor jar package name parser Low Vendor file name cssparser High Vendor pom name CSS Parser High Vendor pom description A CSS parser which implements SAC (the Simple API for CSS). Medium Vendor pom groupid net.sourceforge.cssparser Highest Vendor jar package name css Low Vendor jar package name steadystate Low Vendor pom url http://cssparser.sourceforge.net/ Highest Vendor pom artifactid cssparser Low Product jar package name parser Low Product file name cssparser High Product pom groupid net.sourceforge.cssparser Low Product pom name CSS Parser High Product pom url http://cssparser.sourceforge.net/ Medium Product pom description A CSS parser which implements SAC (the Simple API for CSS). Medium Product pom artifactid cssparser Highest Product jar package name css Low Version pom version 0.9.16 Highest Version file version 0.9.16 Highest
maven: net.sourceforge.cssparser:cssparser:0.9.16 Confidence :High gson-2.3.1.jarDescription:
Google Gson library License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/gson-2.3.1.jar
MD5: e16b1b8fca0980263f764f633ec91dd6
SHA1: ecb6e1f8e4b0e84c4b886c2f14a1500caf309757
SHA256: 13f44a2f6ead058da80a91ee650c073871942468e684a9bf6a0d0319138924ce
Evidence Type Source Name Value Confidence Vendor central groupid com.google.code.gson Highest Vendor pom groupid google.code.gson Highest Vendor jar package name google Low Vendor pom url http://code.google.com/p/google-gson/ Highest Vendor manifest Bundle-Description Google Gson library Medium Vendor jar package name internal Low Vendor pom organization name Google, Inc. High Vendor pom name Gson High Vendor Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Vendor pom artifactid gson Low Vendor file name gson High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Vendor pom organization url http://www.google.com Medium Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom description Google Gson library Medium Vendor jar package name gson Low Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product pom organization url http://www.google.com Low Product manifest Bundle-Description Google Gson library Medium Product jar package name internal Low Product pom name Gson High Product central artifactid gson Highest Product Manifest bundle-contactaddress http://code.google.com/p/google-gson/ Low Product pom organization name Google, Inc. Low Product file name gson High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product pom url http://code.google.com/p/google-gson/ Medium Product pom description Google Gson library Medium Product jar package name gson Low Version pom version 2.3.1 Highest Version file version 2.3.1 Highest Version central version 2.3.1 Highest
htmlunit-2.18.jarDescription:
A headless browser intended for use in testing web-based applications. License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/htmlunit-2.18.jar
MD5: d617b3421a9968412f15f4958bd159c7
SHA1: ec30f76601f7010abbc09cc8ec401cb183916371
SHA256: 8f89ed65f6c53953f163a98a8a7f663586fbf60642826260ea26c4da6931b6e6
Evidence Type Source Name Value Confidence Vendor pom url http://htmlunit.sourceforge.net Highest Vendor pom organization name Gargoyle Software Inc. High Vendor pom description A headless browser intended for use in testing web-based applications. Medium Vendor pom organization url http://www.GargoyleSoftware.com/ Medium Vendor Manifest build-time 2015-07-26 20:07 Low Vendor pom name HtmlUnit High Vendor Manifest url http://htmlunit.sourceforge.net Low Vendor Manifest implementation-url http://htmlunit.sourceforge.net Low Vendor Manifest Implementation-Vendor-Id net.sourceforge.htmlunit Medium Vendor file name htmlunit High Vendor pom groupid net.sourceforge.htmlunit Highest Vendor Manifest specification-vendor Gargoyle Software Inc. Low Vendor Manifest Implementation-Vendor Gargoyle Software Inc. High Vendor pom artifactid htmlunit Low Product Manifest Implementation-Title HtmlUnit High Product pom description A headless browser intended for use in testing web-based applications. Medium Product Manifest build-time 2015-07-26 20:07 Low Product pom name HtmlUnit High Product pom artifactid htmlunit Highest Product Manifest url http://htmlunit.sourceforge.net Low Product Manifest implementation-url http://htmlunit.sourceforge.net Low Product pom organization name Gargoyle Software Inc. Low Product pom url http://htmlunit.sourceforge.net Medium Product file name htmlunit High Product pom groupid net.sourceforge.htmlunit Low Product pom organization url http://www.GargoyleSoftware.com/ Low Product Manifest specification-title HtmlUnit Medium Version file version 2.18 Highest Version Manifest Implementation-Version 2.18 High
maven: net.sourceforge.htmlunit:htmlunit:2.19-SNAPSHOT Confidence :High htmlunit-core-js-2.17.jarDescription:
HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java.
Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files.
License:
Mozilla Public License version 2.0: http://www.mozilla.org/MPL/2.0/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/htmlunit-core-js-2.17.jar
MD5: c647e20db0da7ec16b7738c13c652084
SHA1: 4316d68f449d42f69faf4ee255aa31b03e4f7dd5
SHA256: 32fd749af1599ab0daf22b60cbe97b6792cb9fe8b4220496a3adb667e58a5c3c
Evidence Type Source Name Value Confidence Vendor pom url http://htmlunit.sourceforge.net Highest Vendor pom groupid net.sourceforge.htmlunit Highest Vendor central groupid net.sourceforge.htmlunit Highest Vendor pom description HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java. Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files. Low Vendor pom artifactid htmlunit-core-js Low Vendor jar package name sourceforge Low Vendor jar package name htmlunit Low Vendor file name htmlunit-core-js High Vendor pom name HtmlUnit Core JS High Vendor jar package name net Low Product pom url http://htmlunit.sourceforge.net Medium Product pom artifactid htmlunit-core-js Highest Product pom groupid net.sourceforge.htmlunit Low Product pom description HtmlUnit adaptation of Mozilla Rhino Javascript engine for Java. Changes are documented by a diff (rhinoDiff.txt) contained in the generated jar files. Low Product jar package name corejs Low Product central artifactid htmlunit-core-js Highest Product jar package name sourceforge Low Product jar package name htmlunit Low Product file name htmlunit-core-js High Product pom name HtmlUnit Core JS High Version pom version 2.17 Highest Version central version 2.17 Highest Version file version 2.17 Highest
httpclient-4.5.1.jarDescription:
Apache HttpComponents Client
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/httpclient-4.5.1.jarMD5: 53cad957821a4bacaf9e108af24e6f90SHA1: 7e3cecc566df91338c6c67883b89ddd05a17db43SHA256: 0ba1a340188f33408632cedbe25d6fe17c1458bde17680a06cd6f6a69476ff74
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest implementation-build tags/4.5.1-RC1/httpclient@r1702448; 2015-09-11 14:53:18+0200 Low Vendor pom artifactid httpclient Low Vendor file name httpclient High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache HttpClient High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description
Apache HttpComponents Client
Medium Product Manifest implementation-build tags/4.5.1-RC1/httpclient@r1702448; 2015-09-11 14:53:18+0200 Low Product Manifest Implementation-Title HttpComponents Apache HttpClient High Product Manifest specification-title HttpComponents Apache HttpClient Medium Product file name httpclient High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product pom name Apache HttpClient High Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom description
Apache HttpComponents Client
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Product pom artifactid httpclient Highest Version pom version 4.5.1 Highest Version Manifest Implementation-Version 4.5.1 High Version file version 4.5.1 Highest
cpe: cpe:/a:apache:httpclient:4.5.1 Confidence :Low suppress maven: org.apache.httpcomponents:httpclient:4.5.1 Confidence :High httpcore-4.4.3.jarDescription:
Apache HttpComponents Core (blocking I/O)
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/httpcore-4.4.3.jarMD5: 5eba53f2780907ee01f224e1133f4bdeSHA1: e876a79d561e5c6207b78d347e198c8c4531a5e5SHA256: e4ce096fab656865f0d78d88887377111fb2f3bcd5004c1cddbc899987f32b5e
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom name Apache HttpCore High Vendor pom artifactid httpcore Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor Manifest implementation-build tags/4.4.3-RC1/httpcore@r1701311; 2015-09-04 20:39:33+0200 Low Vendor pom parent-artifactid httpcomponents-core Low Vendor file name httpcore High Vendor pom description
Apache HttpComponents Core (blocking I/O)
Medium Product pom artifactid httpcore Highest Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom name Apache HttpCore High Product Manifest specification-title HttpComponents Apache HttpCore Medium Product pom groupid apache.httpcomponents Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product pom parent-groupid org.apache.httpcomponents Low Product pom parent-artifactid httpcomponents-core Medium Product Manifest implementation-build tags/4.4.3-RC1/httpcore@r1701311; 2015-09-04 20:39:33+0200 Low Product file name httpcore High Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Product pom description
Apache HttpComponents Core (blocking I/O)
Medium Version Manifest Implementation-Version 4.4.3 High Version pom version 4.4.3 Highest Version file version 4.4.3 Highest
maven: org.apache.httpcomponents:httpcore:4.4.3 Confidence :High httpmime-4.5.jarDescription:
Apache HttpComponents HttpClient - MIME coded entities
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/httpmime-4.5.jarMD5: 8a768c022f99922e56daba7b3d185d65SHA1: 7bdb321e86724b16af6134a0fd22fec649eda971SHA256: 7c4c1b47ea07a4325f06adf770d74c50b84512236df8860c872ca9fa9d58ac39
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor file name httpmime High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest url http://hc.apache.org/httpcomponents-client Low Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpClient Mime High Vendor Manifest implementation-build tags/4.5-RC2/httpmime@r1682715; 2015-05-31 13:08:39+0200 Low Vendor pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Vendor pom artifactid httpmime Low Product Manifest specification-title HttpComponents Apache HttpClient Mime Medium Product file name httpmime High Product Manifest Implementation-Title HttpComponents Apache HttpClient Mime High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product Manifest url http://hc.apache.org/httpcomponents-client Low Product pom parent-groupid org.apache.httpcomponents Low Product pom name Apache HttpClient Mime High Product pom artifactid httpmime Highest Product Manifest implementation-build tags/4.5-RC2/httpmime@r1682715; 2015-05-31 13:08:39+0200 Low Product pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Version file version 4.5 Highest Version Manifest Implementation-Version 4.5 High Version pom version 4.5 Highest
maven: org.apache.httpcomponents:httpmime:4.5 Confidence :High jetty-io-9.2.12.v20150709.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/jetty-io-9.2.12.v20150709.jar
MD5: 78effcd19de2bc16fa60debc99843e8b
SHA1: c02e9e303d231a589e0c8866c1ee89bcdeb40a55
SHA256: 81a16206da9e710b3b4250cf4728c2aef300f12699a7cd2828aef94568a3c7ed
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.eclipse.jetty.io Medium Vendor pom name Jetty :: IO Utility High Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom parent-groupid org.eclipse.jetty Medium Vendor file name jetty-io High Vendor pom artifactid jetty-io Low Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product Manifest bundle-symbolicname org.eclipse.jetty.io Medium Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom name Jetty :: IO Utility High Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product pom artifactid jetty-io Highest Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product pom parent-groupid org.eclipse.jetty Low Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest url http://www.eclipse.org/jetty Low Product file name jetty-io High Product Manifest Bundle-Name Jetty :: IO Utility Medium Version pom version 9.2.12.v20150709 Highest Version Manifest Implementation-Version 9.2.12.v20150709 High Version file version 9.2.12.v20150709 Highest
maven: org.eclipse.jetty:jetty-io:9.2.12.v20150709 Confidence :High jetty-util-9.2.12.v20150709.jarDescription:
Utility classes for Jetty License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/jetty-util-9.2.12.v20150709.jar
MD5: 2fa490274ea58515ab882a20e66a9a16
SHA1: d99d38adfdb5ec677643f04fa862554b0bb8b42e
SHA256: 6e6c7b72b1a7d87e3a5924f849ecfc0059c23e748423f370e99b5a44d8edb3d7
Evidence Type Source Name Value Confidence Vendor pom description Utility classes for Jetty Medium Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom groupid eclipse.jetty Highest Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom name Jetty :: Utilities High Vendor manifest Bundle-Description Utility classes for Jetty Medium Vendor pom parent-groupid org.eclipse.jetty Medium Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Vendor file name jetty-util High Vendor Manifest bundle-symbolicname org.eclipse.jetty.util Medium Vendor pom artifactid jetty-util Low Product pom parent-artifactid jetty-project Medium Product pom groupid eclipse.jetty Low Product pom description Utility classes for Jetty Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product pom parent-groupid org.eclipse.jetty Low Product pom artifactid jetty-util Highest Product pom url http://www.eclipse.org/jetty Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest url http://www.eclipse.org/jetty Low Product pom name Jetty :: Utilities High Product manifest Bundle-Description Utility classes for Jetty Medium Product Manifest Bundle-Name Jetty :: Utilities Medium Product file name jetty-util High Product Manifest bundle-symbolicname org.eclipse.jetty.util Medium Version pom version 9.2.12.v20150709 Highest Version Manifest Implementation-Version 9.2.12.v20150709 High Version file version 9.2.12.v20150709 Highest
maven: org.eclipse.jetty:jetty-util:9.2.12.v20150709 Confidence :Highcpe: cpe:/a:jetty:jetty:9.2.12.v20150709 Confidence :Low suppress cpe: cpe:/a:eclipse:jetty:9.2.12.v20150709 Confidence :Low suppress Published Vulnerabilities CVE-2017-7656 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-284 Improper Access Control
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. Vulnerable Software & Versions: (show all )
CVE-2017-7657 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-190 Integer Overflow or Wraparound
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-19 Data Processing Errors
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. Vulnerable Software & Versions: (show all )
CVE-2017-9735 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. Vulnerable Software & Versions:
jna-platform-4.1.0.jarDescription:
Java Native Access Platform License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
ASL, version 2: http://www.apache.org/licenses/ File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/jna-platform-4.1.0.jar
MD5: 533e404eda70bbf8e40de134ffeec95b
SHA1: 23457ad1cf75c2c16763330de5565a0e67b4bc0a
SHA256: f91ba7c0f26c34f04bf57d2ae30d4b19f906e7bb1de90eb3e1f4fdbf45d0c541
Evidence Type Source Name Value Confidence Vendor pom url twall/jna Highest Vendor Manifest require-bundle com.sun.jna;bundle-version="4.1.0" Low Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor jar package name platform Low Vendor jar (hint) package name oracle Low Vendor Manifest bundle-symbolicname com.sun.jna.platform Medium Vendor manifest Bundle-Description JNA Platform Library Medium Vendor pom description Java Native Access Platform Medium Vendor pom groupid net.java.dev.jna Highest Vendor pom name Java Native Access Platform High Vendor jar package name jna Low Vendor Manifest specification-vendor JNA Development Team Low Vendor central groupid net.java.dev.jna Highest Vendor jar package name sun Low Vendor file name jna-platform High Vendor pom artifactid jna-platform Low Product Manifest require-bundle com.sun.jna;bundle-version="4.1.0" Low Product pom artifactid jna-platform Highest Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest Implementation-Title com.sun.jna.platform High Product jar package name win32 Low Product Manifest Bundle-Name jna-platform Medium Product jar package name platform Low Product central artifactid jna-platform Highest Product Manifest bundle-symbolicname com.sun.jna.platform Medium Product manifest Bundle-Description JNA Platform Library Medium Product Manifest specification-title Java Native Access (JNA) Medium Product pom groupid net.java.dev.jna Low Product pom description Java Native Access Platform Medium Product pom name Java Native Access Platform High Product pom url twall/jna High Product jar package name jna Low Product file name jna-platform High Version file version 4.1.0 Highest Version central version 4.1.0 Highest Version pom version 4.1.0 Highest
lib-selenium.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/lib-selenium.jarMD5: f591d1ad5d726e32f64e77e5c45cfe65SHA1: e7e31b8af4f842eb1e57a97b0f5f2c7dfe1a6676SHA256: 016a029a58751c6be0017afe54c1a32239fab27621444dc1a965ee01baba152b
Evidence Type Source Name Value Confidence Vendor file name lib-selenium High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name lib-selenium High Product jar package name selenium Low Product jar package name protocol Low Product jar package name nutch Low
nekohtml-1.9.22.jarDescription:
An HTML parser and tag balancer. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/nekohtml-1.9.22.jar
MD5: a97dfe2d0ceb81ffbdd15436961b0f23
SHA1: 4f54af68ecb345f2453fb6884672ad08414154e3
SHA256: 452978e8b6667c7b8357fd3f0a2f2f405e4560a7148143a69181735da5d19045
Evidence Type Source Name Value Confidence Vendor jar package name html Low Vendor file name nekohtml High Vendor manifest: org/cyberneko/html/ Implementation-Vendor Andy Clark, Marc Guillemot Medium Vendor pom groupid net.sourceforge.nekohtml Highest Vendor jar package name cyberneko Low Vendor pom artifactid nekohtml Low Vendor pom description An HTML parser and tag balancer. Medium Vendor pom url http://nekohtml.sourceforge.net/ Highest Vendor central groupid net.sourceforge.nekohtml Highest Vendor pom name Neko HTML High Product jar package name html Low Product file name nekohtml High Product central artifactid nekohtml Highest Product pom artifactid nekohtml Highest Product pom description An HTML parser and tag balancer. Medium Product manifest: org/cyberneko/html/ Specification-Title Hyper-Text Markup Language (HTML) Medium Product manifest: org/cyberneko/html/ Implementation-Title CyberNeko HTML Parser Medium Product pom name Neko HTML High Product pom groupid net.sourceforge.nekohtml Low Product pom url http://nekohtml.sourceforge.net/ Medium Version central version 1.9.22 Highest Version file version 1.9.22 Highest Version pom version 1.9.22 Highest
selenium-api-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-api-2.48.2.jarMD5: edd38db05640d62a5c0e7e961f88241dSHA1: a0ae87eb600f042cf678266221e948d02cf9bce1SHA256: 5f2d190a2b1bb157444540d4a7089107c7f0165acf5401877185b4afd105c7c3
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom artifactid selenium-api Low Vendor file name selenium-api High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-api High Product file name selenium-api High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom artifactid selenium-api Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product pom name selenium-api High Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-api:2.48.2 Confidence :High selenium-chrome-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-chrome-driver-2.48.2.jarMD5: af47f8c41436d67e80ece4489db6d784SHA1: 1c22091849c3f4ee5b7418e7eb91ee1e88d76cccSHA256: bb5ad652ba0f91cc3ce5c4e35085214d482a855d692d47f216c044e413450c4b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor file name selenium-chrome-driver High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor jar package name chrome Low Vendor pom parent-artifactid selenium-parent Low Vendor pom name selenium-chrome-driver High Vendor pom groupid seleniumhq.selenium Highest Vendor pom artifactid selenium-chrome-driver Low Product file name selenium-chrome-driver High Product pom artifactid selenium-chrome-driver Highest Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product jar package name chrome Low Product pom name selenium-chrome-driver High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-chrome-driver:2.48.2 Confidence :High selenium-edge-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-edge-driver-2.48.2.jarMD5: 285eca8b078f22e01ef6fe72dd77db60SHA1: 58ce29b698328f076bb5204ba97339437c61698fSHA256: 91510f858885fb0f214203aef7eba36d5233d5e022640f7b8c77189508a970b8
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom name selenium-edge-driver High Vendor jar package name edge Low Vendor jar package name openqa Low Vendor pom artifactid selenium-edge-driver Low Vendor jar package name selenium Low Vendor file name selenium-edge-driver High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product pom name selenium-edge-driver High Product jar package name edge Low Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom artifactid selenium-edge-driver Highest Product file name selenium-edge-driver High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-edge-driver:2.48.2 Confidence :High selenium-firefox-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-firefox-driver-2.48.2.jarMD5: 32fa527b688cc811a731c8b62d9f0298SHA1: 947d3e890dac4ee569af6ab667eab3da223b4ba6SHA256: 42825eb9e6fea09110c9e462738ea3e9ab155e553344789042441394bd8910b9
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor file name selenium-firefox-driver High Vendor pom artifactid selenium-firefox-driver Low Vendor jar package name firefox Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-firefox-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product file name selenium-firefox-driver High Product jar package name firefox Low Product pom artifactid selenium-firefox-driver Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product pom name selenium-firefox-driver High Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-firefox-driver:2.48.2 Confidence :High selenium-htmlunit-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-htmlunit-driver-2.48.2.jarMD5: a56ad5893d225a897fa010b0603ae303SHA1: 2d75ff755ae721373cd925eb06175addae6c4f10SHA256: 344780544682a1169d8e74b6d0f7843fab0ee3d51efbdc544351a1ce2615260b
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor file name selenium-htmlunit-driver High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor pom name selenium-htmlunit-driver High Vendor jar package name htmlunit Low Vendor pom artifactid selenium-htmlunit-driver Low Product file name selenium-htmlunit-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom name selenium-htmlunit-driver High Product pom artifactid selenium-htmlunit-driver Highest Product jar package name htmlunit Low Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-htmlunit-driver:2.48.2 Confidence :High selenium-ie-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-ie-driver-2.48.2.jarMD5: 96d3bb724c6505ac5d5963ca4bddeb5bSHA1: 8278d774a0945374e1a2f7cf1577c3c896e92144SHA256: 95d176f996e678149578a2b57ca87c9dc7d175577fc9e8b994d3e64ef9f88f65
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor pom artifactid selenium-ie-driver Low Vendor pom name selenium-ie-driver High Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor file name selenium-ie-driver High Vendor jar package name ie Low Product pom artifactid selenium-ie-driver Highest Product pom parent-artifactid selenium-parent Medium Product pom name selenium-ie-driver High Product jar package name selenium Low Product file name selenium-ie-driver High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product jar package name ie Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-ie-driver:2.48.2 Confidence :High selenium-java-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-java-2.48.2.jarMD5: cb8653053bc72c5a63d9233ab97356dbSHA1: 97e2c7b45cfe3e11a33d4710660838eb57a42531SHA256: 5d3a2562379270ec7acc46cc42d27f9255f42b61cd79444a41a73ff55a5b444e
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom artifactid selenium-java Low Vendor file name selenium-java High Vendor pom name selenium-java High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product file name selenium-java High Product pom parent-artifactid selenium-parent Medium Product pom name selenium-java High Product pom artifactid selenium-java Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-java:2.48.2 Confidence :High selenium-leg-rc-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-leg-rc-2.48.2.jarMD5: 6bb9d5033d4ddd825eb4704641137763SHA1: 5a8fc124ecfcc2f99ff44f2d032210b60d91c6d6SHA256: d2f92575d460d673ca66d9b6dcaeb179b319273cf480d796962da96971daa05c
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name thoughtworks Low Vendor pom name selenium-leg-rc High Vendor pom artifactid selenium-leg-rc Low Vendor jar package name selenium Low Vendor jar package name webdriven Low Vendor file name selenium-leg-rc High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product pom artifactid selenium-leg-rc Highest Product pom name selenium-leg-rc High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product jar package name webdriven Low Product file name selenium-leg-rc High Product jar package name commands Low Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-leg-rc:2.48.2 Confidence :High selenium-remote-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-remote-driver-2.48.2.jarMD5: 0ca557bf5621f59f7ec9e2c25c129b4eSHA1: c35f3cbc64b254ae931c373f126c3a5ef82dde4aSHA256: 64d0aed881964938b18b0a23cedd2bba410c8c41ce1bf26fc280f57b36b2d29a
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom name selenium-remote-driver High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor jar package name remote Low Vendor pom artifactid selenium-remote-driver Low Vendor file name selenium-remote-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product pom name selenium-remote-driver High Product jar package name remote Low Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Product file name selenium-remote-driver High Product pom artifactid selenium-remote-driver Highest Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-remote-driver:2.48.2 Confidence :High selenium-safari-driver-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-safari-driver-2.48.2.jarMD5: a0ddfdee72b3c6ac2b38966fe7eb9641SHA1: 06a6340819a62ba1e0ba8277d8f2949127f455a3SHA256: f7649066cefa5f73182170ca3c3c394bbc3c7e23133d9f5daf3126a801cc3871
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom name selenium-safari-driver High Vendor pom artifactid selenium-safari-driver Low Vendor jar package name safari Low Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor file name selenium-safari-driver High Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Product pom name selenium-safari-driver High Product pom parent-artifactid selenium-parent Medium Product jar package name safari Low Product jar package name selenium Low Product file name selenium-safari-driver High Product pom artifactid selenium-safari-driver Highest Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-safari-driver:2.48.2 Confidence :High selenium-support-2.48.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/selenium-support-2.48.2.jarMD5: fdf863b7d4f0205aece209a4f369d0b8SHA1: bc39b5db73598c65ebaeba15db64dd07ed0212fdSHA256: 638fd743db6557d344c68b1a7a07f1db164174425ad1d3307609c90f99c34430
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.seleniumhq.selenium Medium Vendor pom artifactid selenium-support Low Vendor pom name selenium-support High Vendor jar package name openqa Low Vendor jar package name selenium Low Vendor pom parent-artifactid selenium-parent Low Vendor pom groupid seleniumhq.selenium Highest Vendor jar package name support Low Vendor file name selenium-support High Product pom name selenium-support High Product pom artifactid selenium-support Highest Product pom parent-artifactid selenium-parent Medium Product jar package name selenium Low Product jar package name support Low Product file name selenium-support High Product pom groupid seleniumhq.selenium Low Product pom parent-groupid org.seleniumhq.selenium Low Version pom version 2.48.2 Highest Version file version 2.48.2 Highest
maven: org.seleniumhq.selenium:selenium-support:2.48.2 Confidence :High serializer-2.7.2.jarDescription:
Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input
SAX events.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/serializer-2.7.2.jarMD5: e8325763fd4235f174ab7b72ed815db1SHA1: 24247f3bb052ee068971393bdb83e04512bb1c3cSHA256: e8f5b4340d3b12a0cfa44ac2db4be4e0639e479ae847df04c4ed8b521734bb4a
Evidence Type Source Name Value Confidence Vendor manifest: org/apache/xml/serializer/ Implementation-Vendor Apache Software Foundation Medium Vendor central groupid xalan Highest Vendor pom name Xalan Java Serializer High Vendor jar package name apache Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor pom artifactid serializer Low Vendor jar package name serializer Low Vendor file name serializer High Vendor pom description Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input SAX events. Low Vendor jar package name xml Low Vendor pom url http://xml.apache.org/xalan-j/ Highest Vendor manifest: org/apache/xml/serializer/utils/ Implementation-Vendor Apache Software Foundation Medium Vendor pom groupid xalan Highest Product manifest: org/apache/xml/serializer/ Specification-Title XSL Transformations (XSLT), at http://www.w3.org/TR/xslt Medium Product pom parent-artifactid apache Medium Product pom artifactid serializer Highest Product pom name Xalan Java Serializer High Product pom parent-groupid org.apache Low Product pom url http://xml.apache.org/xalan-j/ Medium Product manifest: org/apache/xml/serializer/utils/ Implementation-Title org.apache.xml.serializer.utils Medium Product jar package name serializer Low Product pom groupid xalan Low Product manifest: org/apache/xml/serializer/ Implementation-Title org.apache.xml.serializer Medium Product file name serializer High Product pom description Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input SAX events. Low Product jar package name xml Low Product central artifactid serializer Highest Version pom version 2.7.2 Highest Version file version 2.7.2 Highest Version central version 2.7.2 Highest
websocket-api-9.2.12.v20150709.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/websocket-api-9.2.12.v20150709.jar
MD5: 24ea17254d3623e981ddb9eaf646817f
SHA1: 6bb55e8ef1a385e40f144a240492915b89914cfb
SHA256: 4bf92ec42aaf8e6fd219ffc408ae68a3e1988638bb17494f72ebb65ddd4f6dc0
Evidence Type Source Name Value Confidence Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.websocket.api Medium Vendor file name websocket-api High Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom parent-groupid org.eclipse.jetty.websocket Medium Vendor pom name Jetty :: Websocket :: API High Vendor pom groupid eclipse.jetty.websocket Highest Vendor pom artifactid websocket-api Low Vendor pom parent-artifactid websocket-parent Low Product Manifest Bundle-Name Jetty :: Websocket :: API Medium Product pom groupid eclipse.jetty.websocket Low Product pom parent-groupid org.eclipse.jetty.websocket Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product pom artifactid websocket-api Highest Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest bundle-symbolicname org.eclipse.jetty.websocket.api Medium Product file name websocket-api High Product Manifest url http://www.eclipse.org/jetty Low Product pom name Jetty :: Websocket :: API High Product pom parent-artifactid websocket-parent Medium Version pom version 9.2.12.v20150709 Highest Version Manifest Implementation-Version 9.2.12.v20150709 High Version file version 9.2.12.v20150709 Highest
maven: org.eclipse.jetty.websocket:websocket-api:9.2.12.v20150709 Confidence :High websocket-client-9.2.12.v20150709.jarDescription:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/websocket-client-9.2.12.v20150709.jar
MD5: b3ae1e2cdaa4c010e4fe1cc13cc79483
SHA1: 79e439a426514af24e693c78662cb2b4db2be3c6
SHA256: 79a0d55d6e05dff0e69a149deac5211cb57025d2d9b2bb998a653eb80d99f41c
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.eclipse.jetty.websocket.client Medium Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Vendor pom artifactid websocket-client Low Vendor Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Vendor file name websocket-client High Vendor manifest Bundle-Description Administrative parent pom for Jetty modules Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor pom name Jetty :: Websocket :: Client High Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom parent-groupid org.eclipse.jetty.websocket Medium Vendor pom groupid eclipse.jetty.websocket Highest Vendor pom parent-artifactid websocket-parent Low Product pom groupid eclipse.jetty.websocket Low Product pom parent-groupid org.eclipse.jetty.websocket Low Product pom artifactid websocket-client Highest Product Manifest bundle-symbolicname org.eclipse.jetty.websocket.client Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7 Low Product Manifest Bundle-Name Jetty :: Websocket :: Client Medium Product Manifest bundle-copyright Copyright (c) 2008-2014 Mort Bay Consulting Pty. Ltd. Low Product file name websocket-client High Product manifest Bundle-Description Administrative parent pom for Jetty modules Medium Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product pom name Jetty :: Websocket :: Client High Product Manifest url http://www.eclipse.org/jetty Low Product pom parent-artifactid websocket-parent Medium Version pom version 9.2.12.v20150709 Highest Version Manifest Implementation-Version 9.2.12.v20150709 High Version file version 9.2.12.v20150709 Highest
Related Dependencies websocket-common-9.2.12.v20150709.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/websocket-common-9.2.12.v20150709.jar MD5: 9662079424f4758ef2429e124373950a SHA1: 97219331c7ec90b2964b3a50d86008e1f16f5638 SHA256: 353085afc8649939635c74a31a6f1cba6edc8f48e6547066c924b880b6879c08 cpe: cpe:/a:jetty:jetty:9.2.12.v20150709 Confidence :Low suppress cpe: cpe:/a:eclipse:jetty:9.2.12.v20150709 Confidence :Low suppress maven: org.eclipse.jetty.websocket:websocket-client:9.2.12.v20150709 Confidence :High Published Vulnerabilities CVE-2017-7656 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-284 Improper Access Control
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. Vulnerable Software & Versions: (show all )
CVE-2017-7657 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-190 Integer Overflow or Wraparound
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-19 Data Processing Errors
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. Vulnerable Software & Versions: (show all )
CVE-2017-9735 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords. Vulnerable Software & Versions:
xalan-2.7.2.jarDescription:
Xalan-Java is an XSLT processor for transforming XML documents into HTML,
text, or other XML document types. It implements XSL Transformations (XSLT)
Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from
the command line, in an applet or a servlet, or as a module in other program.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-selenium/xalan-2.7.2.jarMD5: 6aa6607802502c8016b676f25f8e4873SHA1: d55d3f02a56ec4c25695fe67e1334ff8c2ecea23SHA256: a44bd80e82cb0f4cfac0dac8575746223802514e3cec9dc75235bc0de646af14
Evidence Type Source Name Value Confidence Vendor manifest: java_cup/runtime/ Implementation-Vendor Princeton University Medium Vendor pom description Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements XSL Transformations (XSLT) Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from the command line, in an applet or a servlet, or as a module in other program. Low Vendor central groupid xalan Highest Vendor manifest: org/apache/xpath/ Implementation-Vendor Apache Software Foundation Medium Vendor jar package name apache Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor manifest: org/apache/regexp/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: org/apache/xalan/xsltc/ Implementation-Vendor Apache Software Foundation Medium Vendor manifest: org/apache/xml/ Implementation-Vendor Apache Software Foundation Medium Vendor file name xalan High Vendor manifest: org/apache/bcel/ Implementation-Vendor Apache Software Foundation Medium Vendor pom name Xalan Java High Vendor pom artifactid xalan Low Vendor manifest: org/apache/xalan/ Implementation-Vendor Apache Software Foundation Medium Vendor pom url http://xml.apache.org/xalan-j/ Highest Vendor pom groupid xalan Highest Product pom description Xalan-Java is an XSLT processor for transforming XML documents into HTML, text, or other XML document types. It implements XSL Transformations (XSLT) Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from the command line, in an applet or a servlet, or as a module in other program. Low Product manifest: org/apache/regexp/ Implementation-Title org.apache.regexp Medium Product manifest: org/apache/xpath/ Implementation-Title org.apache.xpath Medium Product manifest: org/apache/xalan/ Implementation-Title org.apache.xalan Medium Product manifest: org/apache/bcel/ Implementation-Title org.apache.bcel Medium Product pom parent-artifactid apache Medium Product manifest: org/apache/regexp/ Specification-Title Java Regular Expression package Medium Product manifest: org/apache/bcel/ Specification-Title Byte Code Engineering Library Medium Product manifest: org/apache/xalan/xsltc/ Implementation-Title org.apache.xalan.xsltc Medium Product manifest: java_cup/runtime/ Implementation-Title runtime Medium Product manifest: org/apache/xml/ Implementation-Title org.apache.xml Medium Product manifest: org/apache/xalan/ Specification-Title Java API for XML Processing Medium Product central artifactid xalan Highest Product pom parent-groupid org.apache Low Product pom url http://xml.apache.org/xalan-j/ Medium Product manifest: java_cup/runtime/ Specification-Title Runtime component of JCup Medium Product pom groupid xalan Low Product file name xalan High Product pom name Xalan Java High Product pom artifactid xalan Highest Product manifest: org/apache/xalan/xsltc/ Specification-Title Java API for XML Processing Medium Version pom version 2.7.2 Highest Version file version 2.7.2 Highest Version central version 2.7.2 Highest
maven: xalan:xalan:2.7.2 ✓ Confidence :Highestcpe: cpe:/a:apache:xalan-java:2.7.2 Confidence :Low suppress jaxen-1.1.1.jarDescription:
Jaxen is a universal Java XPath engine. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-xml/jaxen-1.1.1.jarMD5: 261d1aa59865842ecc32b3848b0c6538SHA1: 9f5d3c5974dbe5cf69c2c2ec7d8a4eb6e0fce7f9SHA256: 160958f42f60fff817d6c0b1b02fd9284b3f0fcb46e61d38866f65b7af4d329d
Evidence Type Source Name Value Confidence Vendor Manifest extension-name jaxen Medium Vendor pom groupid jaxen Highest Vendor pom description Jaxen is a universal Java XPath engine. Medium Vendor pom organization name Codehaus High Vendor pom organization url http://codehaus.org Medium Vendor Manifest Implementation-Vendor Codehaus High Vendor central groupid jaxen Highest Vendor pom artifactid jaxen Low Vendor jar package name jaxen Low Vendor pom name jaxen High Vendor pom url http://jaxen.codehaus.org/ Highest Vendor Manifest specification-vendor Codehaus Low Vendor file name jaxen High Product Manifest extension-name jaxen Medium Product pom organization url http://codehaus.org Low Product pom description Jaxen is a universal Java XPath engine. Medium Product pom url http://jaxen.codehaus.org/ Medium Product pom groupid jaxen Low Product pom artifactid jaxen Highest Product pom name jaxen High Product central artifactid jaxen Highest Product Manifest specification-title Universal Java XPath Engine Medium Product Manifest Implementation-Title org.jaxen High Product file name jaxen High Product pom organization name Codehaus Low Version pom version 1.1.1 Highest Version central version 1.1.1 Highest Version Manifest Implementation-Version 1.1.1 High Version file version 1.1.1 Highest
jdom-1.1.jarDescription:
JDOM is, quite simply, a Java representation of an XML document. JDOM provides a way to represent that document for
easy and efficient reading, manipulation, and writing. It has a straightforward API, is a lightweight and fast, and
is optimized for the Java programmer. It's an alternative to DOM and SAX, although it integrates well with both DOM
and SAX.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-xml/jdom-1.1.jarMD5: adf67fc5dcf48e1593640ad7e02f6ad4SHA1: 1d04c0f321ea337f3661cf7ede8f4c6f653a8fddSHA256: 3c167654499436ee9c19674b519d04e7364085533f6facada1bf90b16ad34897
Evidence Type Source Name Value Confidence Vendor manifest: org/jdom/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/input/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom/adapters/ Implementation-Vendor jdom.org Medium Vendor jar package name jdom Low Vendor pom groupid jdom Highest Vendor manifest: org/jdom/output/ Implementation-Vendor jdom.org Medium Vendor file name jdom High Vendor manifest: org/jdom/xpath/ Implementation-Vendor jdom.org Medium Vendor pom description JDOM is, quite simply, a Java representation of an XML document. JDOM provides a way to represent that document for easy and efficient reading, manipulation, and writing. It has a straightforward API, is a lightweight and fast, and is optimized for the Java programmer. It's an alternative to DOM and SAX, although it integrates well with both DOM and SAX. Low Vendor manifest: org/jdom/transform/ Implementation-Vendor jdom.org Medium Vendor pom url http://www.jdom.org/ Highest Vendor central groupid org.jdom Highest Vendor pom artifactid jdom Low Vendor manifest: org/jdom/filter/ Implementation-Vendor jdom.org Medium Vendor pom name JDOM High Product pom url http://www.jdom.org/ Medium Product manifest: org/jdom/xpath/ Specification-Title JDOM XPath Classes Medium Product manifest: org/jdom/adapters/ Implementation-Title org.jdom.adapters Medium Product manifest: org/jdom/filter/ Specification-Title JDOM Filter Classes Medium Product manifest: org/jdom/xpath/ Implementation-Title org.jdom.xpath Medium Product pom artifactid jdom Highest Product manifest: org/jdom/output/ Specification-Title JDOM Output Classes Medium Product manifest: org/jdom/adapters/ Specification-Title JDOM Adapter Classes Medium Product manifest: org/jdom/transform/ Specification-Title JDOM Transformation Classes Medium Product manifest: org/jdom/transform/ Implementation-Title org.jdom.transform Medium Product file name jdom High Product pom description JDOM is, quite simply, a Java representation of an XML document. JDOM provides a way to represent that document for easy and efficient reading, manipulation, and writing. It has a straightforward API, is a lightweight and fast, and is optimized for the Java programmer. It's an alternative to DOM and SAX, although it integrates well with both DOM and SAX. Low Product manifest: org/jdom/filter/ Implementation-Title org.jdom.filter Medium Product manifest: org/jdom/output/ Implementation-Title org.jdom.output Medium Product manifest: org/jdom/ Specification-Title JDOM Classes Medium Product central artifactid jdom Highest Product pom name JDOM High Product manifest: org/jdom/input/ Specification-Title JDOM Input Classes Medium Product manifest: org/jdom/input/ Implementation-Title org.jdom.input Medium Product manifest: org/jdom/ Implementation-Title org.jdom Medium Product pom groupid jdom Low Version file version 1.1 Highest Version pom version 1.1 Highest Version central version 1.1 Highest
lib-xml.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-xml/lib-xml.jarMD5: 1e62ddc7e9854b9cd712fe48d8d32ecbSHA1: 43234b17153c93de913e9de51dbec558771c466bSHA256: 1cf75da0d40496eb9644f898497ea175172d7f19ee695fdcf261cbab419d6a2a
Evidence Type Source Name Value Confidence Vendor file name lib-xml High Product file name lib-xml High
Related Dependencies nutch-extensionpoints.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/nutch-extensionpoints/nutch-extensionpoints.jar MD5: 1e62ddc7e9854b9cd712fe48d8d32ecb SHA1: 43234b17153c93de913e9de51dbec558771c466b SHA256: 1cf75da0d40496eb9644f898497ea175172d7f19ee695fdcf261cbab419d6a2a microformats-reltag.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/microformats-reltag/microformats-reltag.jarMD5: 910556f0ac7a507030769f6297e27d4cSHA1: c9ea6e788c3043e91501277d539e912572c20b8fSHA256: 0c605cee5eade39781218a50f9bc5d1172867510e2a6f10030222c8741775f5a
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name microformats Low Vendor file name microformats-reltag High Product jar package name nutch Low Product jar package name microformats Low Product file name microformats-reltag High Product jar package name reltag Low
mimetype-filter.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/mimetype-filter/mimetype-filter.jarMD5: 21457cb844e2f8aa122ef5037ef5c97eSHA1: f0d1e92d1986b3ac9b69681e25c2a9d245cb7bdbSHA256: d3f704b46d52f8f3bd47cf01dfd6bb75ca656fb1c121e8e2ddc369a0096b5be7
Evidence Type Source Name Value Confidence Vendor jar package name indexer Low Vendor file name mimetype-filter High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name indexer Low Product file name mimetype-filter High Product jar package name nutch Low Product jar package name filter Low
parse-ext.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-ext/parse-ext.jarMD5: ac36ae630053df6d0618063c79bf7914SHA1: df3cca9034d94e85eacca02a77b6590efede1097SHA256: c906ae5594d6011bf2a076ef3c61bb0d13915cca1b838accabf49d50cffa826d
Evidence Type Source Name Value Confidence Vendor file name parse-ext High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product jar package name ext Low Product file name parse-ext High Product jar package name nutch Low Product jar package name parse Low
parse-html.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-html/parse-html.jarMD5: b9ad5c547aa4700701b800cbc609c6f4SHA1: efd84fcb70e7bd2c7be3e3d2cb618aefe2d31b4aSHA256: 1333af4b9a8b43600aa5aa1d0012b7029ed7c3f7a51a8902d4312fcbcb38617f
Evidence Type Source Name Value Confidence Vendor file name parse-html High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product jar package name html Low Product file name parse-html High Product jar package name nutch Low Product jar package name parse Low
parse-js.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-js/parse-js.jarMD5: dc200e2a89495ca6c7747104150752feSHA1: 35a736090947e66996b31b813a9010d28d3cd212SHA256: c27ce949416ada214b05604bbac80334d0fa689425676bc94606783e75dc95cf
Evidence Type Source Name Value Confidence Vendor file name parse-js High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product file name parse-js High Product jar package name js Low Product jar package name nutch Low Product jar package name parse Low
parse-metatags.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-metatags/parse-metatags.jarMD5: 4a044af7f0e15b845056502433edab20SHA1: 5b553ea79d745b1272a16aa5c51a48fb2d434dbfSHA256: 644ce9de86d63affdb07f5a9b753784c2032eda217de90e40b61d2a19c5357b6
Evidence Type Source Name Value Confidence Vendor file name parse-metatags High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product jar package name metatags Low Product file name parse-metatags High Product jar package name nutch Low Product jar package name parse Low
javaswf.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-swf/javaswf.jarMD5: 05b689de727f5707e17b86b37a243d69SHA1: 30cfcb4164c185bd3c2502eaa218ab32911ccecaSHA256: 18296394efaedd8a0e86abeb76a9e680d719d4a6c3a450214d4562c6a001c4b2
Evidence Type Source Name Value Confidence Vendor file name javaswf High Vendor jar package name flash Low Vendor jar package name anotherbigidea Low Product file name javaswf High Product jar package name flash Low
parse-swf.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-swf/parse-swf.jarMD5: 90577b77838a05237b55c9ed1e837ff8SHA1: 12a98c8090767ea6c9822d236a82fbc2c2fab0e1SHA256: 8139c7117a9c4467aec0b26b9e3f71d55e29dc12d419469b2149af1106942e4c
Evidence Type Source Name Value Confidence Vendor file name parse-swf High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product file name parse-swf High Product jar package name nutch Low Product jar package name swf Low Product jar package name parse Low
FastInfoset-1.2.13.jarDescription:
Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/). License:
http://www.opensource.org/licenses/apache2.0.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/FastInfoset-1.2.13.jar
MD5: 4f941b36a4c9e827e68e8f3249253240
SHA1: 098f56b9354e27bd2941cc5d461344e240ae51ae
SHA256: 27a77db909f3c2833c0b1a37c55af1db06045118ad2eed96ce567b6632bce038
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build-id tags/fastinfoset-project-1.2.13-969, 2013-04-05T08:43:21-0700 Low Vendor pom groupid sun.xml.fastinfoset Highest Vendor pom url http://fi.java.net Highest Vendor Manifest (hint) Implementation-Vendor sun High Vendor Manifest bundle-symbolicname com.sun.xml.fastinfoset.FastInfoset Medium Vendor file name FastInfoset High Vendor pom artifactid FastInfoset Low Vendor manifest Bundle-Description Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/). Low Vendor pom parent-artifactid fastinfoset-project Low Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest extension-name com.sun.xml.fastinfoset Medium Vendor Manifest Implementation-Vendor Oracle High Vendor pom name fastinfoset High Vendor Manifest url http://fi.java.net Low Vendor pom parent-groupid com.sun.xml.fastinfoset Medium Vendor Manifest Implementation-Vendor-Id com.oracle Medium Product Manifest implementation-build-id tags/fastinfoset-project-1.2.13-969, 2013-04-05T08:43:21-0700 Low Product Manifest bundle-symbolicname com.sun.xml.fastinfoset.FastInfoset Medium Product file name FastInfoset High Product Manifest specification-title ITU-T Rec. X.891 | ISO/IEC 24824-1 (Fast Infoset) Medium Product pom parent-artifactid fastinfoset-project Medium Product manifest Bundle-Description Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/). Low Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest extension-name com.sun.xml.fastinfoset Medium Product pom artifactid FastInfoset Highest Product pom name fastinfoset High Product Manifest Implementation-Title Fast Infoset Implementation High Product pom url http://fi.java.net Medium Product Manifest url http://fi.java.net Low Product Manifest Bundle-Name fastinfoset Medium Product pom groupid sun.xml.fastinfoset Low Product pom parent-groupid com.sun.xml.fastinfoset Low Version pom version 1.2.13 Highest Version Manifest Implementation-Version 1.2.13 High Version file version 1.2.13 Highest
maven: com.sun.xml.fastinfoset:FastInfoset:1.2.13 Confidence :High activation-1.1.1.jarDescription:
The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data License:
COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0: https://glassfish.dev.java.net/public/CDDLv1.0.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/activation-1.1.1.jar
MD5: 46a37512971d8eca81c3fcf245bf07d2
SHA1: 485de3a253e23f645037828c07f1d7f1af40763a
SHA256: ae475120e9fcd99b4b00b38329bd61cdc5eb754eee03fe66c01f50e137724f99
Evidence Type Source Name Value Confidence Vendor Manifest extension-name javax.activation Medium Vendor pom groupid javax.activation Highest Vendor jar package name activation Low Vendor pom url http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp Highest Vendor central groupid javax.activation Highest Vendor file name activation High Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor pom artifactid activation Low Vendor pom description The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data Medium Vendor Manifest Implementation-Vendor-Id com.sun Medium Vendor Manifest Implementation-Vendor Sun Microsystems, Inc. High Vendor jar package name javax Low Vendor pom name JavaBeans(TM) Activation Framework High Product Manifest extension-name javax.activation Medium Product Manifest specification-title JavaBeans(TM) Activation Framework Specification Medium Product pom artifactid activation Highest Product pom description The JavaBeans(TM) Activation Framework is used by the JavaMail(TM) API to manage MIME data Medium Product jar package name activation Low Product pom url http://java.sun.com/javase/technologies/desktop/javabeans/jaf/index.jsp Medium Product central artifactid activation Highest Product file name activation High Product pom name JavaBeans(TM) Activation Framework High Product pom groupid javax.activation Low Version pom version 1.1.1 Highest Version central version 1.1.1 Highest Version Manifest Implementation-Version 1.1.1 High Version file version 1.1.1 Highest
apache-mime4j-core-0.8.2.jarDescription:
Java stream based MIME message parser License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/apache-mime4j-core-0.8.2.jar
MD5: fc845475cb799719adfb627b564b095a
SHA1: 94919d81969c67c5894646338bf10fbc35f5a946
SHA256: 55d1624378d8cc98466b050566a4746e5563cdd66054d87365ef613cb1f13276
Evidence Type Source Name Value Confidence Vendor pom artifactid apache-mime4j-core Low Vendor Manifest Implementation-Vendor-Id org.apache.james Medium Vendor file name apache-mime4j-core High Vendor pom groupid apache.james Highest Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom name Apache James :: Mime4j :: Core High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-artifactid apache-mime4j-project Low Vendor manifest Bundle-Description Java stream based MIME message parser Medium Vendor pom parent-groupid org.apache.james Medium Vendor Manifest bundle-symbolicname org.apache.james.apache-mime4j-core Medium Product Manifest Bundle-Name Apache James :: Mime4j :: Core Medium Product pom artifactid apache-mime4j-core Highest Product file name apache-mime4j-core High Product Manifest Implementation-Title Apache James :: Mime4j :: Core High Product pom parent-artifactid apache-mime4j-project Medium Product Manifest bundle-docurl https://www.apache.org/ Low Product pom name Apache James :: Mime4j :: Core High Product pom groupid apache.james Low Product pom parent-groupid org.apache.james Low Product manifest Bundle-Description Java stream based MIME message parser Medium Product Manifest bundle-symbolicname org.apache.james.apache-mime4j-core Medium Product Manifest specification-title Apache James :: Mime4j :: Core Medium Version Manifest Implementation-Version 0.8.2 High Version pom version 0.8.2 Highest Version file version 0.8.2 Highest
Related Dependencies apache-mime4j-dom-0.8.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/apache-mime4j-dom-0.8.2.jar MD5: 32304a2429259f72a855e6857be1d1fa SHA1: 32c9a9afe84eca86a3b0b3c66a956ced249ceade SHA256: 3d26e0eca29702d98dce39a7f2af1ea7464865e964f4ae8ac157d50baed0af4f maven: org.apache.james:apache-mime4j-core:0.8.2 Confidence :Highcpe: cpe:/a:apache:james:0.8.2 Confidence :Low suppress asm-6.2.jarDescription:
ASM, a very small and fast Java bytecode manipulation framework License:
BSD: http://asm.ow2.org/license.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/asm-6.2.jar
MD5: 7abdce94068615d690495f45eb6eb980
SHA1: 1b6c4ff09ce03f3052429139c2a68e295cae6604
SHA256: 917bda888bc543187325d5fbc1034207eed152574ef78df1734ca0aee40b7fc8
Evidence Type Source Name Value Confidence Vendor pom description ASM, a very small and fast Java bytecode manipulation framework Medium Vendor pom organization name OW2 High Vendor jar package name objectweb Low Vendor pom parent-groupid org.ow2 Medium Vendor Manifest bundle-symbolicname org.objectweb.asm Medium Vendor Manifest bundle-docurl http://asm.ow2.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor central groupid org.ow2.asm Highest Vendor pom url http://asm.ow2.org/ Highest Vendor pom name asm High Vendor jar package name asm Low Vendor pom organization url http://www.ow2.org/ Medium Vendor pom groupid ow2.asm Highest Vendor file name asm High Vendor pom artifactid asm Low Vendor pom parent-artifactid ow2 Low Product pom description ASM, a very small and fast Java bytecode manipulation framework Medium Product pom url http://asm.ow2.org/ Medium Product Manifest Implementation-Title ASM, a very small and fast Java bytecode manipulation framework High Product Manifest bundle-symbolicname org.objectweb.asm Medium Product Manifest bundle-docurl http://asm.ow2.org Low Product pom parent-groupid org.ow2 Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product central artifactid asm Highest Product pom organization name OW2 Low Product pom name asm High Product jar package name asm Low Product pom artifactid asm Highest Product pom organization url http://www.ow2.org/ Low Product file name asm High Product Manifest Bundle-Name org.objectweb.asm Medium Product pom groupid ow2.asm Low Product pom parent-artifactid ow2 Medium Version pom version 6.2 Highest Version central version 6.2 Highest Version file version 6.2 Highest
bcmail-jdk15on-1.60.jarDescription:
The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/bcmail-jdk15on-1.60.jar
MD5: 43955f9f9b98389d316d4cd0bbff07d0
SHA1: df0250131a6e85e546ec5b1bf964f7f2ff3a42fc
SHA256: e5a4ca074046d0e0e1f3fa550da16c7b9616c12fef5a2416e953804f28444e35
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor pom description The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Vendor Manifest extension-name org.bouncycastle.bcmail Medium Vendor jar package name bouncycastle Low Vendor Manifest bundle-symbolicname bcmail Medium Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest automatic-module-name org.bouncycastle.mail Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest application-name Bouncy Castle S/MIME API Medium Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Vendor pom artifactid bcmail-jdk15on Low Vendor Manifest caller-allowable-codebase * Low Vendor jar package name mail Low Vendor pom groupid bouncycastle Highest Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor pom name Bouncy Castle S/MIME API High Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor file name bcmail-jdk15on High Vendor jar package name smime Low Product Manifest codebase * Low Product pom description The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product Manifest extension-name org.bouncycastle.bcmail Medium Product Manifest bundle-symbolicname bcmail Medium Product Manifest automatic-module-name org.bouncycastle.mail Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom artifactid bcmail-jdk15on Highest Product Manifest Bundle-Name bcmail Medium Product Manifest application-name Bouncy Castle S/MIME API Medium Product Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Product central artifactid bcmail-jdk15on Highest Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product jar package name mail Low Product Manifest permissions all-permissions Low Product pom name Bouncy Castle S/MIME API High Product Manifest application-library-allowable-codebase * Low Product file name bcmail-jdk15on High Product jar package name smime Low Product pom url http://www.bouncycastle.org/java.html Medium Version Manifest Implementation-Version 1.60.0.0 High Version pom version 1.60 Highest Version file version 1.60 Highest Version central version 1.60 Highest
bcpkix-jdk15on-1.60.jarDescription:
The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/bcpkix-jdk15on-1.60.jar
MD5: edc6f012c19cf74d70964187a4ab32ba
SHA1: d0c46320fbc07be3a24eb13a56cee4e3d38e0c75
SHA256: a82ac5bc24bcbf6ba9eb70f334d6782e25245c8da36d9848ad553b5b7b68efd1
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor file name bcpkix-jdk15on High Vendor jar package name bouncycastle Low Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest automatic-module-name org.bouncycastle.pkix Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest application-name Bouncy Castle PKIX API Medium Vendor Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Vendor pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Vendor Manifest bundle-symbolicname bcpkix Medium Vendor Manifest caller-allowable-codebase * Low Vendor pom groupid bouncycastle Highest Vendor pom artifactid bcpkix-jdk15on Low Vendor Manifest extension-name org.bouncycastle.bcpkix Medium Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Vendor pom description The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product Manifest codebase * Low Product file name bcpkix-jdk15on High Product Manifest automatic-module-name org.bouncycastle.pkix Medium Product central artifactid bcpkix-jdk15on Highest Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest application-name Bouncy Castle PKIX API Medium Product Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Product pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Product Manifest bundle-symbolicname bcpkix Medium Product Manifest Bundle-Name bcpkix Medium Product pom artifactid bcpkix-jdk15on Highest Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product Manifest extension-name org.bouncycastle.bcpkix Medium Product Manifest permissions all-permissions Low Product Manifest application-library-allowable-codebase * Low Product pom description The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 1.8. The APIs can be used in conjunction with a JCE/JCA provider ... Low Product pom url http://www.bouncycastle.org/java.html Medium Version Manifest Implementation-Version 1.60.0.0 High Version pom version 1.60 Highest Version file version 1.60 Highest Version central version 1.60 Highest
bcprov-jdk15on-1.60.jarDescription:
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. License:
Bouncy Castle Licence: http://www.bouncycastle.org/licence.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/bcprov-jdk15on-1.60.jar
MD5: 435ff931af9ed4430d2a27456b0386b2
SHA1: bd47ad3bd14b8e82595c7adaa143501e60842a84
SHA256: 7f1a0e6badab38666f8467a9a0ee96656b2f8ec8623867ed34f3cdc173b7ee07
Evidence Type Source Name Value Confidence Vendor Manifest codebase * Low Vendor pom name Bouncy Castle Provider High Vendor jar package name bouncycastle Low Vendor Manifest Implementation-Vendor BouncyCastle.org High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom url http://www.bouncycastle.org/java.html Highest Vendor Manifest extension-name org.bouncycastle.bcprovider Medium Vendor Manifest Implementation-Vendor-Id org.bouncycastle Medium Vendor Manifest application-name Bouncy Castle Provider Medium Vendor Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Vendor pom description The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. Low Vendor Manifest automatic-module-name org.bouncycastle.provider Medium Vendor Manifest caller-allowable-codebase * Low Vendor pom groupid bouncycastle Highest Vendor central groupid org.bouncycastle Highest Vendor Manifest permissions all-permissions Low Vendor Manifest bundle-symbolicname bcprov Medium Vendor pom artifactid bcprov-jdk15on Low Vendor file name bcprov-jdk15on High Vendor Manifest application-library-allowable-codebase * Low Vendor Manifest specification-vendor BouncyCastle.org Low Product Manifest codebase * Low Product pom name Bouncy Castle Provider High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest Bundle-Name bcprov Medium Product Manifest extension-name org.bouncycastle.bcprovider Medium Product central artifactid bcprov-jdk15on Highest Product Manifest application-name Bouncy Castle Provider Medium Product Manifest originally-created-by 25.171-b11 (Oracle Corporation) Low Product pom description The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 to JDK 1.8. Low Product Manifest automatic-module-name org.bouncycastle.provider Medium Product pom artifactid bcprov-jdk15on Highest Product pom groupid bouncycastle Low Product Manifest caller-allowable-codebase * Low Product Manifest permissions all-permissions Low Product Manifest bundle-symbolicname bcprov Medium Product file name bcprov-jdk15on High Product Manifest application-library-allowable-codebase * Low Product pom url http://www.bouncycastle.org/java.html Medium Version pom version 1.60 Highest Version file version 1.60 Highest Version central version 1.60 Highest Version Manifest Implementation-Version 1.60.0 High
cpe: cpe:/a:bouncycastle:bouncy_castle_crypto_package:1.60 Confidence :Low suppress maven: org.bouncycastle:bcprov-jdk15on:1.60 ✓ Confidence :Highestcpe: cpe:/a:bouncycastle:bouncy-castle-crypto-package:1.60 Confidence :Low suppress commons-collections4-4.2.jarDescription:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-collections4-4.2.jar
MD5: b290524be8a0dbb6521df95f4ce80c8d
SHA1: 54ebea0a5b653d3c680131e73fe807bb8f78c4ed
SHA256: 6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom groupid apache.commons Highest Vendor Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Vendor manifest Bundle-Description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-collections/ Low Vendor pom artifactid commons-collections4 Low Vendor pom url http://commons.apache.org/proper/commons-collections/ Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom name Apache Commons Collections High Vendor file name commons-collections4 High Vendor Manifest Implementation-Vendor-Id org.apache.commons Medium Vendor Manifest automatic-module-name org.apache.commons.collections4 Medium Product pom url http://commons.apache.org/proper/commons-collections/ Medium Product pom parent-artifactid commons-parent Medium Product Manifest bundle-symbolicname org.apache.commons.commons-collections4 Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Product manifest Bundle-Description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Product Manifest specification-title Apache Commons Collections Medium Product pom artifactid commons-collections4 Highest Product Manifest Bundle-Name Apache Commons Collections Medium Product pom description The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. Low Product Manifest implementation-url http://commons.apache.org/proper/commons-collections/ Low Product Manifest Implementation-Title Apache Commons Collections High Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name Apache Commons Collections High Product file name commons-collections4 High Product Manifest automatic-module-name org.apache.commons.collections4 Medium Version pom version 4.2 Highest Version file version 4.2 Highest Version Manifest Implementation-Version 4.2 High
maven: org.apache.commons:commons-collections4:4.2 Confidence :Highcpe: cpe:/a:apache:commons_collections:4.2 Confidence :Low suppress commons-compress-1.18.jarDescription:
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-compress-1.18.jar
MD5: bcbecfff4bdb0d3d0cdead3d995da2ef
SHA1: 1191f9f2bc0c47a8cce69193feb1ff0a8bcb37d5
SHA256: 5f2df1e467825e4cac5996d44890c4201c000b43c0b23cffc0782d28a0beb9b0
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest implementation-build UNKNOWN@rb95d5cde4c68640f886e3c6802384fae47408a37; 2018-08-13 07:16:03+0000 Low Vendor pom groupid apache.commons Highest Vendor file name commons-compress High Vendor pom description
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor pom name Apache Commons Compress High Vendor Manifest extension-name org.apache.commons.compress Medium Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom url https://commons.apache.org/proper/commons-compress/ Highest Vendor pom artifactid commons-compress Low Vendor Manifest implementation-url https://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Vendor manifest Bundle-Description Apache Commons Compress software defines an API for working withcompression and archive formats. These include: bzip2, gzip, pack200,lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Product Manifest implementation-build UNKNOWN@rb95d5cde4c68640f886e3c6802384fae47408a37; 2018-08-13 07:16:03+0000 Low Product pom url https://commons.apache.org/proper/commons-compress/ Medium Product pom parent-artifactid commons-parent Medium Product file name commons-compress High Product pom description
Apache Commons Compress software defines an API for working with
compression and archive formats. These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Product pom name Apache Commons Compress High Product Manifest extension-name org.apache.commons.compress Medium Product Manifest automatic-module-name org.apache.commons.compress Medium Product pom groupid apache.commons Low Product Manifest Implementation-Title Apache Commons Compress High Product pom parent-groupid org.apache.commons Low Product Manifest Bundle-Name Apache Commons Compress Medium Product Manifest implementation-url https://commons.apache.org/proper/commons-compress/ Low Product Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Product manifest Bundle-Description Apache Commons Compress software defines an API for working withcompression and archive formats. These include: bzip2, gzip, pack200,lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj. Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Product Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Version file version 1.18 Highest Version Manifest Implementation-Version 1.18 High Version pom version 1.18 Highest
cpe: cpe:/a:apache:commons-compress:1.18 Confidence :Low suppress maven: org.apache.commons:commons-compress:1.18 Confidence :High commons-io-2.6.jarDescription:
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/commons-io-2.6.jar
MD5: 467c2a1f64319c99b5faf03fc78572af
SHA1: 815893df5f31da2ece4040fe0a12fd44b577afaf
SHA256: f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-io Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-io/ Low Vendor pom description
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more. Low Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-io/ Low Vendor file name commons-io High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom groupid commons-io Highest Vendor Manifest Implementation-Vendor-Id commons-io Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest automatic-module-name org.apache.commons.io Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache Commons IO High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-symbolicname org.apache.commons.io Medium Vendor pom url http://commons.apache.org/proper/commons-io/ Highest Vendor manifest Bundle-Description The Apache Commons IO library contains utility classes, stream implementations, file filters,file comparators, endian transformation classes, and much more. Low Product Manifest implementation-url http://commons.apache.org/proper/commons-io/ Low Product pom description
The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more. Low Product pom artifactid commons-io Highest Product Manifest specification-title Apache Commons IO Medium Product Manifest bundle-docurl http://commons.apache.org/proper/commons-io/ Low Product file name commons-io High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-io/ Medium Product Manifest automatic-module-name org.apache.commons.io Medium Product Manifest Bundle-Name Apache Commons IO Medium Product pom parent-groupid org.apache.commons Low Product Manifest Implementation-Title Apache Commons IO High Product pom groupid commons-io Low Product pom name Apache Commons IO High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-symbolicname org.apache.commons.io Medium Product manifest Bundle-Description The Apache Commons IO library contains utility classes, stream implementations, file filters,file comparators, endian transformation classes, and much more. Low Version Manifest Implementation-Version 2.6 High Version file version 2.6 Highest Version pom version 2.6 Highest
maven: commons-io:commons-io:2.6 Confidence :High cxf-core-3.2.6.jarDescription:
Apache CXF Core License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/cxf-core-3.2.6.jar
MD5: 4692a933d6a360f960fb45b27da6ebf4
SHA1: de6b2ef9cb8a45ec5417f6783d6640851a2c9547
SHA256: b1c77b83d8e5c18a3ac904b7b652c00ad9772a5d14ba31867d85741441512403
Evidence Type Source Name Value Confidence Vendor Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Vendor pom artifactid cxf-core Low Vendor Manifest bundle-docurl http://cxf.apache.org Low Vendor pom description Apache CXF Core Medium Vendor file name cxf-core High Vendor pom url http://cxf.apache.org Highest Vendor pom name Apache CXF Core High Vendor pom parent-groupid org.apache.cxf Medium Vendor Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Vendor Manifest automatic-module-name org.apache.cxf.core Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor manifest Bundle-Description Apache CXF Core Medium Vendor pom groupid apache.cxf Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-artifactid cxf-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product Manifest export-service org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/blueprint/core",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/beans",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/parameterized-types",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://cxf.apache.org/configuration/security",org.apache.aries.blueprint.NamespaceHandler;osgi.service.blueprint.namespace="http://schemas.xmlsoap.org/wsdl/", Low Product Manifest bundle-docurl http://cxf.apache.org Low Product pom description Apache CXF Core Medium Product file name cxf-core High Product pom parent-groupid org.apache.cxf Low Product pom name Apache CXF Core High Product pom artifactid cxf-core Highest Product pom parent-artifactid cxf-parent Medium Product Manifest bundle-symbolicname org.apache.cxf.cxf-core Medium Product Manifest automatic-module-name org.apache.cxf.core Medium Product manifest Bundle-Description Apache CXF Core Medium Product pom url http://cxf.apache.org Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product Manifest Bundle-Name Apache CXF Core Medium Product pom groupid apache.cxf Low Version Manifest Implementation-Version 3.2.6 High Version pom version 3.2.6 Highest Version file version 3.2.6 Highest
Related Dependencies cxf-rt-rs-client-3.2.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/cxf-rt-rs-client-3.2.6.jar MD5: d7d3a72c8f8f3cecb68349f21bc67352 SHA1: 936716944ff3c426586a3faf7f64c01682e37169 SHA256: b7b9a3912ab0c1596ed1d385abb3c1c8dc25d183a7b2981e3c81ab666a771c9d cxf-rt-frontend-jaxrs-3.2.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/cxf-rt-frontend-jaxrs-3.2.6.jar MD5: 7e414ca325a55422cd71151f9473a6df SHA1: 109997b450a630f2fdeaf468f79d20dd10c960c3 SHA256: 5273b1143907dfc673045801806dd23937cabd82df04ad6f5b2f8f8deebaa0c1 cxf-rt-transports-http-3.2.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/cxf-rt-transports-http-3.2.6.jar MD5: 1ffed2e8145ab847a4c6cf3cc815be7f SHA1: bcd4ce1e6b8eb5110a12143df64874913b1e6a50 SHA256: 5c6b8b351b50d67eca22f2aff0fbb9e182b53c1176f75c49f0b78510c12fd298 maven: org.apache.cxf:cxf-core:3.2.6 Confidence :Highcpe: cpe:/a:apache:cxf:3.2.6 Confidence :Low suppress dec-0.1.2.jarDescription:
Brotli is a generic-purpose lossless compression algorithm. License:
http://www.opensource.org/licenses/mit-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/dec-0.1.2.jar
MD5: 4b1cd14cf29733941cc536b27e6aedfa
SHA1: 0c26a897ae0d524809eef1c786cc6183b4ddcc3b
SHA256: 615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52
Evidence Type Source Name Value Confidence Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor pom parent-artifactid parent Low Vendor pom parent-groupid org.brotli Medium Vendor manifest Bundle-Description Brotli is a generic-purpose lossless compression algorithm. Medium Vendor pom groupid brotli Highest Vendor pom artifactid dec Low Vendor pom name ${project.groupId}:${project.artifactId} High Vendor Manifest bundle-symbolicname org.brotli.dec Medium Vendor file name dec High Vendor Manifest bundle-docurl http://brotli.org/dec Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom artifactid dec Highest Product manifest Bundle-Description Brotli is a generic-purpose lossless compression algorithm. Medium Product pom name ${project.groupId}:${project.artifactId} High Product Manifest bundle-symbolicname org.brotli.dec Medium Product Manifest Bundle-Name org.brotli:dec Medium Product file name dec High Product pom groupid brotli Low Product pom parent-artifactid parent Medium Product Manifest bundle-docurl http://brotli.org/dec Low Product pom parent-groupid org.brotli Low Version pom version 0.1.2 Highest Version file version 0.1.2 Highest
maven: org.brotli:dec:0.1.2 Confidence :Highcpe: cpe:/a:id:id-software:0.1.2 Confidence :Low suppress fontbox-2.0.12.jarDescription:
The Apache FontBox library is an open source Java tool to obtain low level information
from font files. FontBox is a subproject of Apache PDFBox.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/fontbox-2.0.12.jar
MD5: d58f35a262f19b1ef6d8ae272ea3b01a
SHA1: 566fd1d6b25012bb82078da08b82e6d0ba8c884a
SHA256: 3753f3fc7d10a81efe7139abbf1d456a3dbb89d68782ede95f7da78a57d9c924
Evidence Type Source Name Value Confidence Vendor pom description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Vendor pom artifactid fontbox Low Vendor pom parent-groupid org.apache.pdfbox Medium Vendor pom url http://pdfbox.apache.org/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor pom name Apache FontBox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.pdfbox.fontbox Medium Vendor file name fontbox High Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor manifest Bundle-Description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Vendor pom parent-artifactid pdfbox-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Apache FontBox Medium Product pom artifactid fontbox Highest Product pom description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Product Manifest Implementation-Title Apache FontBox High Product pom name Apache FontBox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest bundle-symbolicname org.apache.pdfbox.fontbox Medium Product pom parent-groupid org.apache.pdfbox Low Product file name fontbox High Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product manifest Bundle-Description The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox. Low Product Manifest specification-title Apache FontBox Medium Product pom url http://pdfbox.apache.org/ Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Version Manifest Implementation-Version 2.0.12 High Version file version 2.0.12 Highest Version pom version 2.0.12 Highest
maven: org.apache.pdfbox:fontbox:2.0.12 Confidence :Highcpe: cpe:/a:apache:pdfbox:2.0.12 Confidence :Low suppress geoapi-3.0.1.jarDescription:
The development community in building GIS solutions is sustaining an enormous level
of effort. The GeoAPI project aims to reduce duplication and increase interoperability
by providing neutral, interface-only APIs derived from OGC/ISO Standards.
License:
https://raw.githubusercontent.com/opengeospatial/geoapi/master/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/geoapi-3.0.1.jar
MD5: fa9a86892774b94b2bde0446ebbebd62
SHA1: a69b261841b0794b82b8d42fcd6e9a370eb62809
SHA256: ca1dfeba112d0dea575c7abba76a8ecd6ea7818e508de964302a9cfc4779b837
Evidence Type Source Name Value Confidence Vendor Manifest implementation-url http://www.geoapi.org Low Vendor pom description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor pom groupid opengis Highest Vendor Manifest bundle-docurl http://www.geoapi.org Low Vendor file name geoapi High Vendor pom artifactid geoapi Low Vendor pom parent-artifactid geoapi-parent Low Vendor Manifest Implementation-Vendor The GeoAPI project High Vendor pom parent-groupid org.opengis Medium Vendor manifest Bundle-Description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Vendor Manifest bundle-symbolicname org.opengis.geoapi Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom name GeoAPI High Product pom parent-artifactid geoapi-parent Medium Product Manifest implementation-url http://www.geoapi.org Low Product pom description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Product Manifest bundle-docurl http://www.geoapi.org Low Product file name geoapi High Product pom parent-groupid org.opengis Low Product pom artifactid geoapi Highest Product Manifest specification-title GeoAPI Medium Product manifest Bundle-Description The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards. Low Product Manifest Bundle-Name GeoAPI Medium Product Manifest bundle-symbolicname org.opengis.geoapi Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name GeoAPI High Product pom groupid opengis Low Version file version 3.0.1 Highest Version pom version 3.0.1 Highest
maven: org.opengis:geoapi:3.0.1 Confidence :High gson-2.8.5.jarDescription:
Gson JSON library File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/gson-2.8.5.jarMD5: 089104cb90d8b4e1aa00b1f5faef0742SHA1: f645ed69d595b24d4cf8b3fbb64cc505bede8829SHA256: 233a0149fc365c9f6edbd683cfe266b19bdc773be98eabdaf6b3c924b48e7d81
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Gson JSON library Medium Vendor pom groupid google.code.gson Highest Vendor pom parent-groupid com.google.code.gson Medium Vendor pom artifactid gson Low Vendor file name gson High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor pom parent-artifactid gson-parent Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom name Gson High Product Manifest Bundle-Name Gson Medium Product pom groupid google.code.gson Low Product pom parent-artifactid gson-parent Medium Product pom name Gson High Product manifest Bundle-Description Gson JSON library Medium Product file name gson High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-symbolicname com.google.gson Medium Product pom artifactid gson Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom parent-groupid com.google.code.gson Low Version pom version 2.8.5 Highest Version file version 2.8.5 Highest
maven: com.google.code.gson:gson:2.8.5 Confidence :High guava-17.0.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/guava-17.0.jar
MD5: 89fef81c2adfa9b50a64ed5cd5d8c155
SHA1: 9c6ef172e8de35fd8d4d8783e4821e57cdef7445
SHA256: 8c36a80ea613d0b6b8040a17cf837c5bbe3677bc1b06a058a6c174fdb787ebbc
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom groupid google.guava Highest Vendor pom artifactid guava Low Vendor pom name Guava: Google Core Libraries for Java High Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor file name guava High Vendor pom parent-artifactid guava-parent Low Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Vendor pom parent-groupid com.google.guava Medium Product Manifest bundle-symbolicname com.google.guava Medium Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product pom parent-artifactid guava-parent Medium Product pom name Guava: Google Core Libraries for Java High Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product file name guava High Product pom parent-groupid com.google.guava Low Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec. Low Product pom groupid google.guava Low Version pom version 17.0 Highest Version file version 17.0 Highest
maven: com.google.guava:guava:17.0 Confidence :High httpmime-4.5.6.jarDescription:
Apache HttpComponents HttpClient - MIME coded entities
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/httpmime-4.5.6.jarMD5: 420691e1f1627f04fbc4b52eccddddd5SHA1: 164343da11db817e81e24e0d9869527e069850c9SHA256: 0b2b1102c18d3c7e05a77214b9b7501a6f6056174ae5604e0e256776eda7553e
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid httpcomponents-client Low Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-client Low Vendor pom parent-groupid org.apache.httpcomponents Medium Vendor Manifest automatic-module-name org.apache.httpcomponents.httpmime Medium Vendor file name httpmime High Vendor pom url http://hc.apache.org/httpcomponents-client Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.httpcomponents Medium Vendor pom groupid apache.httpcomponents Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache HttpClient Mime High Vendor pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Vendor pom artifactid httpmime Low Product Manifest implementation-url http://hc.apache.org/httpcomponents-client Low Product Manifest automatic-module-name org.apache.httpcomponents.httpmime Medium Product file name httpmime High Product pom parent-artifactid httpcomponents-client Medium Product pom groupid apache.httpcomponents Low Product Manifest specification-title Apache HttpClient Mime Medium Product pom parent-groupid org.apache.httpcomponents Low Product pom name Apache HttpClient Mime High Product pom artifactid httpmime Highest Product Manifest Implementation-Title Apache HttpClient Mime High Product pom description
Apache HttpComponents HttpClient - MIME coded entities
Medium Product pom url http://hc.apache.org/httpcomponents-client Medium Version pom version 4.5.6 Highest Version Manifest Implementation-Version 4.5.6 High Version file version 4.5.6 Highest
maven: org.apache.httpcomponents:httpmime:4.5.6 Confidence :High isoparser-1.1.22.jarDescription:
A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
License:
Apache Software License - Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/isoparser-1.1.22.jar
MD5: b6cb35cf16232e5850de5900f753ed91
SHA1: 70b5c26b52c120d2e94643717a764c4a67640fd6
SHA256: f37f0a997dcc494409b60aeb48cef319348503f84efcd1edcb0fcfb81148fc2d
Evidence Type Source Name Value Confidence Vendor pom description A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
Medium Vendor pom name ISO Parser High Vendor pom artifactid isoparser Low Vendor file name isoparser High Vendor pom groupid googlecode.mp4parser Highest Vendor jar package name mp4parser Low Vendor pom url http://code.google.com/p/mp4parser/ Highest Product pom description A generic parser and writer for all ISO 14496 based files (MP4, Quicktime, DCF, PDCF, ...)
Medium Product pom groupid googlecode.mp4parser Low Product pom artifactid isoparser Highest Product pom name ISO Parser High Product file name isoparser High Product pom url http://code.google.com/p/mp4parser/ Medium Version file version 1.1.22 Highest Version pom version 1.1.22 Highest
maven: com.googlecode.mp4parser:isoparser:1.1.22 Confidence :High istack-commons-runtime-3.0.5.jarDescription:
istack common utility code License:
https://glassfish.java.net/public/CDDL+GPL_1_1.html, https://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/istack-commons-runtime-3.0.5.jar
MD5: e78d6807e3f0fbc3514293a74418501b
SHA1: 8052dc9920dfab5d50b8ca95c95a6ce4296a8f8b
SHA256: f19ac45cfbbe12fa952be1e691eae80a74c9c7f4ac46ab3f760ca9cfa3bc694b
Evidence Type Source Name Value Confidence Vendor pom groupid sun.istack Highest Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor manifest Bundle-Description istack common utility code Medium Vendor Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Vendor pom artifactid istack-commons-runtime Low Vendor file name istack-commons-runtime High Vendor Manifest Implementation-Vendor-Id com.sun.istack Medium Vendor pom name istack common utility code runtime High Vendor Manifest implementation-build-id tags/istack-commons-3.0.5-321, 2017-02-11T01:27:24+0100 Low Vendor pom parent-groupid com.sun.istack Medium Vendor pom parent-artifactid istack-commons Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product pom parent-artifactid istack-commons Medium Product manifest Bundle-Description istack common utility code Medium Product Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Product file name istack-commons-runtime High Product pom groupid sun.istack Low Product Manifest Implementation-Title istack common utility code runtime High Product pom parent-groupid com.sun.istack Low Product pom name istack common utility code runtime High Product Manifest implementation-build-id tags/istack-commons-3.0.5-321, 2017-02-11T01:27:24+0100 Low Product pom artifactid istack-commons-runtime Highest Product Manifest Bundle-Name istack common utility code runtime Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-docurl http://www.oracle.com/ Low Version pom version 3.0.5 Highest Version Manifest Implementation-Version 3.0.5 High Version file version 3.0.5 Highest
maven: com.sun.istack:istack-commons-runtime:3.0.5 Confidence :High jackcess-2.1.12.jarDescription:
A pure Java library for reading from and writing to MS Access databases. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jackcess-2.1.12.jar
MD5: 7d051d8dd93f2fe7e5e86389ea380619
SHA1: 8a422b016925475b2234b576a0f7ee3f55f1f9e2
SHA256: 347e666d8f6abf382a0e1a7597421911423f20cf71237225f9eb53626f377f22
Evidence Type Source Name Value Confidence Vendor file name jackcess High Vendor Manifest bundle-symbolicname com.healthmarketscience.jackcess Medium Vendor pom name Jackcess High Vendor pom parent-artifactid openhms-parent Low Vendor pom parent-groupid com.healthmarketscience Medium Vendor Manifest bundle-docurl http://www.healthmarketscience.com Low Vendor pom groupid healthmarketscience.jackcess Highest Vendor pom description A pure Java library for reading from and writing to MS Access databases. Medium Vendor manifest Bundle-Description A pure Java library for reading from and writing to MS Access databases. Medium Vendor pom artifactid jackcess Low Vendor pom url http://jackcess.sf.net Highest Product pom groupid healthmarketscience.jackcess Low Product pom description A pure Java library for reading from and writing to MS Access databases. Medium Product file name jackcess High Product Manifest bundle-symbolicname com.healthmarketscience.jackcess Medium Product pom parent-groupid com.healthmarketscience Low Product pom parent-artifactid openhms-parent Medium Product pom name Jackcess High Product Manifest bundle-docurl http://www.healthmarketscience.com Low Product manifest Bundle-Description A pure Java library for reading from and writing to MS Access databases. Medium Product pom url http://jackcess.sf.net Medium Product Manifest Bundle-Name Jackcess Medium Product pom artifactid jackcess Highest Version pom version 2.1.12 Highest Version file version 2.1.12 Highest
maven: com.healthmarketscience.jackcess:jackcess:2.1.12 Confidence :High jackcess-encrypt-2.1.4.jarDescription:
An add-on to the Jackcess library for handling encryption in MS Access files. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jackcess-encrypt-2.1.4.jar
MD5: 8fe86865a5c6709013cdd43142558786
SHA1: dfe7134b759597276ff87b7acf662bef1c1c4fd8
SHA256: a469b8dba21381a1bdf5bed5bb5de0b2050f194a2794ecd04eedc9f867b9b6e6
Evidence Type Source Name Value Confidence Vendor pom description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Vendor manifest Bundle-Description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Vendor Manifest bundle-symbolicname com.healthmarketscience.jackcess.encrypt Medium Vendor pom artifactid jackcess-encrypt Low Vendor file name jackcess-encrypt High Vendor pom parent-artifactid openhms-parent Low Vendor pom name Jackcess Encrypt High Vendor pom parent-groupid com.healthmarketscience Medium Vendor Manifest bundle-docurl http://www.healthmarketscience.com Low Vendor pom groupid healthmarketscience.jackcess Highest Vendor pom url http://jackcessencrypt.sf.net Highest Product manifest Bundle-Description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Product Manifest bundle-symbolicname com.healthmarketscience.jackcess.encrypt Medium Product pom artifactid jackcess-encrypt Highest Product file name jackcess-encrypt High Product pom groupid healthmarketscience.jackcess Low Product pom parent-groupid com.healthmarketscience Low Product pom description An add-on to the Jackcess library for handling encryption in MS Access files. Medium Product pom parent-artifactid openhms-parent Medium Product pom name Jackcess Encrypt High Product Manifest bundle-docurl http://www.healthmarketscience.com Low Product pom url http://jackcessencrypt.sf.net Medium Product Manifest Bundle-Name Jackcess Encrypt Medium Version pom version 2.1.4 Highest Version file version 2.1.4 Highest
maven: com.healthmarketscience.jackcess:jackcess-encrypt:2.1.4 Confidence :High jackson-core-2.9.6.jarDescription:
Core Jackson processing abstractions (aka Streaming API), implementation for JSON License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jackson-core-2.9.6.jar
MD5: f3cf83b839fac92307cad542c2ded5c4
SHA1: 4e393793c37c77e042ccc7be5a914ae39251b365
SHA256: fab8746aedd6427788ee390ea04d438ec141bff7eb3476f8bdd5d9110fb2718a
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Vendor manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom url FasterXML/jackson-core Highest Vendor file name jackson-core High Vendor pom artifactid jackson-core Low Vendor Manifest implementation-build-date 2018-06-12 00:53:14+0000 Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest automatic-module-name com.fasterxml.jackson.core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product pom parent-groupid com.fasterxml.jackson Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-core Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-core Medium Product manifest Bundle-Description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product file name jackson-core High Product Manifest Implementation-Title Jackson-core High Product pom url FasterXML/jackson-core High Product Manifest implementation-build-date 2018-06-12 00:53:14+0000 Low Product Manifest specification-title Jackson-core Medium Product pom description Core Jackson processing abstractions (aka Streaming API), implementation for JSON Medium Product pom name Jackson-core High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Bundle-Name Jackson-core Medium Product pom artifactid jackson-core Highest Product Manifest automatic-module-name com.fasterxml.jackson.core Medium Product pom parent-artifactid jackson-base Medium Version file version 2.9.6 Highest Version pom version 2.9.6 Highest Version Manifest Implementation-Version 2.9.6 High
Related Dependencies jackson-annotations-2.9.6.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jackson-annotations-2.9.6.jar MD5: 6486a3fb86a14e04ac131c44f078b6dc SHA1: 6a0f0f154edaba00067772ce02e24f8c0973d84c SHA256: 4d1ce5575ad53bee8caae4c15016878e2c3ea47276e675a35ea6bdde3bb0e653 cpe: cpe:/a:fasterxml:jackson:2.9.6 Confidence :Low suppress maven: com.fasterxml.jackson.core:jackson-core:2.9.6 Confidence :High jackson-databind-2.9.6.jarDescription:
General data-binding functionality for Jackson: works on core streaming API License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jackson-databind-2.9.6.jar
MD5: c6634d654c2df15a987bc37ec8d2b6b2
SHA1: cfa4f316351a91bfd95cb0644c6a2c95f52db1fc
SHA256: 657e3e979446d61f88432b9c50f0ccd9c1fe4f1c822d533f5572e4c0d172a125
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name com.fasterxml.jackson.databind Medium Vendor pom description General data-binding functionality for Jackson: works on core streaming API Medium Vendor Manifest implementation-build-date 2018-06-12 01:14:14+0000 Low Vendor Manifest specification-vendor FasterXML Low Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.core Medium Vendor pom name jackson-databind High Vendor Manifest bundle-docurl http://github.com/FasterXML/jackson Low Vendor pom url http://github.com/FasterXML/jackson Highest Vendor manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor file name jackson-databind High Vendor pom artifactid jackson-databind Low Vendor pom parent-artifactid jackson-base Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor pom groupid fasterxml.jackson.core Highest Product pom groupid fasterxml.jackson.core Low Product Manifest automatic-module-name com.fasterxml.jackson.databind Medium Product pom description General data-binding functionality for Jackson: works on core streaming API Medium Product pom parent-groupid com.fasterxml.jackson Low Product pom url http://github.com/FasterXML/jackson Medium Product Manifest implementation-build-date 2018-06-12 01:14:14+0000 Low Product Manifest Bundle-Name jackson-databind Medium Product pom name jackson-databind High Product Manifest bundle-docurl http://github.com/FasterXML/jackson Low Product pom artifactid jackson-databind Highest Product Manifest specification-title jackson-databind Medium Product Manifest Implementation-Title jackson-databind High Product manifest Bundle-Description General data-binding functionality for Jackson: works on core streaming API Medium Product file name jackson-databind High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-symbolicname com.fasterxml.jackson.core.jackson-databind Medium Product pom parent-artifactid jackson-base Medium Version file version 2.9.6 Highest Version pom version 2.9.6 Highest Version Manifest Implementation-Version 2.9.6 High
maven: com.fasterxml.jackson.core:jackson-databind:2.9.6 Confidence :Highcpe: cpe:/a:fasterxml:jackson:2.9.6 Confidence :Low suppress cpe: cpe:/a:fasterxml:jackson-databind:2.9.6 Confidence :Low suppress jai-imageio-core-1.4.0.jarDescription:
Java Advanced Imaging Image I/O Tools API core, but without the classes
involved with javax.media.jai dependencies, JPEG2000 or
codecLibJIIO, meaning that this library can be distributed under the
modified BSD license and should be GPL compatible.
License:
BSD 3-clause License w/nuclear disclaimer: LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jai-imageio-core-1.4.0.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256: 8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Evidence Type Source Name Value Confidence Vendor file name jai-imageio-core High Vendor pom organization name jai-imageio GitHub group High Vendor pom artifactid jai-imageio-core Low Vendor pom name Java Advanced Imaging Image I/O Tools API core (standalone) High Vendor Manifest url https://github.com/jai-imageio/jai-imageio-core Low Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor pom groupid github.jai-imageio Highest Vendor manifest Bundle-Description Java Advanced Imaging Image I/O Tools API core, but without the classes involved with javax.media.jai dependencies, JPEG2000 or codecLibJIIO, meaning that this library can be distributed under the modified BSD license and should be GPL compatible. Low Vendor Manifest extension-name com.github.jai-imageio-jai-imageio-core Medium Vendor pom description Java Advanced Imaging Image I/O Tools API core, but without the classes involved with javax.media.jai dependencies, JPEG2000 or codecLibJIIO, meaning that this library can be distributed under the modified BSD license and should be GPL compatible. Low Vendor pom url jai-imageio/jai-imageio-core Highest Vendor pom organization url jai-imageio/ Medium Vendor Manifest bundle-symbolicname jai-imageio-core Medium Vendor Manifest bundle-docurl https://github.com/jai-imageio/ Low Vendor Manifest Implementation-Vendor https://github.com/jai-imageio/ jai-imageio GitHub group High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest Implementation-Title Java Advanced Imaging Image I/O Tools API core (standalone) High Product file name jai-imageio-core High Product pom url jai-imageio/jai-imageio-core High Product pom groupid github.jai-imageio Low Product pom artifactid jai-imageio-core Highest Product pom name Java Advanced Imaging Image I/O Tools API core (standalone) High Product Manifest url https://github.com/jai-imageio/jai-imageio-core Low Product manifest Bundle-Description Java Advanced Imaging Image I/O Tools API core, but without the classes involved with javax.media.jai dependencies, JPEG2000 or codecLibJIIO, meaning that this library can be distributed under the modified BSD license and should be GPL compatible. Low Product Manifest Bundle-Name Java Advanced Imaging Image I/O Tools API core (standalone) Medium Product Manifest extension-name com.github.jai-imageio-jai-imageio-core Medium Product pom description Java Advanced Imaging Image I/O Tools API core, but without the classes involved with javax.media.jai dependencies, JPEG2000 or codecLibJIIO, meaning that this library can be distributed under the modified BSD license and should be GPL compatible. Low Product Manifest bundle-symbolicname jai-imageio-core Medium Product Manifest bundle-docurl https://github.com/jai-imageio/ Low Product Manifest specification-title Java Advanced Imaging Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom organization name jai-imageio GitHub group Low Product pom url jai-imageio/ High Version pom version 1.4.0 Highest Version Manifest Implementation-Version 1.4.0 High Version file version 1.4.0 Highest
maven: com.github.jai-imageio:jai-imageio-core:1.4.0 Confidence :High javax.annotation-api-1.3.jarDescription:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/javax.annotation-api-1.3.jar
MD5: 707336a61fa1a548342bc793362bd9da
SHA1: 67747496d8b5c1f300ed3cde4ba69d6f453ba984
SHA256: f43f8ca10941606fb675785286981c166be1393f584020ffd965c6863f62232c
Evidence Type Source Name Value Confidence Vendor Manifest extension-name javax.annotation Medium Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor pom description Common Annotations for the JavaTM Platform API Medium Vendor pom groupid javax.annotation Highest Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Vendor file name javax.annotation-api High Vendor pom organization name GlassFish Community High Vendor pom parent-groupid net.java Medium Vendor pom organization url https://glassfish.java.net Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest bundle-docurl https://glassfish.java.net Low Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor pom artifactid javax.annotation-api Low Vendor manifest Bundle-Description Java(TM) Common Annotations 1.3 API Design Specification Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom name ${extension.name} API High Product Manifest extension-name javax.annotation Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product pom description Common Annotations for the JavaTM Platform API Medium Product pom organization url https://glassfish.java.net Low Product pom artifactid javax.annotation-api Highest Product pom groupid javax.annotation Low Product pom organization name GlassFish Community Low Product file name javax.annotation-api High Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-docurl https://glassfish.java.net Low Product pom parent-groupid net.java Low Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Product manifest Bundle-Description Java(TM) Common Annotations 1.3 API Design Specification Medium Product pom parent-artifactid jvnet-parent Medium Product pom name ${extension.name} API High Version Manifest Implementation-Version 1.3 High Version pom version 1.3 Highest Version file version 1.3 Highest
maven: javax.annotation:javax.annotation-api:1.3 Confidence :High javax.ws.rs-api-2.1.jarDescription:
Java API for RESTful Web Services (JAX-RS) License:
CDDL 1.1: https://oss.oracle.com/licenses/CDDL+GPL-1.1
GPL2 w/ CPE: https://oss.oracle.com/licenses/CDDL+GPL-1.1 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/javax.ws.rs-api-2.1.jar
MD5: 2f754caa430ca5a51a662d6aa821a152
SHA1: 426a0862406536e690c7caa8bb6ed32191986fac
SHA256: 1a4295889416c6972addcd425dfeeee6e6ede110e8b2dc8b49044e9b400ad5db
Evidence Type Source Name Value Confidence Vendor pom name javax.ws.rs-api High Vendor manifest Bundle-Description Java API for RESTful Web Services (JAX-RS) Medium Vendor Manifest bundle-symbolicname javax.ws.rs-api Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor Manifest extension-name javax.ws.rs Medium Vendor pom url http://jax-rs-spec.java.net Highest Vendor pom parent-groupid net.java Medium Vendor pom groupid javax.ws.rs Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor pom artifactid javax.ws.rs-api Low Vendor Manifest automatic-module-name java.ws.rs Medium Vendor file name javax.ws.rs-api High Vendor pom organization url http://www.oracle.com/ Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom organization name Oracle Corporation High Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product pom organization url http://www.oracle.com/ Low Product pom name javax.ws.rs-api High Product manifest Bundle-Description Java API for RESTful Web Services (JAX-RS) Medium Product Manifest bundle-symbolicname javax.ws.rs-api Medium Product Manifest extension-name javax.ws.rs Medium Product Manifest Bundle-Name javax.ws.rs-api Medium Product pom artifactid javax.ws.rs-api Highest Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom organization name Oracle Corporation Low Product Manifest automatic-module-name java.ws.rs Medium Product pom parent-groupid net.java Low Product file name javax.ws.rs-api High Product pom url http://jax-rs-spec.java.net Medium Product pom parent-artifactid jvnet-parent Medium Product pom groupid javax.ws.rs Low Product Manifest bundle-docurl http://www.oracle.com/ Low Version file version 2.1 Highest Version Manifest Implementation-Version 2.1 High Version pom version 2.1 Highest
maven: javax.ws.rs:javax.ws.rs-api:2.1 Confidence :Highcpe: cpe:/a:ws_project:ws:2.1 Confidence :Low suppress jaxb-api-2.3.0.jarDescription:
JAXB (JSR 222) API License:
https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1 File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jaxb-api-2.3.0.jar
MD5: ffa4ea6fada02493779bcd7f04f11ea3
SHA1: 99f802e0cb3e953ba3d6e698795c4aeb98d37c48
SHA256: 883007989d373d19f352ba9792b25dec21dc7d0e205a710a93a3815101bb3d03
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor pom artifactid jaxb-api Low Vendor Manifest specification-vendor Oracle Corporation Low Vendor Manifest implementation-build-id UNKNOWN-3fe234d268b9b70c95ef0ea736ff66135487a2d8, 2017-07-31T13:27:12+0200 Low Vendor pom parent-artifactid jaxb-api-parent Low Vendor Manifest bundle-symbolicname jaxb-api Medium Vendor file name jaxb-api High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest extension-name javax.xml.bind Medium Vendor manifest Bundle-Description JAXB (JSR 222) API Medium Vendor pom groupid javax.xml.bind Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest specification-title jaxb-api Medium Product pom artifactid jaxb-api Highest Product Manifest implementation-build-id UNKNOWN-3fe234d268b9b70c95ef0ea736ff66135487a2d8, 2017-07-31T13:27:12+0200 Low Product pom groupid javax.xml.bind Low Product Manifest Bundle-Name jaxb-api Medium Product Manifest bundle-symbolicname jaxb-api Medium Product file name jaxb-api High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest extension-name javax.xml.bind Medium Product manifest Bundle-Description JAXB (JSR 222) API Medium Product pom parent-artifactid jaxb-api-parent Medium Product Manifest bundle-docurl http://www.oracle.com/ Low Version pom version 2.3.0 Highest Version Manifest Implementation-Version 2.3.0 High Version file version 2.3.0 Highest
maven: javax.xml.bind:jaxb-api:2.3.0 Confidence :High jaxb-core-2.3.0.1.jarDescription:
JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jaxb-core-2.3.0.1.jarMD5: cf8cf4e22ac1bd9cae7fcf712a485c24SHA1: 33277bae433ecd0fdebd53812eb084da443575b6SHA256: 2c18be9ca61964ad5a6f37f6c92b50a0c20539a64c04af885ce5d6b4524dbbcd
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor Oracle High Vendor pom artifactid jaxb-core Low Vendor pom description JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. Medium Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor file name jaxb-core High Vendor pom parent-artifactid jaxb-parent Low Vendor pom name JAXB Core High Vendor Manifest (hint) Implementation-Vendor sun High Vendor pom groupid glassfish.jaxb Highest Vendor Manifest Implementation-Vendor-Id com.oracle Medium Product Manifest Implementation-Title JAXB Implementation High Product pom description JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. Medium Product pom artifactid jaxb-core Highest Product file name jaxb-core High Product pom groupid glassfish.jaxb Low Product pom parent-artifactid jaxb-parent Medium Product pom name JAXB Core High Product pom parent-groupid com.sun.xml.bind.mvn Low Product Manifest specification-title Java Architecture for XML Binding Medium Version file version 2.3.0.1 Highest Version Manifest Implementation-Version 2.3.0.1 High Version pom version 2.3.0.1 Highest
maven: org.glassfish.jaxb:jaxb-core:2.3.0.1 Confidence :High jaxb-runtime-2.3.0.1.jarDescription:
JAXB (JSR 222) Reference Implementation File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jaxb-runtime-2.3.0.1.jarMD5: 348973508037a72bfbd3a35f25d658e9SHA1: 8687b05c5930cf122cb22f4aac48814fbb44075eSHA256: 94246b208a20309c2d4e99c22440ec9eae8b7d3518a558a6b4038f74fb36f720
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor Oracle High Vendor pom description JAXB (JSR 222) Reference Implementation Medium Vendor pom name JAXB Runtime High Vendor file name jaxb-runtime High Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor Manifest (hint) Implementation-Vendor sun High Vendor pom artifactid jaxb-runtime Low Vendor pom parent-artifactid jaxb-runtime-parent Low Vendor pom groupid glassfish.jaxb Highest Vendor Manifest Implementation-Vendor-Id com.oracle Medium Product Manifest Implementation-Title JAXB Implementation High Product pom description JAXB (JSR 222) Reference Implementation Medium Product pom name JAXB Runtime High Product file name jaxb-runtime High Product pom artifactid jaxb-runtime Highest Product pom groupid glassfish.jaxb Low Product pom parent-groupid com.sun.xml.bind.mvn Low Product Manifest specification-title Java Architecture for XML Binding Medium Product pom parent-artifactid jaxb-runtime-parent Medium Version file version 2.3.0.1 Highest Version Manifest Implementation-Version 2.3.0.1 High Version pom version 2.3.0.1 Highest
maven: org.glassfish.jaxb:jaxb-runtime:2.3.0.1 Confidence :High jbig2-imageio-3.0.2.jarDescription:
Java Image I/O plugin for reading JBIG2-compressed image data.
Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jbig2-imageio-3.0.2.jarMD5: 75dacf14cc468045f89d7f5fff1aa494SHA1: 46a53edceceabcdf9b81cd6d14f052bdfa171f4bSHA256: 3dc510cd41511f2e2382eb7ac3550b2f94e21847f0b7221be8ddd0f2252a8fe4
Evidence Type Source Name Value Confidence Vendor file name jbig2-imageio High Vendor Manifest implementation-url https://www.apache.org/jbig2-imageio/ Low Vendor pom description Java Image I/O plugin for reading JBIG2-compressed image data. Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio). Low Vendor pom artifactid jbig2-imageio Low Vendor pom parent-groupid org.apache Medium Vendor pom parent-artifactid apache Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor pom organization url http://pdfbox.apache.org Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name PDFBox JBIG2 ImageIO plugin High Vendor pom organization name The Apache Software Foundation High Product file name jbig2-imageio High Product pom parent-artifactid apache Medium Product Manifest implementation-url https://www.apache.org/jbig2-imageio/ Low Product pom description Java Image I/O plugin for reading JBIG2-compressed image data. Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio). Low Product pom organization url http://pdfbox.apache.org Low Product pom organization name The Apache Software Foundation Low Product pom artifactid jbig2-imageio Highest Product pom parent-groupid org.apache Low Product Manifest Implementation-Title PDFBox JBIG2 ImageIO plugin High Product Manifest specification-title PDFBox JBIG2 ImageIO plugin Medium Product pom name PDFBox JBIG2 ImageIO plugin High Product pom groupid apache.pdfbox Low Version Manifest Implementation-Version 3.0.2 High Version file version 3.0.2 Highest Version pom version 3.0.2 Highest
cpe: cpe:/a:apache:pdfbox:3.0.2 Confidence :Low suppress maven: org.apache.pdfbox:jbig2-imageio:3.0.2 Confidence :High jcommander-1.35.jarDescription:
A Java framework to parse command line options with annotations. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jcommander-1.35.jar
MD5: 90216444fab67357c5bdf3293b47107e
SHA1: 47592e181b0bdbbeb63029e08c5e74f6803c4edd
SHA256: 019c12fec1ce5c02cbabb150f6ac8a86d92a0ecc9c89a549e5537283e863000c
Evidence Type Source Name Value Confidence Vendor file name jcommander High Vendor pom artifactid jcommander Low Vendor pom name JCommander High Vendor pom groupid beust Highest Vendor pom description A Java framework to parse command line options with annotations. Medium Vendor pom url http://beust.com/jcommander Highest Vendor manifest Bundle-Description A Java framework to parse command line options with annotations. Medium Vendor Manifest bundle-symbolicname com.beust.jcommander Medium Product file name jcommander High Product Manifest Bundle-Name JCommander Medium Product pom name JCommander High Product pom groupid beust Low Product pom artifactid jcommander Highest Product pom url http://beust.com/jcommander Medium Product pom description A Java framework to parse command line options with annotations. Medium Product manifest Bundle-Description A Java framework to parse command line options with annotations. Medium Product Manifest bundle-symbolicname com.beust.jcommander Medium Version file version 1.35 Highest Version pom version 1.35 Highest
maven: com.beust:jcommander:1.35 Confidence :High jdom2-2.0.6.jarDescription:
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
License:
Similar to Apache License but with the acknowledgment clause removed: https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jdom2-2.0.6.jar
MD5: 86a30c9b1ddc08ca155747890db423b7
SHA1: 6f14738ec2e9dd0011e343717fa624a10f8aab64
SHA256: 1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5
Evidence Type Source Name Value Confidence Vendor pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Vendor manifest: org/jdom2/xpath/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/transform/ Implementation-Vendor jdom.org Medium Vendor pom groupid jdom Highest Vendor manifest: org/jdom2/input/ Implementation-Vendor jdom.org Medium Vendor pom organization url http://www.jdom.org Medium Vendor manifest: org/jdom2/ Implementation-Vendor jdom.org Medium Vendor file name jdom2 High Vendor central groupid org.jdom Highest Vendor manifest: org/jdom2/filter/ Implementation-Vendor jdom.org Medium Vendor pom organization name JDOM High Vendor pom url http://www.jdom.org Highest Vendor pom name JDOM High Vendor jar package name jdom2 Low Vendor pom artifactid jdom2 Low Vendor manifest: org/jdom2/adapters/ Implementation-Vendor jdom.org Medium Vendor manifest: org/jdom2/output/ Implementation-Vendor jdom.org Medium Product manifest: org/jdom2/ Implementation-Title org.jdom2 Medium Product manifest: org/jdom2/filter/ Implementation-Title org.jdom2.filter Medium Product pom description
A complete, Java-based solution for accessing, manipulating,
and outputting XML data
Medium Product pom organization url http://www.jdom.org Low Product manifest: org/jdom2/filter/ Specification-Title JDOM Filter Classes Medium Product pom artifactid jdom2 Highest Product pom organization name JDOM Low Product pom url http://www.jdom.org Medium Product central artifactid jdom2 Highest Product manifest: org/jdom2/ Specification-Title JDOM Classes Medium Product manifest: org/jdom2/adapters/ Specification-Title JDOM Adapter Classes Medium Product manifest: org/jdom2/input/ Specification-Title JDOM Input Classes Medium Product file name jdom2 High Product manifest: org/jdom2/input/ Implementation-Title org.jdom2.input Medium Product manifest: org/jdom2/xpath/ Implementation-Title org.jdom2.xpath Medium Product manifest: org/jdom2/xpath/ Specification-Title JDOM XPath Classes Medium Product manifest: org/jdom2/transform/ Specification-Title JDOM Transformation Classes Medium Product manifest: org/jdom2/output/ Specification-Title JDOM Output Classes Medium Product pom name JDOM High Product manifest: org/jdom2/adapters/ Implementation-Title org.jdom2.adapters Medium Product manifest: org/jdom2/output/ Implementation-Title org.jdom2.output Medium Product manifest: org/jdom2/transform/ Implementation-Title org.jdom2.transform Medium Product pom groupid jdom Low Version pom version 2.0.6 Highest Version central version 2.0.6 Highest Version file version 2.0.6 Highest
jempbox-1.8.16.jarDescription:
The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM)
specification. JempBox is a subproject of Apache PDFBox.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jempbox-1.8.16.jar
MD5: 1cb997cdd8302c7e19131c81ba0b7ee2
SHA1: 1f41de81768ef84ca2d8cda4cb79e9272c8ee966
SHA256: ebef7cca5a5a77768e686972b4a89f0ffce7b46907fd96ac3d4f6ce2fa038055
Evidence Type Source Name Value Confidence Vendor pom description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Vendor pom parent-groupid org.apache.pdfbox Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Vendor pom name Apache JempBox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest bundle-symbolicname org.apache.pdfbox.jempbox Medium Vendor pom artifactid jempbox Low Vendor file name jempbox High Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor manifest Bundle-Description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Vendor pom parent-artifactid pdfbox-parent Low Product pom description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Product pom artifactid jempbox Highest Product Manifest Bundle-Name Apache JempBox Medium Product Manifest Implementation-Title Apache JempBox High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))" Low Product pom name Apache JempBox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest specification-title Apache JempBox Medium Product Manifest bundle-symbolicname org.apache.pdfbox.jempbox Medium Product pom parent-groupid org.apache.pdfbox Low Product file name jempbox High Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product manifest Bundle-Description The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM) specification. JempBox is a subproject of Apache PDFBox. Low Version pom version 1.8.16 Highest Version file version 1.8.16 Highest Version Manifest Implementation-Version 1.8.16 High
maven: org.apache.pdfbox:jempbox:1.8.16 Confidence :Highcpe: cpe:/a:apache:pdfbox:1.8.16 Confidence :Low suppress jhighlight-1.0.3.jarDescription:
JHighlight is an embeddable pure Java syntax highlighting
library that supports Java, HTML, XHTML, XML and LZX
languages and outputs to XHTML.
It also supports RIFE templates tags and highlights them
clearly so that you can easily identify the difference
between your RIFE markup and the actual marked up source.
License:
CDDL, v1.0: http://www.opensource.org/licenses/cddl1.php
LGPL, v2.1 or later: http://www.opensource.org/licenses/lgpl-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jhighlight-1.0.3.jar
MD5: 318e72a07b2bbe089f0c41df45d2f484
SHA1: 88831dce3d56aa53a1bfcba78518e8939b8d4779
SHA256: 34405394e068b5d8c40ed45928ce077f8b5140bf33851a55b9cb53116ded43e5
Evidence Type Source Name Value Confidence Vendor pom description JHighlight is an embeddable pure Java syntax highlighting library that supports Java, HTML, XHTML, XML and LZX languages and outputs to XHTML. It also supports RIFE templates tags and highlights them clearly so that you can easily identify the difference between your RIFE markup and the actual marked up source. Low Vendor jar package name jhighlight Low Vendor pom name JHighlight High Vendor jar package name fastutil Low Vendor pom groupid codelibs Highest Vendor jar package name uwyn Low Vendor file name jhighlight High Vendor pom url codelibs/jhighlight Highest Vendor pom artifactid jhighlight Low Product pom description JHighlight is an embeddable pure Java syntax highlighting library that supports Java, HTML, XHTML, XML and LZX languages and outputs to XHTML. It also supports RIFE templates tags and highlights them clearly so that you can easily identify the difference between your RIFE markup and the actual marked up source. Low Product jar package name jhighlight Low Product pom name JHighlight High Product jar package name fastutil Low Product pom groupid codelibs Low Product pom artifactid jhighlight Highest Product pom url codelibs/jhighlight High Product file name jhighlight High Version file version 1.0.3 Highest Version pom version 1.0.3 Highest
maven: org.codelibs:jhighlight:1.0.3 Confidence :High jmatio-1.5.jarDescription:
Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. License:
BSD: http://www.linfo.org/bsdlicense.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jmatio-1.5.jar
MD5: 6eccf45b3a4bb3dd0518afcf37b8ed35
SHA1: 517d932cc87a3b564f3f7a07ac347b725b619ab4
SHA256: 70db8cf9a1818072f290fd464f14a8369c9c58993e6640128a6e8a6379d67ac7
Evidence Type Source Name Value Confidence Vendor file name jmatio High Vendor pom groupid tallison Highest Vendor pom description Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. Low Vendor pom artifactid jmatio Low Vendor jar package name types Low Vendor pom name JMatIO High Vendor pom url tballison/jmatio Highest Vendor jar package name jmatio Low Product pom groupid tallison Low Product file name jmatio High Product pom artifactid jmatio Highest Product pom description Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA. Low Product pom url tballison/jmatio High Product jar package name types Low Product pom name JMatIO High Version file version 1.5 Highest Version pom version 1.5 Highest
maven: org.tallison:jmatio:1.5 Confidence :High jna-4.3.0.jarDescription:
Java Native Access License:
LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
Apache License v2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jna-4.3.0.jar
MD5: d44a0d3bcb98b1aace47610bfb0c0758
SHA1: f11d386a05132f54a51c99085f016e496f345ea3
SHA256: b6232fac240d35c3b151213be3b45eae2a6757638c79a658982a4ca2b28baaa5
Evidence Type Source Name Value Confidence Vendor pom url java-native-access/jna Highest Vendor Manifest Implementation-Vendor JNA Development Team High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor manifest Bundle-Description JNA Library Medium Vendor jar (hint) package name oracle Low Vendor Manifest bundle-symbolicname com.sun.jna Medium Vendor pom description Java Native Access Medium Vendor file name jna High Vendor pom artifactid jna Low Vendor pom groupid net.java.dev.jna Highest Vendor jar package name jna Low Vendor Manifest specification-vendor JNA Development Team Low Vendor Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Vendor pom name Java Native Access High Vendor central groupid net.java.dev.jna Highest Vendor jar package name sun Low Product Manifest Bundle-Name jna Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest Implementation-Title com.sun.jna High Product manifest Bundle-Description JNA Library Medium Product Manifest bundle-symbolicname com.sun.jna Medium Product pom description Java Native Access Medium Product file name jna High Product Manifest specification-title Java Native Access (JNA) Medium Product pom groupid net.java.dev.jna Low Product pom url java-native-access/jna High Product central artifactid jna Highest Product jar package name jna Low Product Manifest bundle-nativecode com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc Low Product pom name Java Native Access High Product pom artifactid jna Highest Version file version 4.3.0 Highest Version central version 4.3.0 Highest Version pom version 4.3.0 Highest
jsoup-1.11.3.jarDescription:
jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers do. License:
The MIT License: https://jsoup.org/license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jsoup-1.11.3.jar
MD5: 4735085c4a37313b00887dd0a0f99813
SHA1: 36da09a8f68484523fa2aaa100399d612b247d67
SHA256: df2c71a4240ecbdae7cdcd1667bcf0d747e4e3dcefe8161e787adcff7e5f2fa0
Evidence Type Source Name Value Confidence Vendor pom organization name Jonathan Hedley High Vendor Manifest bundle-docurl https://jsoup.org/ Low Vendor pom description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Vendor pom url https://jsoup.org/ Highest Vendor Manifest bundle-symbolicname org.jsoup Medium Vendor pom organization url http://jonathanhedley.com/ Medium Vendor manifest Bundle-Description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Vendor pom groupid jsoup Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom name jsoup Java HTML Parser High Vendor file name jsoup High Vendor Manifest automatic-module-name org.jsoup Medium Vendor pom artifactid jsoup Low Product Manifest bundle-docurl https://jsoup.org/ Low Product pom organization url http://jonathanhedley.com/ Low Product pom organization name Jonathan Hedley Low Product pom description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Product pom artifactid jsoup Highest Product Manifest bundle-symbolicname org.jsoup Medium Product Manifest Bundle-Name jsoup Java HTML Parser Medium Product pom groupid jsoup Low Product manifest Bundle-Description jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-... Low Product pom url https://jsoup.org/ Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name jsoup Java HTML Parser High Product file name jsoup High Product Manifest automatic-module-name org.jsoup Medium Version pom version 1.11.3 Highest Version file version 1.11.3 Highest
cpe: cpe:/a:jsoup:jsoup:1.11.3 Confidence :Low suppress maven: org.jsoup:jsoup:1.11.3 Confidence :High jul-to-slf4j-1.7.25.jarDescription:
JUL to SLF4J bridge File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jul-to-slf4j-1.7.25.jarMD5: ab28124cb05fec600f2ffe37b94629e0SHA1: 0af5364cd6679bfffb114f0dec8a157aaa283b76SHA256: 416c5a0c145ad19526e108d44b6bf77b75412d47982cce6ce8d43abdbdbb0fac
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom parent-artifactid slf4j-parent Low Vendor Manifest bundle-symbolicname jul.to.slf4j Medium Vendor pom description JUL to SLF4J bridge Medium Vendor manifest Bundle-Description JUL to SLF4J bridge Medium Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Vendor pom name JUL to SLF4J bridge High Vendor pom artifactid jul-to-slf4j Low Vendor file name jul-to-slf4j High Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product pom parent-groupid org.slf4j Low Product Manifest bundle-symbolicname jul.to.slf4j Medium Product pom description JUL to SLF4J bridge Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest Bundle-Name jul-to-slf4j Medium Product pom artifactid jul-to-slf4j Highest Product manifest Bundle-Description JUL to SLF4J bridge Medium Product pom name JUL to SLF4J bridge High Product pom groupid slf4j Low Product file name jul-to-slf4j High Version file version 1.7.25 Highest Version Manifest Implementation-Version 1.7.25 High Version pom version 1.7.25 Highest
maven: org.slf4j:jul-to-slf4j:1.7.25 Confidence :Highcpe: cpe:/a:slf4j:slf4j:1.7.25 Confidence :Low suppress junrar-2.0.0.jarDescription:
rar decompression library in plain java License:
UnRar License: https://raw.github.com/junrar/junrar/master/license.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/junrar-2.0.0.jar
MD5: 0ca29e3b24ec650e74324b50275000f3
SHA1: db1f89ba102d1375c6a9d481ebc0e8cd880ab16d
SHA256: 6c043acfffb80228cdc84f0624f2f18874ee1a0e7830198a1f7cb492f72ee843
Evidence Type Source Name Value Confidence Vendor file name junrar High Vendor pom description rar decompression library in plain java Medium Vendor pom url junrar/junrar Highest Vendor pom artifactid junrar Low Vendor pom name Java UnRar High Vendor Manifest url https://github.com/junrar/junrar Low Vendor pom groupid github.junrar Highest Product pom url junrar/junrar High Product file name junrar High Product pom description rar decompression library in plain java Medium Product pom name Java UnRar High Product pom groupid github.junrar Low Product Manifest url https://github.com/junrar/junrar Low Product pom artifactid junrar Highest Version pom version 2.0.0 Highest Version file version 2.0.0 Highest
maven: com.github.junrar:junrar:2.0.0 Confidence :High metadata-extractor-2.11.0.jarDescription:
Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/metadata-extractor-2.11.0.jar
MD5: e95f394e786c0c7f22e61bff2e54ff8d
SHA1: 5f11883f6d06a16ca5fb8a9edf7c6c1237a92da0
SHA256: f5ec56c6b01afbfd7019e2da73bdec5d22c60d620c0e8043e6a85adb554d0df7
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor-Id com.drewnoakes Medium Vendor file name metadata-extractor High Vendor pom groupid drewnoakes Highest Vendor pom artifactid metadata-extractor Low Vendor pom name ${project.groupId}:${project.artifactId} High Vendor Manifest implementation-url https://drewnoakes.com/code/exif/ Low Vendor pom url https://drewnoakes.com/code/exif/ Highest Vendor Manifest Implementation-Vendor Drew Noakes High Vendor pom description Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. Medium Product file name metadata-extractor High Product pom groupid drewnoakes Low Product Manifest Implementation-Title metadata-extractor High Product pom name ${project.groupId}:${project.artifactId} High Product Manifest implementation-url https://drewnoakes.com/code/exif/ Low Product pom url https://drewnoakes.com/code/exif/ Medium Product pom artifactid metadata-extractor Highest Product pom description Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image files. Medium Version Manifest Implementation-Version 2.11.0 High Version pom version 2.11.0 Highest Version file version 2.11.0 Highest
maven: com.drewnoakes:metadata-extractor:2.11.0 Confidence :Highcpe: cpe:/a:id:id-software:2.11.0 Confidence :Low suppress openjson-1.0.10.jarDescription:
A clean-room Apache-licensed implementation of simple JSON processing License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/openjson-1.0.10.jar
MD5: c7c4cb9266cacc0aab5dcbb59456720c
SHA1: 8dcccbcc8bbfa15162cd7ca77bcf2b9daa90e70a
SHA256: 17a837e6726315779caf82877a444e547bc5f846983e87229fa27d22aeabcbcc
Evidence Type Source Name Value Confidence Vendor pom artifactid openjson Low Vendor Manifest bundle-symbolicname com.github.openjson Medium Vendor pom name Open JSON High Vendor Manifest bundle-docurl https://github.com/openjson/openjson Low Vendor pom description A clean-room Apache-licensed implementation of simple JSON processing Medium Vendor pom url openjson/openjson Highest Vendor manifest Bundle-Description A clean-room Apache-licensed implementation of simple JSON processing Medium Vendor pom groupid github.openjson Highest Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor file name openjson High Product Manifest Bundle-Name Open JSON Medium Product Manifest bundle-docurl https://github.com/openjson/openjson Low Product manifest Bundle-Description A clean-room Apache-licensed implementation of simple JSON processing Medium Product pom url openjson/openjson High Product pom groupid github.openjson Low Product pom artifactid openjson Highest Product Manifest bundle-symbolicname com.github.openjson Medium Product pom name Open JSON High Product pom description A clean-room Apache-licensed implementation of simple JSON processing Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product file name openjson High Version file version 1.0.10 Highest Version pom version 1.0.10 Highest
maven: com.github.openjson:openjson:1.0.10 Confidence :High opennlp-tools-1.9.0.jarDescription:
The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/opennlp-tools-1.9.0.jar
MD5: e1a7629d6e4de3b54b949d1d3608d6b6
SHA1: 219011f318812aa3aa88a2134721549fcc3cb56a
SHA256: c4a3b39c19a14e3b6c7f07073485eb66bd27105333e7aa8c0f067040d6181ab7
Evidence Type Source Name Value Confidence Vendor Manifest automatic-module-name org.apache.opennlp.tools Medium Vendor pom artifactid opennlp-tools Low Vendor Manifest bundle-symbolicname org.apache.opennlp.tools Medium Vendor pom parent-groupid org.apache.opennlp Medium Vendor pom parent-artifactid opennlp Low Vendor pom groupid apache.opennlp Highest Vendor file name opennlp-tools High Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor pom name Apache OpenNLP Tools High Vendor Manifest Implementation-Vendor-Id org.apache.opennlp Medium Product Manifest automatic-module-name org.apache.opennlp.tools Medium Product Manifest bundle-symbolicname org.apache.opennlp.tools Medium Product pom artifactid opennlp-tools Highest Product file name opennlp-tools High Product Manifest specification-title Apache OpenNLP Tools Medium Product Manifest bundle-docurl https://www.apache.org/ Low Product pom parent-artifactid opennlp Medium Product manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Product pom parent-groupid org.apache.opennlp Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom groupid apache.opennlp Low Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product pom name Apache OpenNLP Tools High Product Manifest Bundle-Name Apache OpenNLP Tools Medium Product Manifest Implementation-Title Apache OpenNLP Tools High Version Manifest Implementation-Version 1.9.0 High Version pom version 1.9.0 Highest Version file version 1.9.0 Highest
cpe: cpe:/a:apache:opennlp:1.9.0 Confidence :Low suppress maven: org.apache.opennlp:opennlp-tools:1.9.0 Confidence :High parse-tika.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/parse-tika.jarMD5: ae60261b7e7859894669a38607996a9fSHA1: 93aebd1166ef9122fa052945c0289ce294b5090aSHA256: 8d194040ee841ba4f439c0f2928673ac2b16881f5303f57fd000a2504a1bd46e
Evidence Type Source Name Value Confidence Vendor file name parse-tika High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parse Low Product file name parse-tika High Product jar package name nutch Low Product jar package name tika Low Product jar package name parse Low
cpe: cpe:/a:apache:tika:- Confidence :Low suppress Published Vulnerabilities CVE-2016-6809 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-502 Deserialization of Untrusted Data
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization. Vulnerable Software & Versions:
parso-2.0.9.jarDescription:
Parso is a lightweight Java library designed to read SAS7BDAT datasets. The Parso interfaces
are analogous to libraries designed to read table-storing files, for example, CSVReader library.
Despite its small size, the Parso library is the only full-featured open-source solution to process SAS7BDAT
datasets, both uncompressed, CHAR-compressed and BIN-compressed. It is effective in processing clinical and
statistical data often stored in SAS7BDAT format. Parso allows converting data into CSV format.
License:
Apache License v2: http://www.apache.org/licenses/LICENSE-2.0.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/parso-2.0.9.jar
MD5: d07965336923c11ababe5e4a2e4055d2
SHA1: 615d910051b7c4695397e6686cf840caf6216e19
SHA256: ff312d6f8e6ffe1b32a9665c3b757997c6e6e2d3d2c56024ada372c8c00a930f
Evidence Type Source Name Value Confidence Vendor central groupid com.epam Highest Vendor file name parso High Vendor jar package name epam Low Vendor pom artifactid parso Low Vendor pom url epam/parso Highest Vendor pom description Parso is a lightweight Java library designed to read SAS7BDAT datasets. The Parso interfaces are analogous to libraries designed to read table-storing files, for example, CSVReader library. Despite its small size, the Parso library is the only full-featured open-source solution to process SAS7BDAT datasets, both uncompressed, CHAR-compressed and BIN-compressed. It is effective in processing clinical and statistical data often stored in SAS7BDAT format. Parso allows converting data into CSV format. Low Vendor jar package name impl Low Vendor pom groupid epam Highest Vendor jar package name parso Low Vendor pom name parso High Product file name parso High Product pom artifactid parso Highest Product pom description Parso is a lightweight Java library designed to read SAS7BDAT datasets. The Parso interfaces are analogous to libraries designed to read table-storing files, for example, CSVReader library. Despite its small size, the Parso library is the only full-featured open-source solution to process SAS7BDAT datasets, both uncompressed, CHAR-compressed and BIN-compressed. It is effective in processing clinical and statistical data often stored in SAS7BDAT format. Parso allows converting data into CSV format. Low Product jar package name impl Low Product jar package name parso Low Product pom url epam/parso High Product central artifactid parso Highest Product pom groupid epam Low Product pom name parso High Version file version 2.0.9 Highest Version pom version 2.0.9 Highest Version central version 2.0.9 Highest
pdfbox-2.0.12.jarDescription:
The Apache PDFBox library is an open source Java tool for working with PDF documents.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/pdfbox-2.0.12.jar
MD5: dd67352fcb2c1afa884a3ad40e72be6f
SHA1: a7311cd267c19e1ba8154b076a63d29537154784
SHA256: bbc07ce7f7622aedadecd5f8f90f2eabdee306b2686ad13fbf35f480803f747a
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description The Apache PDFBox library is an open source Java tool for working with PDF documents. Medium Vendor pom parent-groupid org.apache.pdfbox Medium Vendor Manifest bundle-symbolicname org.apache.pdfbox Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache.pdfbox Medium Vendor pom groupid apache.pdfbox Highest Vendor file name pdfbox High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid pdfbox Low Vendor Manifest bundle-docurl http://pdfbox.apache.org Low Vendor pom parent-artifactid pdfbox-parent Low Vendor pom name Apache PDFBox High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor pom description
The Apache PDFBox library is an open source Java tool for working with PDF documents.
Medium Product manifest Bundle-Description The Apache PDFBox library is an open source Java tool for working with PDF documents. Medium Product pom artifactid pdfbox Highest Product Manifest specification-title Apache PDFBox Medium Product Manifest bundle-symbolicname org.apache.pdfbox Medium Product file name pdfbox High Product pom parent-artifactid pdfbox-parent Medium Product Manifest Bundle-Name Apache PDFBox Medium Product Manifest Implementation-Title Apache PDFBox High Product pom parent-groupid org.apache.pdfbox Low Product Manifest bundle-docurl http://pdfbox.apache.org Low Product pom groupid apache.pdfbox Low Product pom name Apache PDFBox High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom description
The Apache PDFBox library is an open source Java tool for working with PDF documents.
Medium Version Manifest Implementation-Version 2.0.12 High Version file version 2.0.12 Highest Version pom version 2.0.12 Highest
Related Dependencies pdfbox-tools-2.0.12.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/pdfbox-tools-2.0.12.jar MD5: d8eab313dc67d066b52a261ee1d367a1 SHA1: 0e4569e8364f33be1c0af889f62b0f8f4dca7d45 SHA256: 4539d30b4a39a2f192a47dff544f658cc4c78960aa1162d73df1196bcc80beef maven: org.apache.pdfbox:pdfbox:2.0.12 Confidence :Highcpe: cpe:/a:apache:pdfbox:2.0.12 Confidence :Low suppress poi-4.0.0.jarDescription:
Apache POI - Java API To Access Microsoft Format Files License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/poi-4.0.0.jar
MD5: 1ca4d8cedbdfa632b289f1f783ba9a7e
SHA1: 7ddb9b983ed682c93a986e8bb596d5935b13086c
SHA256: f6574162cf94b1cafcb0c49f1d4da0246e2cfd479d2f31904cc37d715e756c6c
Evidence Type Source Name Value Confidence Vendor pom url http://poi.apache.org/ Highest Vendor jar package name apache Low Vendor pom description Apache POI - Java API To Access Microsoft Format Files Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name poi Low Vendor pom organization name Apache Software Foundation High Vendor pom name Apache POI High Vendor pom organization url http://www.apache.org/ Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.poi Highest Vendor pom artifactid poi Low Vendor Manifest Implementation-Vendor-Id org.apache.poi Medium Vendor central groupid org.apache.poi Highest Vendor file name poi High Product pom organization url http://www.apache.org/ Low Product pom description Apache POI - Java API To Access Microsoft Format Files Medium Product pom artifactid poi Highest Product jar package name poi Low Product pom name Apache POI High Product central artifactid poi Highest Product Manifest specification-title Apache POI Medium Product pom groupid apache.poi Low Product pom url http://poi.apache.org/ Medium Product Manifest Implementation-Title Apache POI High Product file name poi High Product pom organization name Apache Software Foundation Low Version central version 4.0.0 Highest Version file version 4.0.0 Highest Version Manifest Implementation-Version 4.0.0 High Version pom version 4.0.0 Highest
Related Dependencies poi-scratchpad-4.0.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/poi-scratchpad-4.0.0.jar MD5: 229df9dc87bc20d23b82881f5f927376 SHA1: 1038d3bb1ec34e93c184b4c5b690e2f51c6f7a60 SHA256: 91112ccf906b534e6d42ff2e32690e6840415bd1d8e3ad32d9744f13a13b2455 maven: org.apache.poi:poi-scratchpad:4.0.0 ✓ poi-ooxml-schemas-4.0.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/poi-ooxml-schemas-4.0.0.jar MD5: 5b543060c11bc5249c36708fade759e7 SHA1: 125f9ccd2cf652fa4169b1c30e9023362e23324f SHA256: 029ab12cf1f2303091f7f93ea694a4a66d6b397d970447677479a84caf2dc18e maven: org.apache.poi:poi-ooxml-schemas:4.0.0 ✓ poi-ooxml-4.0.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/poi-ooxml-4.0.0.jar MD5: 9f81c33c67a5b38cd87ad38a48261861 SHA1: f3fa9c2bd64eb3ec15378de960a07d077ae5b26d SHA256: 584159c02c776a8c8e35801c7fe3cbf0276c5b12a2feed770c12174ed8418cfb maven: org.apache.poi:poi-ooxml:4.0.0 ✓ sis-feature-0.8.jarDescription:
Representations of geographic features.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-feature-0.8.jar
MD5: abcd6da5f22d8a177f7f86ad9de6779b
SHA1: 65ea6ab21713dee99a0d2fd7196b80dd631a7e02
SHA256: c90e420f46c407060b11f62787a088b1127d9e6adb7c79d65ff5a6a99dabd9e2
Evidence Type Source Name Value Confidence Vendor manifest Bundle-Description Representations of geographic features. Medium Vendor jar package name feature Low Vendor Manifest implementation-url http://sis.apache.org/core/sis-feature Low Vendor pom groupid apache.sis.core Highest Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor pom artifactid sis-feature Low Vendor jar package name sis Low Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-feature Low Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor file name sis-feature High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache SIS features High Vendor Manifest bundle-symbolicname org.apache.sis.feature Medium Vendor central groupid org.apache.sis.core Highest Vendor pom parent-artifactid core Low Vendor pom description
Representations of geographic features.
Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product manifest Bundle-Description Representations of geographic features. Medium Product jar package name feature Low Product Manifest implementation-url http://sis.apache.org/core/sis-feature Low Product pom groupid apache.sis.core Low Product jar package name sis Low Product Manifest bundle-docurl http://sis.apache.org/core/sis-feature Low Product Manifest built-on 2017-11-10T19:36:30Z Low Product file name sis-feature High Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product Manifest Implementation-Title Apache SIS features High Product pom name Apache SIS features High Product Manifest bundle-symbolicname org.apache.sis.feature Medium Product pom parent-artifactid core Medium Product central artifactid sis-feature Highest Product pom description
Representations of geographic features.
Medium Product Manifest Bundle-Name Apache SIS features Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom artifactid sis-feature Highest Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
sis-metadata-0.8.jarDescription:
Implementations of metadata derived from ISO 19115. This module provides both an implementation
of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through
Java reflection.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-metadata-0.8.jar
MD5: de28abdfc0d83256a87db3ceb6b094c2
SHA1: b5d309428e78ebdaf1ea04aec8747a2093689e20
SHA256: d04e98ee08441d30663d1bc45582da9672360b1a148a4faccbb55a5e1437da7c
Evidence Type Source Name Value Confidence Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.TypeRegistration" Low Vendor pom artifactid sis-metadata Low Vendor pom groupid apache.sis.core Highest Vendor manifest Bundle-Description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor file name sis-metadata High Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor pom description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Vendor Manifest bundle-symbolicname org.apache.sis.metadata Medium Vendor pom name Apache SIS metadata High Vendor Manifest implementation-url http://sis.apache.org/core/sis-metadata Low Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-metadata Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.core Highest Vendor jar package name metadata Low Vendor pom parent-artifactid core Low Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.TypeRegistration" Low Product central artifactid sis-metadata Highest Product manifest Bundle-Description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Product Manifest Implementation-Title Apache SIS metadata High Product pom groupid apache.sis.core Low Product jar package name sis Low Product file name sis-metadata High Product Manifest built-on 2017-11-10T19:36:30Z Low Product pom description Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection. Low Product Manifest bundle-symbolicname org.apache.sis.metadata Medium Product pom name Apache SIS metadata High Product Manifest implementation-url http://sis.apache.org/core/sis-metadata Low Product Manifest bundle-docurl http://sis.apache.org/core/sis-metadata Low Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product pom parent-artifactid core Medium Product Manifest Bundle-Name Apache SIS metadata Medium Product jar package name metadata Low Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom artifactid sis-metadata Highest Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
sis-netcdf-0.8.jarDescription:
Bridge between netCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-netcdf-0.8.jar
MD5: 2096511e5dac7016da8eacd3a4914e99
SHA1: 0aa44675239c11eeb598ef054efdf2673cd4953a
SHA256: a6477f4437c0a0ed623664739b6c9ada0cceba01d5163d0793eadb5b23677511
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.storage Medium Vendor pom groupid apache.sis.storage Highest Vendor jar package name apache Low Vendor jar package name sis Low Vendor file name sis-netcdf High Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor manifest Bundle-Description Bridge between netCDF Climate and Forecast (CF) convention and ISO 19115 metadata. Medium Vendor jar package name internal Low Vendor pom artifactid sis-netcdf Low Vendor Manifest bundle-symbolicname org.apache.sis.storage.netcdf Medium Vendor Manifest bundle-docurl http://sis.apache.org/storage/sis-netcdf Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.storage Highest Vendor pom description
Bridge between netCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
Medium Vendor Manifest implementation-url http://sis.apache.org/storage/sis-netcdf Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom parent-artifactid storage Low Vendor pom name Apache SIS netCDF storage High Product pom parent-artifactid storage Medium Product Manifest Implementation-Title Apache SIS netCDF storage High Product Manifest Bundle-Name Apache SIS netCDF storage Medium Product jar package name netcdf Low Product jar package name sis Low Product file name sis-netcdf High Product Manifest built-on 2017-11-10T19:36:30Z Low Product manifest Bundle-Description Bridge between netCDF Climate and Forecast (CF) convention and ISO 19115 metadata. Medium Product jar package name internal Low Product central artifactid sis-netcdf Highest Product pom parent-groupid org.apache.sis Low Product Manifest bundle-symbolicname org.apache.sis.storage.netcdf Medium Product Manifest specification-title GeoAPI Medium Product Manifest bundle-docurl http://sis.apache.org/storage/sis-netcdf Low Product pom artifactid sis-netcdf Highest Product pom description
Bridge between netCDF Climate and Forecast (CF) convention and ISO 19115 metadata.
Medium Product Manifest implementation-url http://sis.apache.org/storage/sis-netcdf Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name Apache SIS netCDF storage High Product pom groupid apache.sis.storage Low Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
sis-referencing-0.8.jarDescription:
Implementations of Coordinate Reference Systems (CRS),
conversion and transformation services derived from ISO 19111.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-referencing-0.8.jar
MD5: c0bbeebdff505844f3d7181a127abcbb
SHA1: 8c9eb6766665eea110f47c53787b7a9bc1310400
SHA256: f194d08bdda2509e104ea32004384298014ecd664aa7d7c30dacf0ee41bfa2f9
Evidence Type Source Name Value Confidence Vendor pom groupid apache.sis.core Highest Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest implementation-url http://sis.apache.org/core/sis-referencing Low Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-referencing Low Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor pom name Apache SIS referencing High Vendor pom artifactid sis-referencing Low Vendor manifest Bundle-Description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor file name sis-referencing High Vendor jar package name referencing Low Vendor Manifest bundle-symbolicname org.apache.sis.referencing Medium Vendor pom description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.AdapterReplacement",org.opengis.referencing.operation.MathTransformFactory,org.opengis.referencing.operation.OperationMethod,org.opengis.temporal.TemporalFactory Low Vendor central groupid org.apache.sis.core Highest Vendor pom parent-artifactid core Low Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Product Manifest implementation-url http://sis.apache.org/core/sis-referencing Low Product Manifest bundle-docurl http://sis.apache.org/core/sis-referencing Low Product pom groupid apache.sis.core Low Product Manifest Implementation-Title Apache SIS referencing High Product jar package name sis Low Product Manifest built-on 2017-11-10T19:36:30Z Low Product pom name Apache SIS referencing High Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product manifest Bundle-Description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Product file name sis-referencing High Product Manifest Bundle-Name Apache SIS referencing Medium Product jar package name referencing Low Product Manifest bundle-symbolicname org.apache.sis.referencing Medium Product pom artifactid sis-referencing Highest Product pom description Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111. Low Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="org.apache.sis.internal.jaxb.AdapterReplacement",org.opengis.referencing.operation.MathTransformFactory,org.opengis.referencing.operation.OperationMethod,org.opengis.temporal.TemporalFactory Low Product pom parent-artifactid core Medium Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product central artifactid sis-referencing Highest Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
sis-storage-0.8.jarDescription:
Provides the interfaces and base classes to be implemented by various storage formats.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-storage-0.8.jar
MD5: 5f3238f3d977f9299174e18c45cfaba2
SHA1: 53b323f55881b4cd6fe1ecf9464a7066a3ae2eb6
SHA256: 7cade99264a96233e11f1fd888c23f647d94673cab0275a3d81d0d990bd204e5
Evidence Type Source Name Value Confidence Vendor Manifest implementation-url http://sis.apache.org/storage/sis-storage Low Vendor pom description
Provides the interfaces and base classes to be implemented by various storage formats.
Medium Vendor file name sis-storage High Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor pom artifactid sis-storage Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.storage Medium Vendor pom groupid apache.sis.storage Highest Vendor jar package name apache Low Vendor Manifest bundle-symbolicname org.apache.sis.storage Medium Vendor manifest Bundle-Description Provides the interfaces and base classes to be implemented by various storage formats. Medium Vendor jar package name sis Low Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor jar package name internal Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor central groupid org.apache.sis.storage Highest Vendor Manifest bundle-docurl http://sis.apache.org/storage/sis-storage Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom parent-artifactid storage Low Vendor pom name Apache SIS common storage High Product Manifest implementation-url http://sis.apache.org/storage/sis-storage Low Product pom description
Provides the interfaces and base classes to be implemented by various storage formats.
Medium Product file name sis-storage High Product pom parent-artifactid storage Medium Product central artifactid sis-storage Highest Product pom artifactid sis-storage Highest Product Manifest bundle-symbolicname org.apache.sis.storage Medium Product manifest Bundle-Description Provides the interfaces and base classes to be implemented by various storage formats. Medium Product jar package name sis Low Product Manifest built-on 2017-11-10T19:36:30Z Low Product jar package name internal Low Product pom parent-groupid org.apache.sis Low Product Manifest Bundle-Name Apache SIS common storage Medium Product Manifest specification-title GeoAPI Medium Product jar package name storage Low Product Manifest bundle-docurl http://sis.apache.org/storage/sis-storage Low Product Manifest Implementation-Title Apache SIS common storage High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product pom name Apache SIS common storage High Product pom groupid apache.sis.storage Low Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
sis-utility-0.8.jarDescription:
Miscellaneous utilities.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/sis-utility-0.8.jar
MD5: 10e3a9e45b8256c21eb143e7f6060474
SHA1: 4ad2d0805780c5a2cebc0dadbfb8307f94c91c4f
SHA256: add922cad9d64c14ff2098c8c599dcdad8f8593978ee94a68e2278aa0b0dff41
Evidence Type Source Name Value Confidence Vendor file name sis-utility High Vendor pom groupid apache.sis.core Highest Vendor pom parent-groupid org.apache.sis Medium Vendor Manifest specification-vendor Open Geospatial Consortium Low Vendor jar package name apache Low Vendor jar package name sis Low Vendor Manifest bundle-symbolicname org.apache.sis.util Medium Vendor pom description
Miscellaneous utilities.
Medium Vendor Manifest built-on 2017-11-10T19:36:30Z Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-url http://sis.apache.org/core/sis-utility Low Vendor Manifest spi-producer * Low Vendor central groupid org.apache.sis.core Highest Vendor pom parent-artifactid core Low Vendor pom name Apache SIS utilities High Vendor Manifest bundle-docurl http://sis.apache.org/core/sis-utility Low Vendor manifest Bundle-Description Miscellaneous utilities. Medium Vendor pom artifactid sis-utility Low Vendor Manifest Implementation-Vendor-Id org.apache.sis.core Medium Vendor Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.serviceloader;cardinality:=multiple,osgi.extender;filter:="(osgi.extender=osgi.serviceloader.processor)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product file name sis-utility High Product central artifactid sis-utility Highest Product pom groupid apache.sis.core Low Product pom artifactid sis-utility Highest Product jar package name sis Low Product Manifest bundle-symbolicname org.apache.sis.util Medium Product Manifest Bundle-Name Apache SIS utilities Medium Product pom description
Miscellaneous utilities.
Medium Product Manifest built-on 2017-11-10T19:36:30Z Low Product pom parent-groupid org.apache.sis Low Product Manifest specification-title GeoAPI Medium Product Manifest Implementation-Title Apache SIS utilities High Product Manifest implementation-url http://sis.apache.org/core/sis-utility Low Product Manifest spi-producer * Low Product pom parent-artifactid core Medium Product pom name Apache SIS utilities High Product Manifest bundle-docurl http://sis.apache.org/core/sis-utility Low Product manifest Bundle-Description Miscellaneous utilities. Medium Product Manifest require-capability osgi.extender;filter:="(osgi.extender=osgi.serviceloader.registrar)",osgi.serviceloader;cardinality:=multiple,osgi.extender;filter:="(osgi.extender=osgi.serviceloader.processor)",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Version file version 0.8 Highest Version central version 0.8 Highest Version Manifest Implementation-Version 0.8 High Version pom version 0.8 Highest
stax-ex-1.7.8.jarDescription:
Extensions to JSR-173 StAX API. License:
Dual license consisting of the CDDL v1.1 and GPL v2
: https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/stax-ex-1.7.8.jar
MD5: bf9963c5574fdd6f69a927710ec1faf6
SHA1: 377077e4441cc46be5efde9de63efdf790a59cd7
SHA256: 66a8b44e63c47a088ba1953875ea5b2b0eb0769a23906405789b3bb01c9cf8dd
Evidence Type Source Name Value Confidence Vendor pom url http://stax-ex.java.net/ Highest Vendor file name stax-ex High Vendor Manifest implementation-build-id tags/stax-ex-1.7.8-199, 2015-10-15T14:52:37+0200 Low Vendor pom artifactid stax-ex Low Vendor manifest Bundle-Description Extensions to JSR-173 StAX API. Medium Vendor Manifest bundle-symbolicname org.jvnet.staxex.stax-ex Medium Vendor pom name Extended StAX API High Vendor pom parent-groupid net.java Medium Vendor pom groupid jvnet.staxex Highest Vendor pom description Extensions to JSR-173 StAX API. Medium Vendor Manifest Implementation-Vendor-Id org.jvnet.staxex Medium Vendor pom parent-artifactid jvnet-parent Low Product file name stax-ex High Product Manifest implementation-build-id tags/stax-ex-1.7.8-199, 2015-10-15T14:52:37+0200 Low Product Manifest Implementation-Title Extended StAX API High Product pom groupid jvnet.staxex Low Product manifest Bundle-Description Extensions to JSR-173 StAX API. Medium Product Manifest bundle-symbolicname org.jvnet.staxex.stax-ex Medium Product pom name Extended StAX API High Product pom url http://stax-ex.java.net/ Medium Product Manifest Bundle-Name Extended StAX API Medium Product pom parent-groupid net.java Low Product pom artifactid stax-ex Highest Product pom description Extensions to JSR-173 StAX API. Medium Product pom parent-artifactid jvnet-parent Medium Version pom version 1.7.8 Highest Version Manifest Implementation-Version 1.7.8 High Version file version 1.7.8 Highest
maven: org.jvnet.staxex:stax-ex:1.7.8 Confidence :High stax2-api-4.1.jarDescription:
tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.
License:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/stax2-api-4.1.jar
MD5: 63d94c33170b23d46f0f2e21ac708872
SHA1: b6e20f3760016b70358e9227be904ecb26a50530
SHA256: 3e99c678c42ce353595b6cc71e62f25bd6e58860b3cf79b60adc9240a967924f
Evidence Type Source Name Value Confidence Vendor Manifest implementation-build-date 2018-03-28 03:40:13+0000 Low Vendor pom organization url http://fasterxml.com Medium Vendor pom name Stax2 API High Vendor Manifest bundle-symbolicname stax2-api Medium Vendor Manifest bundle-docurl http://github.com/FasterXML/stax2-api Low Vendor pom parent-artifactid oss-parent Low Vendor pom groupid codehaus.woodstox Highest Vendor file name stax2-api High Vendor pom organization name fasterxml.com High Vendor manifest Bundle-Description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Vendor pom parent-groupid com.fasterxml Medium Vendor pom artifactid stax2-api Low Vendor Manifest Implementation-Vendor fasterxml.com High Vendor pom description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Vendor Manifest automatic-module-name org.codehaus.stax2 Medium Vendor pom url http://github.com/FasterXML/stax2-api Highest Vendor Manifest Implementation-Vendor-Id org.codehaus.woodstox Medium Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor Manifest specification-vendor fasterxml.com Low Product Manifest specification-title Stax2 API Medium Product Manifest implementation-build-date 2018-03-28 03:40:13+0000 Low Product pom name Stax2 API High Product pom organization name fasterxml.com Low Product Manifest bundle-symbolicname stax2-api Medium Product Manifest bundle-docurl http://github.com/FasterXML/stax2-api Low Product Manifest Implementation-Title Stax2 API High Product pom url http://github.com/FasterXML/stax2-api Medium Product file name stax2-api High Product pom parent-artifactid oss-parent Medium Product pom parent-groupid com.fasterxml Low Product manifest Bundle-Description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Product pom description tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API. Low Product Manifest automatic-module-name org.codehaus.stax2 Medium Product pom organization url http://fasterxml.com Low Product pom groupid codehaus.woodstox Low Product Manifest Bundle-Name Stax2 API Medium Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom artifactid stax2-api Highest Version file version 4.1 Highest Version Manifest Implementation-Version 4.1 High Version pom version 4.1 Highest
maven: org.codehaus.woodstox:stax2-api:4.1 Confidence :High tika-parsers-1.19.1.jarDescription:
Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/tika-parsers-1.19.1.jar
MD5: 637fbd863c68dee8b5d915d0bf115302
SHA1: 06d45a8683a7479f0e0d9d252f834d0ae44abd6b
SHA256: 40522fd496284479cb5353cc45c48a3171bda74fca7d0c4afc6e21fac24be522
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.apache.tika.parsers Medium Vendor Manifest automatic-module-name org.apache.tika.parsers Medium Vendor pom organization url http://www.apache.org Medium Vendor Manifest bundle-docurl http://tika.apache.org/ Low Vendor Manifest Implementation-Vendor-Id org.apache.tika Medium Vendor pom parent-artifactid tika-parent Low Vendor manifest Bundle-Description Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries. Low Vendor pom parent-groupid org.apache.tika Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor file name tika-parsers High Vendor Manifest implementation-url http://tika.apache.org/ Low Vendor pom artifactid tika-parsers Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Apache Tika parsers High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Vendor pom groupid apache.tika Highest Vendor pom url http://tika.apache.org/ Highest Vendor pom organization name The Apache Software Foundation High Product Manifest bundle-symbolicname org.apache.tika.parsers Medium Product Manifest Bundle-Name Apache Tika parsers Medium Product Manifest automatic-module-name org.apache.tika.parsers Medium Product Manifest bundle-docurl http://tika.apache.org/ Low Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org Low Product manifest Bundle-Description Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries. Low Product pom parent-groupid org.apache.tika Low Product pom url http://tika.apache.org/ Medium Product file name tika-parsers High Product Manifest implementation-url http://tika.apache.org/ Low Product pom groupid apache.tika Low Product pom name Apache Tika parsers High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))" Low Product pom parent-artifactid tika-parent Medium Product Manifest specification-title Apache Tika parsers Medium Product Manifest Implementation-Title Apache Tika parsers High Product pom artifactid tika-parsers Highest Version file version 1.19.1 Highest Version Manifest Implementation-Version 1.19.1 High Version pom version 1.19.1 Highest
cpe: cpe:/a:apache:tika:1.19.1 Confidence :Low suppress maven: org.apache.tika:tika-parsers:1.19.1 Confidence :High txw2-2.3.0.1.jarDescription:
TXW is a library that allows you to write XML documents.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/txw2-2.3.0.1.jarMD5: 5a3f2dea3ed1579b36395bf37a2415faSHA1: 4d654f416732fe543deeb93272ead4b59de28fbcSHA256: 2c9c288ddeee4a601d0229a18303ea89cb2fcd1295ba2a1127fffe68c611eca3
Evidence Type Source Name Value Confidence Vendor file name txw2 High Vendor Manifest Implementation-Vendor Oracle High Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom name TXW2 Runtime High Vendor Manifest (hint) Implementation-Vendor sun High Vendor pom parent-artifactid jaxb-txw-parent Low Vendor pom groupid glassfish.jaxb Highest Vendor Manifest Implementation-Vendor-Id com.oracle Medium Vendor pom artifactid txw2 Low Vendor pom description
TXW is a library that allows you to write XML documents.
Medium Product file name txw2 High Product pom name TXW2 Runtime High Product pom groupid glassfish.jaxb Low Product pom parent-groupid com.sun.xml.bind.mvn Low Product Manifest Implementation-Title TXW Runtime High Product pom artifactid txw2 Highest Product Manifest specification-title Java Architecture for XML Binding Medium Product pom description
TXW is a library that allows you to write XML documents.
Medium Product pom parent-artifactid jaxb-txw-parent Medium Version file version 2.3.0.1 Highest Version Manifest Implementation-Version 2.3.0.1 High Version pom version 2.3.0.1 Highest
maven: org.glassfish.jaxb:txw2:2.3.0.1 Confidence :High uimafit-core-2.2.0.jarDescription:
Factories, Injection, and Testing library for UIMA License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/uimafit-core-2.2.0.jar
MD5: c7f4145d5800d030b2e86f243a5dd402
SHA1: db69a6b733d2ada643f46060e130eda47edd6e5a
SHA256: c7385ba76735280cac7030e967b932d276a463c222a5aa0d8f9ac3131a12bba2
Evidence Type Source Name Value Confidence Vendor pom url ${uimaWebsiteUrl} Highest Vendor Manifest build-date 160319_1846 Low Vendor pom name Apache UIMA uimaFIT - Core High Vendor pom groupid apache.uima Highest Vendor Manifest implementation-url http://uima.apache.org Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.uima Medium Vendor pom description Factories, Injection, and Testing library for UIMA Medium Vendor Manifest Implementation-Vendor-Id org.apache.uima Medium Vendor pom parent-artifactid uimafit-parent Low Vendor file name uimafit-core High Vendor pom artifactid uimafit-core Low Product pom artifactid uimafit-core Highest Product Manifest project-title Apache UIMA Medium Product Manifest Implementation-Title Apache UIMA uimaFIT - Core High Product Manifest build-date 160319_1846 Low Product pom name Apache UIMA uimaFIT - Core High Product Manifest implementation-url http://uima.apache.org Low Product pom parent-artifactid uimafit-parent Medium Product pom url ${uimaWebsiteUrl} Medium Product pom description Factories, Injection, and Testing library for UIMA Medium Product pom groupid apache.uima Low Product file name uimafit-core High Product pom parent-groupid org.apache.uima Low Version file version 2.2.0 Highest Version Manifest Implementation-Version 2.2.0 High Version pom version 2.2.0 Highest
cpe: cpe:/a:apache:apache_test:2.2.0 Confidence :Low suppress maven: org.apache.uima:uimafit-core:2.2.0 Confidence :High uimaj-core-2.9.0.jarDescription:
The core implementation of the UIMA Java Framework License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/uimaj-core-2.9.0.jar
MD5: fcc8e2df8f54b980d033ab3536dc0a95
SHA1: 314390218c2f2d11089007719a5d4f39510d32f5
SHA256: ae55a918b605ffbbfd373301e1d4c18e8a8021e2efd8241b3baa5d48c1ad1656
Evidence Type Source Name Value Confidence Vendor pom url ${uimaWebsiteUrl} Highest Vendor Manifest build-date 160825_1717 Low Vendor pom parent-artifactid uimaj-parent Low Vendor pom groupid apache.uima Highest Vendor Manifest implementation-url http://uima.apache.org Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.uima Medium Vendor pom artifactid uimaj-core Low Vendor file name uimaj-core High Vendor Manifest Implementation-Vendor-Id org.apache.uima Medium Vendor pom description The core implementation of the UIMA Java Framework Medium Vendor pom name Apache UIMA Base: ${project.artifactId} High Product Manifest project-title Apache UIMA Medium Product Manifest Implementation-Title Apache UIMA Base: uimaj-core High Product Manifest build-date 160825_1717 Low Product pom parent-artifactid uimaj-parent Medium Product Manifest implementation-url http://uima.apache.org Low Product pom artifactid uimaj-core Highest Product pom url ${uimaWebsiteUrl} Medium Product file name uimaj-core High Product pom description The core implementation of the UIMA Java Framework Medium Product pom groupid apache.uima Low Product pom name Apache UIMA Base: ${project.artifactId} High Product pom parent-groupid org.apache.uima Low Version pom version 2.9.0 Highest Version Manifest Implementation-Version 2.9.0 High Version file version 2.9.0 Highest
maven: org.apache.uima:uimaj-core:2.9.0 Confidence :Highcpe: cpe:/a:apache:uimaj:2.9.0 Confidence :Low suppress unit-api-1.0.jarDescription:
Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units. License:
BSD: LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/unit-api-1.0.jar
MD5: 0e62b80ee212b7bb9d3cd150ff988a93
SHA1: 6b960260278588d7ff02fe376e5aad39a9c7440b
SHA256: 35da65fdbd3f9c1fe79cfc8399db975fd97660d8a219febfda9fd1a5fc058f10
Evidence Type Source Name Value Confidence Vendor Manifest bundle-docurl http://unitsofmeasurement.github.io Low Vendor Manifest Implementation-Vendor-Id javax.measure Medium Vendor pom groupid javax.measure Highest Vendor manifest Bundle-Description Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units. Low Vendor pom organization name Jean-Marie Dautelle, Werner Keil, V2COM High Vendor pom organization url http://unitsofmeasurement.github.io Medium Vendor Manifest bundle-symbolicname javax.measure.unit-api Medium Vendor file name unit-api High Vendor Manifest Implementation-Vendor Unit-API contributors High Vendor pom artifactid unit-api Low Vendor pom description Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units. Low Vendor Manifest specification-vendor Jean-Marie Dautelle, Werner Keil, V2COM Low Vendor pom url http://unitsofmeasurement.github.io/ Highest Vendor Manifest implementation-url http://unitsofmeasurement.github.io Low Vendor pom name Units of Measurement API High Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest bundle-docurl http://unitsofmeasurement.github.io Low Product pom url http://unitsofmeasurement.github.io/ Medium Product manifest Bundle-Description Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units. Low Product pom organization name Jean-Marie Dautelle, Werner Keil, V2COM Low Product Manifest bundle-symbolicname javax.measure.unit-api Medium Product pom groupid javax.measure Low Product file name unit-api High Product pom organization url http://unitsofmeasurement.github.io Low Product pom description Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units. Low Product Manifest specification-title Units of Measurement API Medium Product Manifest implementation-url http://unitsofmeasurement.github.io Low Product pom name Units of Measurement API High Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest Bundle-Name Units of Measurement API Medium Product pom artifactid unit-api Highest Product Manifest Implementation-Title Units of Measurement API High Version file version 1.0 Highest Version Manifest Implementation-Version 1.0 High Version pom version 1.0 Highest
maven: javax.measure:unit-api:1.0 Confidence :High woodstox-core-5.1.0.jarDescription:
Woodstox is a high-performance XML processor that
implements Stax (JSR-173), SAX2 and Stax2 APIs
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/woodstox-core-5.1.0.jar
MD5: 88b7a2312146e237a9941b1f00bf456d
SHA1: bd416e84cbd20cb5f2cf13c30b023e814a4d6107
SHA256: 6d6107c3e6aac8f1c3e3762b89164b329fb2b15ec0afc8961cf6c4dc355f10bf
Evidence Type Source Name Value Confidence Vendor pom organization url http://fasterxml.com Medium Vendor Manifest automatic-module-name com.ctc.wstx Medium Vendor pom groupid fasterxml.woodstox Highest Vendor pom artifactid woodstox-core Low Vendor pom name Woodstox High Vendor file name woodstox-core High Vendor Manifest specification-vendor FasterXML Low Vendor pom parent-artifactid oss-parent Low Vendor pom description Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs Low Vendor pom url FasterXML/woodstox Highest Vendor pom parent-groupid com.fasterxml Medium Vendor pom organization name FasterXML High Vendor Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Vendor Manifest Implementation-Vendor-Id com.fasterxml.woodstox Medium Vendor Manifest implementation-build-date 2018-03-31 01:33:59+0000 Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Vendor manifest Bundle-Description Woodstox is a high-performance XML processor thatimplements Stax (JSR-173), SAX2 and Stax2 APIs Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Product pom url FasterXML/woodstox High Product pom artifactid woodstox-core Highest Product pom organization name FasterXML Low Product Manifest automatic-module-name com.ctc.wstx Medium Product pom name Woodstox High Product file name woodstox-core High Product pom description Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs Low Product pom parent-artifactid oss-parent Medium Product pom parent-groupid com.fasterxml Low Product Manifest Implementation-Title Woodstox High Product Manifest Bundle-Name Woodstox Medium Product Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Product pom organization url http://fasterxml.com Low Product Manifest specification-title Woodstox Medium Product Manifest implementation-build-date 2018-03-31 01:33:59+0000 Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))" Low Product pom groupid fasterxml.woodstox Low Product manifest Bundle-Description Woodstox is a high-performance XML processor thatimplements Stax (JSR-173), SAX2 and Stax2 APIs Medium Product Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Version Manifest Implementation-Version 5.1.0 High Version file version 5.1.0 Highest Version pom version 5.1.0 Highest
maven: com.fasterxml.woodstox:woodstox-core:5.1.0 Confidence :High xmlbeans-3.0.1.jarDescription:
XmlBeans main jar License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/xmlbeans-3.0.1.jar
MD5: e61160376525c448371c18d0ecdbf70a
SHA1: 50d94da791ab1e799a11d6f82410fd7d49f402ca
SHA256: ec7b2aa7e1352753d18ac2daa7a68880f160a26087ede464ed329807238c0922
Evidence Type Source Name Value Confidence Vendor pom groupid apache.xmlbeans Highest Vendor pom organization url https://xmlbeans.apache.org/ Medium Vendor jar package name impl Low Vendor jar package name apache Low Vendor jar package name xmlbeans Low Vendor pom organization name XmlBeans High Vendor pom artifactid xmlbeans Low Vendor manifest: org/apache/xmlbeans/ Implementation-Vendor Apache Software Foundation Medium Vendor file name xmlbeans High Vendor pom url https://xmlbeans.apache.org/ Highest Vendor pom description XmlBeans main jar Medium Vendor central groupid org.apache.xmlbeans Highest Vendor pom name XmlBeans High Product pom url https://xmlbeans.apache.org/ Medium Product pom organization url https://xmlbeans.apache.org/ Low Product jar package name impl Low Product pom groupid apache.xmlbeans Low Product jar package name xmlbeans Low Product manifest: org/apache/xmlbeans/ Implementation-Title org.apache.xmlbeans Medium Product file name xmlbeans High Product pom description XmlBeans main jar Medium Product pom organization name XmlBeans Low Product central artifactid xmlbeans Highest Product pom artifactid xmlbeans Highest Product pom name XmlBeans High Version central version 3.0.1 Highest Version file version 3.0.1 Highest Version pom version 3.0.1 Highest
xz-1.8.jarDescription:
XZ data compression License:
Public Domain File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/xz-1.8.jar
MD5: 5f982127e0de85b785c4b2abad21aa2e
SHA1: c4f7d054303948eb6a4066194253886c8af07128
SHA256: 8c7964b36fe3f0cbe644b04fcbff84e491ce81917db2f5bfa0cba8e9548aff5d
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname org.tukaani.xz Medium Vendor Manifest bundle-docurl https://tukaani.org/xz/java.html Low Vendor jar package name tukaani Low Vendor pom name XZ for Java High Vendor pom artifactid xz Low Vendor jar package name xz Low Vendor pom url https://tukaani.org/xz/java.html Highest Vendor Manifest automatic-module-name org.tukaani.xz Medium Vendor pom description XZ data compression Medium Vendor pom groupid tukaani Highest Vendor file name xz High Vendor Manifest implementation-url https://tukaani.org/xz/java.html Low Vendor central groupid org.tukaani Highest Product Manifest bundle-symbolicname org.tukaani.xz Medium Product Manifest bundle-docurl https://tukaani.org/xz/java.html Low Product pom artifactid xz Highest Product pom name XZ for Java High Product pom groupid tukaani Low Product jar package name xz Low Product Manifest automatic-module-name org.tukaani.xz Medium Product pom description XZ data compression Medium Product file name xz High Product Manifest Bundle-Name XZ data compression Medium Product pom url https://tukaani.org/xz/java.html Medium Product Manifest Implementation-Title XZ data compression High Product central artifactid xz Highest Product Manifest implementation-url https://tukaani.org/xz/java.html Low Version central version 1.8 Highest Version Manifest Implementation-Version 1.8 High Version pom version 1.8 Highest Version file version 1.8 Highest
cpe: cpe:/a:tukaani:xz:1.8 Confidence :Low suppress maven: org.tukaani:xz:1.8 ✓ Confidence :Highest Published Vulnerabilities CVE-2015-4035 suppress
Severity:Medium CVSS Score: 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P) CWE: CWE-20 Improper Input Validation
scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name. Vulnerable Software & Versions:
parse-zip.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-zip/parse-zip.jarMD5: a25e0fd6d165a1a1023d887d4b0f4db9SHA1: 26267e88b191a716c5bb6bbe5fd589b79862b2c7SHA256: cf428e948c516011d4973023656ed5394951a8d00da03eee8154c64992312677
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name parse-zip High Vendor jar package name parse Low Product jar package name zip Low Product jar package name nutch Low Product file name parse-zip High Product jar package name parse Low
cpe: cpe:/a:zip_project:zip:- Confidence :Low suppress Published Vulnerabilities CVE-2018-13684 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N) CWE: CWE-190 Integer Overflow or Wraparound
The mintToken function of a smart contract implementation for ZIP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Vulnerable Software & Versions:
commons-cli-2.0-mahout.jarDescription:
Commons CLI provides a simple API for presenting, processing and
validating a command line interface.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/commons-cli-2.0-mahout.jar
MD5: 703565f9521e7755c6fa2347c94dcf8d
SHA1: f1df8dc67ae086159ac66bd92c0bb54254776a93
SHA256: 0dbc0532a36415455b6e867f402ed2673ff9c229a292507d5a4d1e4921290367
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-cli Low Vendor file name commons-cli High Vendor manifest Bundle-Description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Vendor pom groupid apache.commons Highest Vendor pom url http://commons.apache.org/cli/ Highest Vendor pom description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom name Commons CLI High Vendor Manifest bundle-symbolicname org.apache.commons.cli2 Medium Vendor Manifest bundle-docurl http://commons.apache.org/cli/ Low Product pom artifactid commons-cli Highest Product file name commons-cli High Product manifest Bundle-Description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Product pom parent-artifactid commons-parent Medium Product pom description Commons CLI provides a simple API for presenting, processing and validating a command line interface. Low Product Manifest specification-title Commons CLI Medium Product pom name Commons CLI High Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom url http://commons.apache.org/cli/ Medium Product Manifest Bundle-Name Commons CLI Medium Product Manifest bundle-symbolicname org.apache.commons.cli2 Medium Product Manifest bundle-docurl http://commons.apache.org/cli/ Low Product Manifest Implementation-Title Commons CLI High Version pom version 2.0-SNAPSHOT Highest Version file version 2.0 Highest Version Manifest Implementation-Version 2.0-SNAPSHOT High
maven: org.apache.commons:commons-cli:2.0-SNAPSHOT Confidence :High commons-lang3-3.1.jarDescription:
Commons Lang, a package of Java utility classes for the
classes that are in java.lang's hierarchy, or are considered to be so
standard as to justify existence in java.lang.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/commons-lang3-3.1.jar
MD5: 71b48e6b3e1b1dc73fe705604b9c7584
SHA1: 905075e6c80f206bbe6cf1e809d2caa69f420c76
SHA256: 131f0519a8e4602e47cf024bfd7e0834bcf5592a7207f9a2fdb711d4f5afc166
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor Manifest bundle-symbolicname org.apache.commons.lang3 Medium Vendor manifest Bundle-Description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Vendor pom groupid apache.commons Highest Vendor pom name Commons Lang High Vendor file name commons-lang3 High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-lang3 Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2011-11-09 22:58:07-0800 Low Vendor pom url http://commons.apache.org/lang/ Highest Vendor Manifest bundle-docurl http://commons.apache.org/lang/ Low Vendor pom description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
Low Product pom url http://commons.apache.org/lang/ Medium Product pom artifactid commons-lang3 Highest Product Manifest bundle-symbolicname org.apache.commons.lang3 Medium Product manifest Bundle-Description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. Low Product pom name Commons Lang High Product file name commons-lang3 High Product pom parent-artifactid commons-parent Medium Product Manifest Bundle-Name Commons Lang Medium Product Manifest Implementation-Title Commons Lang High Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2011-11-09 22:58:07-0800 Low Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product Manifest specification-title Commons Lang Medium Product Manifest bundle-docurl http://commons.apache.org/lang/ Low Product pom description Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.
Low Version file version 3.1 Highest Version Manifest Implementation-Version 3.1 High Version pom version 3.1 Highest
maven: org.apache.commons:commons-lang3:3.1 Confidence :High commons-math3-3.2.jarDescription:
The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/commons-math3-3.2.jar
MD5: aaa32530c0f744813570ff73db018698
SHA1: ec2544ab27e110d2d431bdad7d538ed509b21e62
SHA256: 6268a9a0ea3e769fc493a21446664c0ef668e48c93d126791f6f3f757978fee2
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor file name commons-math3 High Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Vendor pom artifactid commons-math3 Low Vendor pom name Commons Math High Vendor manifest Bundle-Description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor pom groupid apache.commons Highest Vendor pom url http://commons.apache.org/proper/commons-math/ Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor pom parent-artifactid commons-parent Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Vendor Manifest implementation-build tags/MATH_3_2_RC5@r1463704; 2013-04-02 21:25:31+0200 Low Vendor Manifest bundle-symbolicname org.apache.commons.math3 Medium Product file name commons-math3 High Product Manifest bundle-docurl http://commons.apache.org/proper/commons-math/ Low Product Manifest Implementation-Title Commons Math High Product Manifest specification-title Commons Math Medium Product pom name Commons Math High Product manifest Bundle-Description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product pom parent-artifactid commons-parent Medium Product pom artifactid commons-math3 Highest Product pom groupid apache.commons Low Product pom parent-groupid org.apache.commons Low Product pom description The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang. Low Product pom url http://commons.apache.org/proper/commons-math/ Medium Product Manifest implementation-build tags/MATH_3_2_RC5@r1463704; 2013-04-02 21:25:31+0200 Low Product Manifest Bundle-Name Commons Math Medium Product Manifest bundle-symbolicname org.apache.commons.math3 Medium Version file version 3.2 Highest Version Manifest Implementation-Version 3.2 High Version pom version 3.2 Highest
maven: org.apache.commons:commons-math3:3.2 Confidence :High guava-14.0.1.jarDescription:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has two code dependencies - javax.annotation
per the JSR-305 spec and javax.inject per the JSR-330 spec.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/guava-14.0.1.jar
MD5: 58553f87d83b9f8ec74bd3529083ee2f
SHA1: 69e12f4c6aeac392555f1ea86fab82b5e5e31ad4
SHA256: d69df3331840605ef0e5fe4add60f2d28e870e3820937ea29f713d2035d9ab97
Evidence Type Source Name Value Confidence Vendor Manifest bundle-symbolicname com.google.guava Medium Vendor pom groupid google.guava Highest Vendor pom artifactid guava Low Vendor pom name Guava: Google Core Libraries for Java High Vendor file name guava High Vendor manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec. Low Vendor pom parent-artifactid guava-parent Low Vendor pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec. Low Vendor pom parent-groupid com.google.guava Medium Product Manifest bundle-symbolicname com.google.guava Medium Product Manifest Bundle-Name Guava: Google Core Libraries for Java Medium Product pom artifactid guava Highest Product pom parent-artifactid guava-parent Medium Product pom name Guava: Google Core Libraries for Java High Product file name guava High Product manifest Bundle-Description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec. Low Product pom description Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has two code dependencies - javax.annotation per the JSR-305 spec and javax.inject per the JSR-330 spec. Low Product pom parent-groupid com.google.guava Low Product pom groupid google.guava Low Version file version 14.0.1 Highest Version pom version 14.0.1 Highest
maven: com.google.guava:guava:14.0.1 Confidence :High jackson-core-asl-1.9.12.jarDescription:
Jackson is a high-performance JSON processor (parser, generator)
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/jackson-core-asl-1.9.12.jar
MD5: 9eecf9a28910728023f8004620f13535
SHA1: ecfc6f73a841c4c3c653b59651a3f9d5f1286469
SHA256: eb1fcba3554c8408fa40d17fb5d085ce1502d990c08940766e90d18801ad9c3a
Evidence Type Source Name Value Confidence Vendor pom organization url http://fasterxml.com Medium Vendor file name jackson-core-asl High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Vendor pom artifactid jackson-core-asl Low Vendor jar package name codehaus Low Vendor Manifest Implementation-Vendor http://fasterxml.com High Vendor central groupid org.codehaus.jackson Highest Vendor pom organization name FasterXML High Vendor pom url http://jackson.codehaus.org Highest Vendor Manifest bundle-symbolicname jackson-core-asl Medium Vendor jar package name jackson Low Vendor pom name Jackson High Vendor pom description Jackson is a high-performance JSON processor (parser, generator)
Medium Vendor Manifest specification-vendor http://www.ietf.org/rfc/rfc4627.txt Low Vendor pom groupid codehaus.jackson Highest Product pom url http://jackson.codehaus.org Medium Product file name jackson-core-asl High Product pom organization name FasterXML Low Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Product central artifactid jackson-core-asl Highest Product Manifest specification-title JSON - JavaScript Object Notation Medium Product pom artifactid jackson-core-asl Highest Product Manifest Implementation-Title Jackson JSON processor High Product pom groupid codehaus.jackson Low Product Manifest Bundle-Name Jackson JSON processor Medium Product Manifest bundle-symbolicname jackson-core-asl Medium Product jar package name jackson Low Product pom organization url http://fasterxml.com Low Product pom name Jackson High Product pom description Jackson is a high-performance JSON processor (parser, generator)
Medium Version pom version 1.9.12 Highest Version file version 1.9.12 Highest Version Manifest Implementation-Version 1.9.12 High Version central version 1.9.12 Highest
Related Dependencies jackson-mapper-asl-1.9.12.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/jackson-mapper-asl-1.9.12.jar MD5: 2d7650908eace988e7512d4f2d21e3ea SHA1: 8b290aae44213e2f6da00c07af59b0d442068f4d SHA256: 1a6d65351d7d7645719391e9336bd2f9296073b08eac082935d9b1650da351be maven: org.codehaus.jackson:jackson-mapper-asl:1.9.12 ✓ lucene-analyzers-common-5.5.0.jarDescription:
Additional Analyzers File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/lucene-analyzers-common-5.5.0.jarMD5: 86dd4e953341d6b9b6bb01ce9fa68bc6SHA1: 1e0e8243a4410be20c34683034fafa7bb52e55ccSHA256: 995bd1b8c6e4a748956e28d2307f42d0a81ff1f9ec1412f4fff3fbe3045b13ef
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom description Additional Analyzers Medium Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor file name lucene-analyzers-common High Vendor pom artifactid lucene-analyzers-common Low Vendor jar package name analysis Low Vendor pom name Lucene Common Analyzers High Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom parent-groupid org.apache.lucene Low Product pom description Additional Analyzers Medium Product Manifest extension-name org.apache.lucene Medium Product file name lucene-analyzers-common High Product Manifest specification-title Lucene Search Engine: analyzers-common Medium Product central artifactid lucene-analyzers-common Highest Product pom artifactid lucene-analyzers-common Highest Product pom parent-artifactid lucene-parent Medium Product jar package name analysis Low Product pom name Lucene Common Analyzers High Product pom groupid apache.lucene Low Version pom version 5.5.0 Highest Version file version 5.5.0 Highest Version central version 5.5.0 Highest
lucene-core-5.5.0.jarDescription:
Apache Lucene Java Core File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/lucene-core-5.5.0.jarMD5: 05fa9206e10ace78de5b107e18ab02aaSHA1: a74fd869bb5ad7fe6b4cd29df9543a34aea81164SHA256: 8a0192d922969fbb090f03361dc465c888c5f525ea7b3f77c4ff751a98150b98
Evidence Type Source Name Value Confidence Vendor central groupid org.apache.lucene Highest Vendor jar package name lucene Low Vendor pom parent-artifactid lucene-parent Low Vendor jar package name apache Low Vendor pom groupid apache.lucene Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest extension-name org.apache.lucene Medium Vendor pom name Lucene Core High Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.lucene Medium Vendor pom description Apache Lucene Java Core Medium Vendor file name lucene-core High Vendor pom artifactid lucene-core Low Product Manifest Implementation-Title org.apache.lucene High Product jar package name lucene Low Product pom artifactid lucene-core Highest Product pom parent-groupid org.apache.lucene Low Product central artifactid lucene-core Highest Product Manifest extension-name org.apache.lucene Medium Product pom name Lucene Core High Product pom description Apache Lucene Java Core Medium Product file name lucene-core High Product Manifest specification-title Lucene Search Engine: core Medium Product pom parent-artifactid lucene-parent Medium Product pom groupid apache.lucene Low Version pom version 5.5.0 Highest Version file version 5.5.0 Highest Version central version 5.5.0 Highest
mahout-core-0.9.jarDescription:
Scalable machine learning libraries File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/mahout-core-0.9.jarMD5: ccdddf6be37bc2a7a6e6848c8cecea2aSHA1: 22a63210e10d39be2edcc01564f5d5f68f91eeb7SHA256: ef68f6d4b3cd17c6f259c0b513685bd84c88c1acbb2be1833bd7fc27bc1198e9
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom parent-groupid org.apache.mahout Medium Vendor pom name Mahout Core High Vendor pom description Scalable machine learning libraries Medium Vendor file name mahout-core High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid mahout Low Vendor Manifest Implementation-Vendor-Id org.apache.mahout Medium Vendor pom groupid apache.mahout Highest Vendor pom artifactid mahout-core Low Product pom groupid apache.mahout Low Product Manifest Implementation-Title Mahout Core High Product pom name Mahout Core High Product pom description Scalable machine learning libraries Medium Product pom artifactid mahout-core Highest Product pom parent-groupid org.apache.mahout Low Product file name mahout-core High Product Manifest specification-title Mahout Core Medium Product pom parent-artifactid mahout Medium Version Manifest Implementation-Version 0.9 High Version pom version 0.9 Highest Version file version 0.9 Highest
maven: org.apache.mahout:mahout-core:0.9 Confidence :High mahout-math-0.10.1.jarDescription:
High performance scientific and technical computing data structures and methods,
mostly based on CERN's
Colt Java API
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/mahout-math-0.10.1.jarMD5: 2361ef691cd4f19dbf16da7e760120ddSHA1: dcb2ea595466113bd7adbe50f0d094a5c01bfc8dSHA256: 0d3159beef984291d310970ebb02cedd20616cb1dceda9d632cc04071e1e97c5
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom description High performance scientific and technical computing data structures and methods, mostly based on CERN's Colt Java API Low Vendor pom parent-groupid org.apache.mahout Medium Vendor pom artifactid mahout-math Low Vendor file name mahout-math High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom parent-artifactid mahout Low Vendor Manifest Implementation-Vendor-Id org.apache.mahout Medium Vendor pom groupid apache.mahout Highest Vendor pom name Mahout Math High Product Manifest specification-title Mahout Math Medium Product pom groupid apache.mahout Low Product pom description High performance scientific and technical computing data structures and methods, mostly based on CERN's Colt Java API Low Product Manifest Implementation-Title Mahout Math High Product pom parent-groupid org.apache.mahout Low Product file name mahout-math High Product pom artifactid mahout-math Highest Product pom parent-artifactid mahout Medium Product pom name Mahout Math High Version pom version 0.10.1 Highest Version file version 0.10.1 Highest Version Manifest Implementation-Version 0.10.1 High
maven: org.apache.mahout:mahout-math:0.10.1 Confidence :High parsefilter-naivebayes.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/parsefilter-naivebayes.jarMD5: 1f8c5c65e15c1391f96db9cb39168221SHA1: ea521c024f7674bddb80da224cf37f1e7ad3bc97SHA256: 3e820031e65fbb13dff9af0b365d67d740713c9652ba54249a25e27b05e40ff8
Evidence Type Source Name Value Confidence Vendor file name parsefilter-naivebayes High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parsefilter Low Product file name parsefilter-naivebayes High Product jar package name naivebayes Low Product jar package name nutch Low Product jar package name parsefilter Low
slf4j-api-1.7.12.jarDescription:
The slf4j API File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/slf4j-api-1.7.12.jarMD5: 68910bf95dbcf90ce5859128f0f75d1eSHA1: 8e20852d05222dc286bf1c71d78d0531e177c317SHA256: 0aee9a77a4940d72932b0d0d9557793f872e66a03f598e473f45e7efecdccf99
Evidence Type Source Name Value Confidence Vendor pom url http://www.slf4j.org Highest Vendor pom groupid slf4j Highest Vendor pom artifactid slf4j-api Low Vendor Manifest bundle-symbolicname slf4j.api Medium Vendor pom parent-artifactid slf4j-parent Low Vendor manifest Bundle-Description The slf4j API Medium Vendor pom description The slf4j API Medium Vendor pom name SLF4J API Module High Vendor file name slf4j-api High Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor pom parent-groupid org.slf4j Medium Product pom parent-artifactid slf4j-parent Medium Product pom url http://www.slf4j.org Medium Product Manifest bundle-symbolicname slf4j.api Medium Product Manifest Bundle-Name slf4j-api Medium Product pom parent-groupid org.slf4j Low Product pom description The slf4j API Medium Product Manifest Implementation-Title slf4j-api High Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product pom artifactid slf4j-api Highest Product manifest Bundle-Description The slf4j API Medium Product pom name SLF4J API Module High Product file name slf4j-api High Product pom groupid slf4j Low Version Manifest Implementation-Version 1.7.12 High Version pom version 1.7.12 Highest Version file version 1.7.12 Highest
cpe: cpe:/a:slf4j:slf4j:1.7.12 Confidence :Low suppress maven: org.slf4j:slf4j-api:1.7.12 Confidence :High solr-commons-csv-3.5.0.jarDescription:
The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/solr-commons-csv-3.5.0.jar
MD5: 39315876eee49767a1c2946851278f5b
SHA1: 97ba33976975a85568a8bd579b885fe3b47f6c08
SHA256: d153b383d9de162bdd1b45da729943cc1dc779febe7fdc3dcfa751493068ad38
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom parent-artifactid commons-sandbox-parent Low Vendor pom groupid apache.commons Highest Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom url http://commons.apache.org/sandbox/csv/ Highest Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest bundle-symbolicname org.apache.commons.csv Medium Vendor Manifest bundle-docurl http://commons.apache.org/sandbox/csv/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom artifactid commons-csv Low Vendor manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Vendor pom name Commons CSV (Sandbox) High Vendor file name solr-commons-csv High Product Manifest bundle-symbolicname org.apache.commons.csv Medium Product Manifest bundle-docurl http://commons.apache.org/sandbox/csv/ Low Product pom groupid apache.commons Low Product Manifest specification-title Commons CSV (Sandbox) Medium Product pom parent-groupid org.apache.commons Low Product manifest Bundle-Description The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users. Low Product pom artifactid commons-csv Highest Product pom name Commons CSV (Sandbox) High Product pom parent-artifactid commons-sandbox-parent Medium Product file name solr-commons-csv High Product Manifest Implementation-Title Commons CSV (Sandbox) High Product pom url http://commons.apache.org/sandbox/csv/ Medium Product Manifest Bundle-Name Commons CSV (Sandbox) Medium Version pom version 1.0-SNAPSHOT Highest Version Manifest Implementation-Version 1.0-SNAPSHOT High
maven: org.apache.commons:commons-csv:1.0-SNAPSHOT Confidence :Highcpe: cpe:/a:apache:solr:1.0.0 Confidence :Highest suppress Published Vulnerabilities CVE-2009-3821 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in the Apache Solr Search (solr) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerable Software & Versions:
CVE-2012-6612 suppress
Severity:High CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, different vectors than CVE-2013-6407. Vulnerable Software & Versions: (show all )
CVE-2013-6397 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) or full pathname in the tr parameter to solr/select/, when the response writer (wt parameter) is set to XSLT. NOTE: this can be leveraged using a separate XXE (XML eXternal Entity) vulnerability to allow access to files across restricted network boundaries. Vulnerable Software & Versions: (show all )
CVE-2013-6407 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Vulnerable Software & Versions: (show all )
CVE-2013-6408 suppress
Severity:Medium CVSS Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6407. Vulnerable Software & Versions: (show all )
CVE-2015-8795 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web script or HTML via crafted fields that are mishandled during the rendering of the (1) Analysis page, related to webapp/web/js/scripts/analysis.js or (2) Schema-Browser page, related to webapp/web/js/scripts/schema-browser.js. Vulnerable Software & Versions:
CVE-2015-8796 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted schema-browse URL. Vulnerable Software & Versions:
CVE-2015-8797 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter to a plugins/cache URI. Vulnerable Software & Versions:
CVE-2017-3163 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access. Vulnerable Software & Versions: (show all )
t-digest-3.1.jarDescription:
Data structure which allows accurate estimation of quantiles and related rank statistics License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/t-digest-3.1.jar
MD5: ba0c00142170b71bd3ae17d2d7e4e38b
SHA1: 451ed219688aed5821a789428fd5e10426d11312
SHA256: 271f3a5a4bc79d7554c9e9e557669af83bcbda0db871e0b8c969d56e51c123a9
Evidence Type Source Name Value Confidence Vendor file name t-digest High Vendor pom groupid tdunning Highest Vendor pom artifactid t-digest Low Vendor jar package name math Low Vendor jar package name tdunning Low Vendor jar package name stats Low Vendor pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Vendor pom url tdunning/t-digest Highest Vendor pom name T-Digest High Product file name t-digest High Product jar package name math Low Product pom groupid tdunning Low Product pom url tdunning/t-digest High Product jar package name stats Low Product pom artifactid t-digest Highest Product pom description Data structure which allows accurate estimation of quantiles and related rank statistics Medium Product pom name T-Digest High Version file version 3.1 Highest Version pom version 3.1 Highest
maven: com.tdunning:t-digest:3.1 Confidence :High xmlpull-1.1.3.1.jarLicense:
Public Domain: http://www.xmlpull.org/v1/download/unpacked/LICENSE.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/xmlpull-1.1.3.1.jar
MD5: cc57dacc720eca721a50e78934b822d2
SHA1: 2b8e230d2ab644e4ecaa94db7cdedbc40c805dfa
SHA256: 34e08ee62116071cbb69c0ed70d15a7a5b208d62798c59f2120bb8929324cb63
Evidence Type Source Name Value Confidence Vendor pom url http://www.xmlpull.org Highest Vendor file name xmlpull High Vendor jar package name v1 Low Vendor pom name XML Pull Parsing API High Vendor central groupid xmlpull Highest Vendor pom groupid xmlpull Highest Vendor jar package name xmlpull Low Vendor pom artifactid xmlpull Low Product pom url http://www.xmlpull.org Medium Product file name xmlpull High Product jar package name v1 Low Product pom name XML Pull Parsing API High Product pom groupid xmlpull Low Product central artifactid xmlpull Highest Product pom artifactid xmlpull Highest Version central version 1.1.3.1 Highest Version file version 1.1.3.1 Highest Version pom version 1.1.3.1 Highest
xpp3_min-1.1.4c.jarDescription:
MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs such as Hotspot in JDK 1.4+. License:
Indiana University Extreme! Lab Software License, vesion 1.1.1: http://www.extreme.indiana.edu/viewcvs/~checkout~/XPP3/java/LICENSE.txt
Public Domain: http://creativecommons.org/licenses/publicdomain File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/xpp3_min-1.1.4c.jar
MD5: dcd95bcb84b09897b2b66d4684c040da
SHA1: 19d4e90b43059058f6e056f794f0ea4030d60b86
SHA256: bfc90e9e32d0eab1f397fb974b5f150a815188382ac41f372a7149d5bc178008
Evidence Type Source Name Value Confidence Vendor file name xpp3_min High Vendor jar package name v1 Low Vendor pom groupid xpp3 Highest Vendor pom name MXP1: Xml Pull Parser 3rd Edition (XPP3) High Vendor pom organization url http://www.extreme.indiana.edu/ Medium Vendor central groupid xpp3 Highest Vendor pom artifactid xpp3_min Low Vendor pom organization name Extreme! Lab, Indiana University High Vendor pom url http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/ Highest Vendor jar package name xmlpull Low Vendor pom description MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs ... Low Product file name xpp3_min High Product jar package name v1 Low Product pom organization name Extreme! Lab, Indiana University Low Product pom name MXP1: Xml Pull Parser 3rd Edition (XPP3) High Product central artifactid xpp3_min Highest Product pom organization url http://www.extreme.indiana.edu/ Low Product pom artifactid xpp3_min Highest Product pom url http://www.extreme.indiana.edu/xgws/xsoap/xpp/mxp1/ Medium Product pom groupid xpp3 Low Product pom description MXP1 is a stable XmlPull parsing engine that is based on ideas from XPP and in particular XPP2 but completely revised and rewritten to take the best advantage of latest JIT JVMs ... Low Version central version 1.1.4c Highest Version file version 1.1.4c Highest Version pom version 1.1.4c Highest
xstream-1.4.4.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-naivebayes/xstream-1.4.4.jarMD5: 4b2a6d156777975a7d15fe53a1c37fe7SHA1: 488e9e4a47afc81d2b2dec3c3eb3a4d0f10fe105SHA256: 29e83a585d56a76b1d417dade617465d18f8aab7bec1390b742508c7d173318a
Evidence Type Source Name Value Confidence Vendor jar package name thoughtworks Low Vendor pom parent-groupid com.thoughtworks.xstream Medium Vendor pom name XStream Core High Vendor pom groupid thoughtworks.xstream Highest Vendor jar package name xstream Low Vendor pom parent-artifactid xstream-parent Low Vendor pom artifactid xstream Low Vendor file name xstream High Product pom groupid thoughtworks.xstream Low Product pom artifactid xstream Highest Product pom name XStream Core High Product pom parent-artifactid xstream-parent Medium Product pom parent-groupid com.thoughtworks.xstream Low Product jar package name xstream Low Product file name xstream High Version pom version 1.4.4 Highest Version file version 1.4.4 Highest
cpe: cpe:/a:xstream_project:xstream:1.4.4 Confidence :Low suppress maven: com.thoughtworks.xstream:xstream:1.4.4 Confidence :High Published Vulnerabilities CVE-2016-3674 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) CWE: CWE-200 Information Exposure
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document. Vulnerable Software & Versions:
CVE-2017-7957 suppress
Severity:Medium CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P) CWE: CWE-20 Improper Input Validation
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call. Vulnerable Software & Versions:
parsefilter-regex.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parsefilter-regex/parsefilter-regex.jarMD5: f48bf959e08179c9297c791d16f82632SHA1: e11a556cfbfe2c475423271aeae7dd8527424375SHA256: 0e7542675c8990c1ba049e94bb13264bd8384aee61c74832e6f848f61c1b24f9
Evidence Type Source Name Value Confidence Vendor file name parsefilter-regex High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name parsefilter Low Product file name parsefilter-regex High Product jar package name nutch Low Product jar package name regex Low Product jar package name parsefilter Low
protocol-file.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-file/protocol-file.jarMD5: a0851d47b24f6bca0875b7482c978996SHA1: 694111f4518c7f5caf51b5ff81c8a373a93f5dbaSHA256: 5be1e78ad537ee763f94c2c14a969c2785e9567aac2f62febfa262a521312c00
Evidence Type Source Name Value Confidence Vendor file name protocol-file High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name protocol-file High Product jar package name protocol Low Product jar package name nutch Low Product jar package name file Low
commons-net-1.2.2.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-ftp/commons-net-1.2.2.jarMD5: 092ead7cc4989f3a14495f6006cf9d2fSHA1: 57a100f070def45b3161783235df6ba8c610ba17SHA256: 4a0232e659088776082f3b0af0ba28bca9531bb5a92276abc0a5344635ad5928
Evidence Type Source Name Value Confidence Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest extension-name commons-net Medium Vendor pom artifactid commons-net Low Vendor central groupid commons-net Highest Vendor file name commons-net High Vendor jar package name commons Low Vendor jar package name apache Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor jar package name net Low Vendor pom groupid commons-net Highest Product Manifest extension-name commons-net Medium Product Manifest Implementation-Title org.apache.commons.net High Product file name commons-net High Product jar package name commons Low Product pom artifactid commons-net Highest Product Manifest specification-title Jakarta Commons Net Medium Product pom groupid commons-net Low Product central artifactid commons-net Highest Product jar package name net Low Version Manifest Implementation-Version 1.2.2 High Version file version 1.2.2 Highest Version central version 1.2.2 Highest Version pom version 1.2.2 Highest
protocol-ftp.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-ftp/protocol-ftp.jarMD5: 094b5037e54589a3a3d537b3864a2412SHA1: 7d3a86c233e75c75b365ea7817b6b8986153bb14SHA256: 706f717638240cadc959f4119fe84479df1b88447ba982ddc0b034294606b819
Evidence Type Source Name Value Confidence Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor file name protocol-ftp High Vendor jar package name apache Low Product jar package name ftp Low Product jar package name protocol Low Product jar package name nutch Low Product file name protocol-ftp High
protocol-htmlunit.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-htmlunit/protocol-htmlunit.jarMD5: c426d5882ce36474cc3e871f716aa4ceSHA1: c6619101be9859a6b4a59f925e103d123a5fb627SHA256: 70a651f65b9583bd249b896561df121a5eb5d6f177003379632f64976527fe3a
Evidence Type Source Name Value Confidence Vendor file name protocol-htmlunit High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name protocol-htmlunit High Product jar package name protocol Low Product jar package name nutch Low Product jar package name htmlunit Low
protocol-http.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-http/protocol-http.jarMD5: 26972505d2681ce76af41275af694270SHA1: f64bc3b171e40ec408902f86802ff199a3b4dd00SHA256: ef21e73f47e0653be614df7096fbae96eddfa25cd85f2f3ec636768ff5b3f42a
Evidence Type Source Name Value Confidence Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name protocol-http High Product jar package name http Low Product jar package name protocol Low Product jar package name nutch Low Product file name protocol-http High
jsoup-1.8.1.jarDescription:
jsoup HTML parser License:
The MIT License: http://jsoup.com/license File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-httpclient/jsoup-1.8.1.jar
MD5: 3e473766c65d0f19bfeceaf810ef2f07
SHA1: 1eb6690b0c629d7000c77a72df5e822fb974f521
SHA256: 974de5e63ab0c23b5278e1202b89a6e80e6048337dba768cefea9d7d4b0c688f
Evidence Type Source Name Value Confidence Vendor pom organization url http://jonathanhedley.com/ Medium Vendor pom organization name Jonathan Hedley High Vendor manifest Bundle-Description jsoup HTML parser Medium Vendor pom description jsoup HTML parser Medium Vendor pom url http://jsoup.org/ Highest Vendor pom groupid jsoup Highest Vendor pom name jsoup High Vendor file name jsoup High Vendor Manifest bundle-docurl http://jsoup.org/ Low Vendor Manifest bundle-symbolicname org.jsoup Medium Vendor pom artifactid jsoup Low Product pom description jsoup HTML parser Medium Product pom organization url http://jonathanhedley.com/ Low Product pom organization name Jonathan Hedley Low Product pom name jsoup High Product Manifest Bundle-Name jsoup Medium Product pom artifactid jsoup Highest Product Manifest bundle-docurl http://jsoup.org/ Low Product Manifest bundle-symbolicname org.jsoup Medium Product pom url http://jsoup.org/ Medium Product manifest Bundle-Description jsoup HTML parser Medium Product pom groupid jsoup Low Product file name jsoup High Version pom version 1.8.1 Highest Version file version 1.8.1 Highest
maven: org.jsoup:jsoup:1.8.1 Confidence :Highcpe: cpe:/a:jsoup:jsoup:1.8.1 Confidence :Low suppress Published Vulnerabilities CVE-2015-6748 suppress
Severity:Medium CVSS Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N) CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3. Vulnerable Software & Versions:
protocol-httpclient.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-httpclient/protocol-httpclient.jarMD5: 0beb41a639030995a7a2d96473857b80SHA1: 0a72d62a5c4fe588fc5595e9bef55c8596f01849SHA256: cf74f6881846a5db49286e8f76a2eec10051b65e0670307ac0daaa5f8fb73042
Evidence Type Source Name Value Confidence Vendor file name protocol-httpclient High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name protocol-httpclient High Product jar package name httpclient Low Product jar package name protocol Low Product jar package name nutch Low
cpe: cpe:/a:apache:httpclient:- Confidence :Low suppress protocol-interactiveselenium.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-interactiveselenium/protocol-interactiveselenium.jarMD5: f7ed8c19b663a37f7296fab5e6c9ce0eSHA1: 35eb72d370bbe202df84f98bf3ccb7bb1fd45e8bSHA256: 4beec81e881201e0a730f57b37e5b41c908cb042aec410223daf22eb1fe07b41
Evidence Type Source Name Value Confidence Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name protocol-interactiveselenium High Product jar package name protocol Low Product jar package name nutch Low Product jar package name interactiveselenium Low Product file name protocol-interactiveselenium High
okhttp-3.10.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-okhttp/okhttp-3.10.0.jarMD5: 6aaeda95994c63c8901930c2866ba04bSHA1: 7ef0f1d95bf4c0b3ba30bbae25e0e562b05cf75eSHA256: 4aca3e552afb1ceb47f8956685f6295a276e49fa03f9066f8b6be83bec56fb66
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid parent Low Vendor pom name OkHttp High Vendor Manifest automatic-module-name okhttp3 Medium Vendor pom artifactid okhttp Low Vendor pom parent-groupid com.squareup.okhttp3 Medium Vendor file name okhttp High Vendor pom groupid squareup.okhttp3 Highest Product pom artifactid okhttp Highest Product pom name OkHttp High Product Manifest automatic-module-name okhttp3 Medium Product pom parent-groupid com.squareup.okhttp3 Low Product file name okhttp High Product pom groupid squareup.okhttp3 Low Product pom parent-artifactid parent Medium Version pom version 3.10.0 Highest Version file version 3.10.0 Highest
cpe: cpe:/a:squareup:okhttp:3.10.0 Confidence :Low suppress cpe: cpe:/a:squareup:okhttp3:3.10.0 Confidence :Low suppress maven: com.squareup.okhttp3:okhttp:3.10.0 Confidence :High okio-1.14.0.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-okhttp/okio-1.14.0.jarMD5: ae447128b0a0625524178873c6b9aa12SHA1: 102d7be47241d781ef95f1581d414b0943053130SHA256: 4633c331f50642ebe795dc089d6a5928aff43071c9d17e7840a009eea2fe95a3
Evidence Type Source Name Value Confidence Vendor pom groupid squareup.okio Highest Vendor file name okio High Vendor pom parent-artifactid okio-parent Low Vendor pom name Okio High Vendor pom artifactid okio Low Vendor pom parent-groupid com.squareup.okio Medium Vendor Manifest automatic-module-name okio Medium Product file name okio High Product pom artifactid okio Highest Product pom name Okio High Product pom groupid squareup.okio Low Product pom parent-artifactid okio-parent Medium Product Manifest automatic-module-name okio Medium Product pom parent-groupid com.squareup.okio Low Version file version 1.14.0 Highest Version pom version 1.14.0 Highest
maven: com.squareup.okio:okio:1.14.0 Confidence :High protocol-okhttp.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-okhttp/protocol-okhttp.jarMD5: 85d5cf0ff16219c8d35aed500607c9b4SHA1: 42f01e2e0995b96777eec0da3e8fcb31a5896754SHA256: a71f9cbac853dcc75b260263f3efad2b6a4dd6886a496bbef6e3affa82c054b3
Evidence Type Source Name Value Confidence Vendor file name protocol-okhttp High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name okhttp Low Product file name protocol-okhttp High Product jar package name protocol Low Product jar package name nutch Low
protocol-selenium.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/protocol-selenium/protocol-selenium.jarMD5: dac2fb01d3f2856da935dff00ff71959SHA1: 7cd5d1e05ae9dec4444e52760554f36b1e0288d6SHA256: 5f0c11c3eda812efd478ccc615491f407e3ad8e87dcc3a18361ad2c0526a33d7
Evidence Type Source Name Value Confidence Vendor file name protocol-selenium High Vendor jar package name protocol Low Vendor jar package name nutch Low Vendor jar package name apache Low Product file name protocol-selenium High Product jar package name selenium Low Product jar package name protocol Low Product jar package name nutch Low
publish-rabbitmq.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/publish-rabbitmq/publish-rabbitmq.jarMD5: 2f4695778e25565afb1d89957be48cffSHA1: d92654cceca35d6253418acacb9fc285191f0b56SHA256: 96963443eb089139541878374698cc5b46aa0836f568a57afb1c7c57fb48e869
Evidence Type Source Name Value Confidence Vendor file name publish-rabbitmq High Vendor jar package name publisher Low Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name rabbitmq Low Product file name publish-rabbitmq High Product jar package name publisher Low Product jar package name nutch Low
scoring-depth.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-depth/scoring-depth.jarMD5: 24f73b5f5a5bd6d967cd156c23bf3e0bSHA1: 178730354ac2b55aed60bf220e566ddace70143aSHA256: 325d83a968de9e73132cad2213baa60f34f352cfae65717e80b65dc192bf5390
Evidence Type Source Name Value Confidence Vendor file name scoring-depth High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name scoring Low Product file name scoring-depth High Product jar package name depth Low Product jar package name nutch Low Product jar package name scoring Low
scoring-link.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-link/scoring-link.jarMD5: a31d453d39ad96aac7060b6a9f829240SHA1: cfc8930ec028b36ae5dca86275f14538cc43b2abSHA256: 236ea64da734c3b03f2d44a2a1a425e115467924cc4e7ccb2ca1ae01b4ee53f5
Evidence Type Source Name Value Confidence Vendor file name scoring-link High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name scoring Low Product jar package name link Low Product file name scoring-link High Product jar package name nutch Low Product jar package name scoring Low
scoring-opic.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-opic/scoring-opic.jarMD5: 96f4f4708b42576afd090a1efd66a8baSHA1: df58d1aa16ccb017cf44a60a2c47c295cc64c726SHA256: 8e9c1f2e565f422921e1b9715ec29ca5b2491297cfeebb3731308e18e1c8375a
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor file name scoring-opic High Vendor jar package name apache Low Vendor jar package name scoring Low Product jar package name nutch Low Product file name scoring-opic High Product jar package name scoring Low Product jar package name opic Low
scoring-orphan.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-orphan/scoring-orphan.jarMD5: b5f29af8e03f328cf25e61dbe73ad275SHA1: b9fb07e39dd0ba376fd79f7545b75e296d901c09SHA256: 250e3c5d95391eb4730dbd5982d827bf2804b22e4d3d60a4b12ea0bfa73e81ec
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name scoring-orphan High Vendor jar package name scoring Low Product jar package name orphan Low Product jar package name nutch Low Product file name scoring-orphan High Product jar package name scoring Low
scoring-similarity.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/scoring-similarity/scoring-similarity.jarMD5: ff9946dccb1cec9c94b883c28b4ede11SHA1: 262d04d9c94b5a278ed87737d780ac977f314c83SHA256: 5f46bad394a3b679801103a180671df65a8353cf18b295be3b1f82eadab54d8f
Evidence Type Source Name Value Confidence Vendor file name scoring-similarity High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name scoring Low Product file name scoring-similarity High Product jar package name nutch Low Product jar package name scoring Low Product jar package name similarity Low
subcollection.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/subcollection/subcollection.jarMD5: d9750009884f8ac22c7a970eab9c0784SHA1: 0c5844345b3b5bda67e5f5bd987b68e707bf6b32SHA256: 889ca4b09ffaea9009d4f3b1e56fd4becf99f2b891cd7e9e5407caea565ec55e
Evidence Type Source Name Value Confidence Vendor file name subcollection High Vendor jar package name nutch Low Vendor jar package name apache Low Product file name subcollection High Product jar package name subcollection Low Product jar package name nutch Low
tld.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/tld/tld.jarMD5: f7a612d9c3be9a8ddbeb6663a8ac229eSHA1: d0121441ca955e1405ef8e81b2285cf63de58686SHA256: 0ad12b15d8d07e191f959caea2b9995d75796449872225f467e611a26e3eaf86
Evidence Type Source Name Value Confidence Vendor file name tld High Vendor jar package name nutch Low Vendor jar package name apache Low Product jar package name tld Low Product file name tld High Product jar package name nutch Low
automaton-1.11-8.jarDescription:
A DFA/NFA (finite-state automata) implementation with
Unicode alphabet (UTF16) and support for the standard regular
expression operations (concatenation, union, Kleene star) and a number
of non-standard ones (intersection, complement, etc.) License:
BSD: http://www.opensource.org/licenses/bsd-license.php File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-automaton/automaton-1.11-8.jar
MD5: 3467dcbbba2fe68a4e07a5826988e034
SHA1: 6ebfa65eb431ff4b715a23be7a750cbc4cc96d0f
SHA256: a24475f6ccfe1cc7a4fe9e34e05ce687b0ce0c6e8cb781e0eced3b186482c61e
Evidence Type Source Name Value Confidence Vendor jar package name automaton Low Vendor pom name Automaton High Vendor pom url http://www.brics.dk/automaton/ Highest Vendor central groupid dk.brics.automaton Highest Vendor pom description A DFA/NFA (finite-state automata) implementation with Unicode alphabet (UTF16) and support for the standard regular expression operations (concatenation, union, Kleene star) and a number of non-standard ones (intersection, complement, etc.) Low Vendor pom groupid dk.brics.automaton Highest Vendor file name automaton High Vendor jar package name brics Low Vendor jar package name dk Low Vendor pom artifactid automaton Low Product jar package name automaton Low Product pom name Automaton High Product pom url http://www.brics.dk/automaton/ Medium Product central artifactid automaton Highest Product pom groupid dk.brics.automaton Low Product pom artifactid automaton Highest Product pom description A DFA/NFA (finite-state automata) implementation with Unicode alphabet (UTF16) and support for the standard regular expression operations (concatenation, union, Kleene star) and a number of non-standard ones (intersection, complement, etc.) Low Product file name automaton High Product jar package name brics Low Version central version 1.11-8 Highest Version file version 1.11.8 Highest Version pom version 1.11-8 Highest
urlfilter-automaton.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-automaton/urlfilter-automaton.jarMD5: 7ab29bf63aa5670c3644c0eeb9517888SHA1: 91e645c387ac0e220875720e2b4b39d7ce586db4SHA256: 8a4e1bc19dd3c696db71a10c4163099ea172595f96de3d21c98d2b9b3f0e8649
Evidence Type Source Name Value Confidence Vendor file name urlfilter-automaton High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name urlfilter Low Product jar package name automaton Low Product file name urlfilter-automaton High Product jar package name nutch Low Product jar package name urlfilter Low
urlfilter-domain.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-domain/urlfilter-domain.jarMD5: 89e778ce8db716a8fc2ccff88490c22eSHA1: 41e15727e47ecd7ed8182167e261e53aebcee2f9SHA256: 7ec04ee62bc51239a3eb431f109f77f08d66b8ec76a389544d0f37503596d6cf
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlfilter-domain High Vendor jar package name urlfilter Low Product jar package name domain Low Product jar package name nutch Low Product file name urlfilter-domain High Product jar package name urlfilter Low
urlfilter-domainblacklist.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-domainblacklist/urlfilter-domainblacklist.jarMD5: 72d1c7fa468baf91dd503c4cbbb33ad7SHA1: 45013d8a79fcd26cd0f0ff8d5f176a65818893ccSHA256: 63ef35f1f647c04784b45541e2a2b9d72761b61472f95f9f8170ba37cf13a67a
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlfilter-domainblacklist High Vendor jar package name urlfilter Low Product jar package name nutch Low Product jar package name domainblacklist Low Product file name urlfilter-domainblacklist High Product jar package name urlfilter Low
urlfilter-ignoreexempt.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-ignoreexempt/urlfilter-ignoreexempt.jarMD5: 27434f9c0eec3f37851ebbb2cc767400SHA1: 032ae057252aa8b51ed5558de8c601c4e11b91c8SHA256: c1eb53da2fbe1c8d0b3d44e67650de31c91f640117a4d0a78f885942c0788257
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlfilter-ignoreexempt High Vendor jar package name urlfilter Low Product jar package name ignoreexempt Low Product jar package name nutch Low Product file name urlfilter-ignoreexempt High Product jar package name urlfilter Low
urlfilter-prefix.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-prefix/urlfilter-prefix.jarMD5: 99320681883413420be903561f28b26eSHA1: 84615ef0e1944e5e05afd6afd35f85f9d42fe3d7SHA256: d32a3e6e87dcda25e66b78cf4c4fc2e5691ca1b59906888107009feddae6681a
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name urlfilter Low Vendor file name urlfilter-prefix High Product jar package name prefix Low Product jar package name nutch Low Product jar package name urlfilter Low Product file name urlfilter-prefix High
urlfilter-regex.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-regex/urlfilter-regex.jarMD5: 32ecebaabe598accd6e971945ba3250dSHA1: 4895ba2438433cef2a63701bc2f97b0f695baf82SHA256: aeac33eca7a90c5dc677937e34f450b51aa54be53b736e79972c0ea78136b35e
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlfilter-regex High Vendor jar package name urlfilter Low Product jar package name nutch Low Product file name urlfilter-regex High Product jar package name regex Low Product jar package name urlfilter Low
urlfilter-suffix.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-suffix/urlfilter-suffix.jarMD5: 812d0858ff1b54b2267e26a856815862SHA1: 39fe03565c1c0e889e086faafdcf5cde473fcf11SHA256: e13da7b63cc41b0ce21babf8021cb424c3f6ac9607156048fbac6a194ba3183d
Evidence Type Source Name Value Confidence Vendor file name urlfilter-suffix High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name urlfilter Low Product jar package name suffix Low Product file name urlfilter-suffix High Product jar package name nutch Low Product jar package name urlfilter Low
urlfilter-validator.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlfilter-validator/urlfilter-validator.jarMD5: bc90ef3f46d09088b9d7e2ccaa79de2fSHA1: f010c15ce02256f1c9c40ad4a7e71c9fd74b1eb6SHA256: 3d4ac396e02ed90129bb66ba79036f27a4c7031e71dfd048ebc29f96c6a312bc
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlfilter-validator High Vendor jar package name urlfilter Low Product jar package name nutch Low Product file name urlfilter-validator High Product jar package name urlfilter Low Product jar package name validator Low
urlmeta.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlmeta/urlmeta.jarMD5: a828c63e4a85805e833a322bea4a43d8SHA1: 65ffc65336f25b56945c53db7245862cc49efc00SHA256: 224652b35d67c90f300ef265751206791e862290318a58d6a05fc2333c3b9f00
Evidence Type Source Name Value Confidence Vendor file name urlmeta High Vendor jar package name nutch Low Vendor jar package name apache Low Product file name urlmeta High Product jar package name nutch Low Product jar package name urlmeta Low
urlnormalizer-ajax.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-ajax/urlnormalizer-ajax.jarMD5: 7e5dc387ee1aa74176b7010152a845ccSHA1: 51e913dc0608d5e90b513915ff179539dcec2da2SHA256: d539b95410daf5de5eaa40d59bd43db7904b5709d8ec0fec7fba739dc84e21fe
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlnormalizer-ajax High Vendor jar package name net Low Product jar package name urlnormalizer Low Product jar package name nutch Low Product file name urlnormalizer-ajax High Product jar package name net Low
urlnormalizer-basic.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-basic/urlnormalizer-basic.jarMD5: 3f79dabd57252939d10d95f42b9a19d6SHA1: 2f61082282732671c82f252dda981a8535f1b4b0SHA256: a6869c583bbad84726984dd990ad790bb120180159bde97d077639431091ac6c
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlnormalizer-basic High Vendor jar package name net Low Product jar package name urlnormalizer Low Product jar package name nutch Low Product file name urlnormalizer-basic High Product jar package name net Low
urlnormalizer-host.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-host/urlnormalizer-host.jarMD5: 7d805d477a24c4ae8a5d7f6b7e47c8f8SHA1: 9d5450300641a214f71be880f8e4b97795f7f2daSHA256: 136df24df848c1140b1d8b1ec7002b281b53c761745bcaa846b0723fbb15b559
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor file name urlnormalizer-host High Vendor jar package name apache Low Vendor jar package name net Low Product jar package name urlnormalizer Low Product jar package name nutch Low Product file name urlnormalizer-host High Product jar package name net Low
urlnormalizer-pass.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-pass/urlnormalizer-pass.jarMD5: 6f8e3d2248e6469c249d4a66e633e395SHA1: c90297abc60f5bd4aa37487a3897820be4d5d803SHA256: 6843a7e29a552012dc475f48c5801da0fb73ee76968f5254d7e6c54d598261f1
Evidence Type Source Name Value Confidence Vendor file name urlnormalizer-pass High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name net Low Product file name urlnormalizer-pass High Product jar package name urlnormalizer Low Product jar package name nutch Low Product jar package name net Low
urlnormalizer-protocol.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-protocol/urlnormalizer-protocol.jarMD5: b7aa60c29e8b99bdd3ba5a97f7996a8eSHA1: 31b5f800c1bc99ed1e2932b93c1584b5bdbf83f3SHA256: f63f8173e4a68cf0b2317db64b8217ecc6162d9cb26082b0e61f20ef4af1813e
Evidence Type Source Name Value Confidence Vendor file name urlnormalizer-protocol High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name net Low Product file name urlnormalizer-protocol High Product jar package name urlnormalizer Low Product jar package name nutch Low Product jar package name net Low
urlnormalizer-querystring.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-querystring/urlnormalizer-querystring.jarMD5: fb22712e11bd3b2e6cf49254f648f607SHA1: f5632d882a0bf27fbb063d087f71870286252c27SHA256: 0bb521e7fa3da2c70b7cf5017f39b8d00267de3722a71a6da8bc19236653f743
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlnormalizer-querystring High Vendor jar package name net Low Product jar package name urlnormalizer Low Product jar package name nutch Low Product file name urlnormalizer-querystring High Product jar package name net Low
urlnormalizer-regex.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-regex/urlnormalizer-regex.jarMD5: 3827bfd63ba177ae0bff3975a45b8430SHA1: 7f91f5dc66ae64606490d8b04bd0350cac8c058aSHA256: 237b41f81f0affa927936f8840d52274bd54882cec4c578ca64f71191f5fbbc5
Evidence Type Source Name Value Confidence Vendor file name urlnormalizer-regex High Vendor jar package name nutch Low Vendor jar package name apache Low Vendor jar package name net Low Product file name urlnormalizer-regex High Product jar package name urlnormalizer Low Product jar package name nutch Low Product jar package name net Low
urlnormalizer-slash.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/urlnormalizer-slash/urlnormalizer-slash.jarMD5: cbef3537b94e5e78cbd0eefc5addcf67SHA1: 26f50216e943d29b532c662f334f4fba99944e2dSHA256: 3018b4081233ac33d022d10b6e18ede0dd885d81a363cd62d74ce10317bcd2a2
Evidence Type Source Name Value Confidence Vendor jar package name nutch Low Vendor jar package name apache Low Vendor file name urlnormalizer-slash High Vendor jar package name net Low Product jar package name urlnormalizer Low Product jar package name nutch Low Product file name urlnormalizer-slash High Product jar package name net Low
leveldbjni-all-1.8.jar: leveldbjni.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/leveldbjni-all-1.8.jar/META-INF/native/windows32/leveldbjni.dllMD5: 551b9310a9ed358359296a89715df2f4SHA1: bba450e93688b872b3fcaa31e8457950e97d8429SHA256: 3cf3f6284f99acad369a15f0b4eca8e0dec2b0342651c519e4665570da8a68ee
Evidence Type Source Name Value Confidence Vendor file name leveldbjni High Product file name leveldbjni High
leveldbjni-all-1.8.jar: leveldbjni.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/leveldbjni-all-1.8.jar/META-INF/native/windows64/leveldbjni.dllMD5: 4b6fa20009ca1eb556e752671461a3f2SHA1: 978ca9c96c03eb220556ce5bc96c715f95a0967cSHA256: 7794f7bbc848d1a9ad98996f2c68a1cf12ac17562f646c6d7f5733404a7b5ef1
Evidence Type Source Name Value Confidence Vendor file name leveldbjni High Product file name leveldbjni High
snappy-java-1.0.4.1.jar: snappyjava.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/snappy-java-1.0.4.1.jar/org/xerial/snappy/native/Windows/amd64/snappyjava.dllMD5: 09989290a9d23aa887ad3919c8daf6bdSHA1: 1ca8cb25c14aa3574e1c2d362e11b97b889dc466SHA256: f0bcc10fb910803d2ce1dfc36fe792066a27570ecacdeedf9d98e7b758f37b44
Evidence Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
snappy-java-1.0.4.1.jar: snappyjava.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/snappy-java-1.0.4.1.jar/org/xerial/snappy/native/Windows/x86/snappyjava.dllMD5: 02d0731854ac1be878dc4d6e2555aa2dSHA1: baf474b2ad0b6873e2d99764ea61dcb42f850e24SHA256: e063f8c7329c9e95f61fac2d2c91330440cd45ff832582a46080c082fa8a0c56
Evidence Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
ehcache-core-2.6.2.jar: sizeof-agent.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/ehcache-core-2.6.2.jar/net/sf/ehcache/pool/sizeof/sizeof-agent.jarMD5: 5ad919b3ac0516897bdca079c9a222a8SHA1: e86399a80ae6a6c7a563717eaa0ce9ba4708571cSHA256: 3bcd560ca5f05248db9b689244b043e9c7549e3791281631a64e5dfff15870d2
Evidence Type Source Name Value Confidence Vendor Manifest hudson-build-number 6 Low Vendor file name sizeof-agent High Vendor pom name Ehcache Size-Of Agent High Vendor Manifest jenkins-build-number 6 Low Vendor pom artifactid sizeof-agent Low Vendor pom url http://www.ehcache.org Highest Vendor Manifest hudson-project sizeof-agent_sizeof-agent-1.0.1_publisher Low Vendor pom groupid net.sf.ehcache Highest Vendor pom parent-artifactid ehcache-parent Low Vendor Manifest jenkins-project sizeof-agent_sizeof-agent-1.0.1_publisher Low Product Manifest hudson-build-number 6 Low Product file name sizeof-agent High Product pom url http://www.ehcache.org Medium Product pom name Ehcache Size-Of Agent High Product Manifest jenkins-build-number 6 Low Product Manifest hudson-project sizeof-agent_sizeof-agent-1.0.1_publisher Low Product pom artifactid sizeof-agent Highest Product Manifest jenkins-project sizeof-agent_sizeof-agent-1.0.1_publisher Low Product pom groupid net.sf.ehcache Low Product pom parent-artifactid ehcache-parent Medium Version Manifest hudson-version 1.449 Medium Version Manifest hudson-build-number 6 Low Version Manifest jenkins-build-number 6 Low Version pom version 1.0.1 Highest Version Manifest jenkins-version 1.449 Medium Version pom parent-version 1.0.1 Low
maven: net.sf.ehcache:sizeof-agent:1.0.1 Confidence :High jna-4.1.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jna-4.1.0.jar/com/sun/jna/w32ce-arm/jnidispatch.dllMD5: 57697cbdd321ae7d06f5da04e821f908SHA1: 67167f2b2fce8db5f9f64a372b0da54730d3ee51SHA256: 361e173e6e50cb1bf8b7fab38c1ff99686ea819e58ee30348e7756cb0418a9f6
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
Related Dependencies jna-4.2.2.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jna-4.2.2.jar/com/sun/jna/w32ce-arm/jnidispatch.dll MD5: 57697cbdd321ae7d06f5da04e821f908 SHA1: 67167f2b2fce8db5f9f64a372b0da54730d3ee51 SHA256: 361e173e6e50cb1bf8b7fab38c1ff99686ea819e58ee30348e7756cb0418a9f6 jna-4.1.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jna-4.1.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dllMD5: 06b2f1f909d2436dff20d7a668ef26a9SHA1: bd1bdda9a91f3b0d9067e323f7394bef933f81f6SHA256: e7864cb5509990ccf3f3d8a2ad1eaf41491ebb82df35408ee79957385d8355b3
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-4.1.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/jna-4.1.0.jar/com/sun/jna/win32-x86/jnidispatch.dllMD5: 05a72ada9247aeb114a9ef01a394b6c4SHA1: 8b32cc82740fc62afdf5ea211f1ca8bb72269bbfSHA256: 12c6ecdab2cab372548ebf059548873a2f414a1b7b4389502702b7ab912f9a39
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-4.2.2.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jna-4.2.2.jar/com/sun/jna/win32-x86-64/jnidispatch.dllMD5: b04c620540a971e93390ba9ec7cc8641SHA1: cb612a48eff7c60c40a6bb64b78fb47d5709f5e7SHA256: 1b2af8b31416f68051db213bcdcf82775e29191b6d069c327988e02e654030ad
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-4.2.2.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/jna-4.2.2.jar/com/sun/jna/win32-x86/jnidispatch.dllMD5: d2f0da769204b8c45c207d8f3d8fc37eSHA1: c6870c1b8be2dbf1d737c918963d2f183aa778e1SHA256: 064c34c9f92f6aca636b5b53006b539853268570f048f33155c6a6635d6c0e7b
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-3.4.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jna-3.4.0.jar/com/sun/jna/win32-amd64/jnidispatch.dllMD5: 715c98aa5955e7e07fb99d87f522e73aSHA1: 0981d98dd34df47cd4bb915e5d20b5750eb33ef2SHA256: b7f1133492a060a857a1ef0877e18e382f1c418e5dac2e674abc65f336241d61
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-3.4.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jna-3.4.0.jar/com/sun/jna/w32ce-arm/jnidispatch.dllMD5: f9761a775488b6128b46314574b59906SHA1: de3b707726ebc4496e55509d1ceba8bcf6ad5b9cSHA256: 1a4ea4533acc49657be3144810be8f2a33e1b9cefc979951f2efbdb07bb4c7e7
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-3.4.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/jna-3.4.0.jar/com/sun/jna/win32-x86/jnidispatch.dllMD5: 50754352847b5e71e11abf4d30407148SHA1: bb2fe694c6d7bca89fd431c0984c832ed35a4f0eSHA256: 3c99066b7516dcaa4f1d9ef596aed1398321bb356a46fbb3dbea4d700a32a3c3
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
operalaunchers-1.1.jar: launcher-win32-i86pc.exeFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/lib-htmlunit/operalaunchers-1.1.jar/launchers/launcher-win32-i86pc.exeMD5: 471167643016e8b2f444e8f5ca380af1SHA1: d3a503274506205ef5781b14cf26f0c08997d591SHA256: bdac0e75ee6d9801714b756798e219f5f5666155d28ce6eba7ecea6d4e58ebd7
Evidence Type Source Name Value Confidence Vendor file name launcher-win32-i86pc High Product file name launcher-win32-i86pc High Version file name launcher-win32-i86pc Medium Version file version 32.i86 Highest
jna-4.3.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jna-4.3.0.jar/com/sun/jna/win32-x86-64/jnidispatch.dllMD5: 6f86fbe1eb1ea0c42dcb5556cc1965b2SHA1: 53b5e54c69d9830b331ab7d9c72cf9579e678293SHA256: 3d03802ea632d4a9b3d227f48620483a204860215cef882c0590cb87191eeac0
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
jna-4.3.0.jar: jnidispatch.dllFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/jna-4.3.0.jar/com/sun/jna/win32-x86/jnidispatch.dllMD5: cae90c2a46596b978a8b60c40a40f7b6SHA1: 51833911ce8793e80abaf6284694d4c099a5e800SHA256: 199ce3ece25457536d64413df1fc314f2627e46344548fab8d7af25d27a0f409
Evidence Type Source Name Value Confidence Vendor file name jnidispatch High Product file name jnidispatch High
antlr4-4.5.1.jar (shaded: org.antlr:antlr4-runtime:4.5.1)Description:
The ANTLR 4 Runtime File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/antlr4-4.5.1.jar/META-INF/maven/org.antlr/antlr4-runtime/pom.xmlMD5: 9d1d96c3ffedf7f287c0de8032becddeSHA1: 47a3c5bc681610d2ca3ec9e499eaaece74fa89c1SHA256: 4f7e70ffbcf4223f836b620034d0f0eb5ee67a32a956ef726d2a22337285e7b7
Evidence Type Source Name Value Confidence Vendor pom groupid antlr Highest Vendor pom name ANTLR 4 Runtime High Vendor pom parent-artifactid antlr4-master Low Vendor pom parent-groupid org.antlr Medium Vendor pom artifactid antlr4-runtime Low Vendor pom description The ANTLR 4 Runtime Medium Product pom parent-groupid org.antlr Low Product pom name ANTLR 4 Runtime High Product pom artifactid antlr4-runtime Highest Product pom groupid antlr Low Product pom parent-artifactid antlr4-master Medium Product pom description The ANTLR 4 Runtime Medium Version pom version 4.5.1 Highest
maven: org.antlr:antlr4-runtime:4.5.1 Confidence :High antlr4-4.5.1.jar (shaded: org.abego.treelayout:org.abego.treelayout.core:1.0.1)Description:
Efficient and customizable TreeLayout Algorithm in Java. License:
BSD 3-Clause "New" or "Revised" License (BSD-3-Clause): http://treelayout.googlecode.com/files/LICENSE.TXT File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/antlr4-4.5.1.jar/META-INF/maven/org.abego.treelayout/org.abego.treelayout.core/pom.xml
MD5: 0fd589167b7a434db7580a66737649b9
SHA1: e8da72b4e31c6610ca57fde5f73d5ee4d1d5f957
SHA256: 7c8cbfca64e970440d4f287f3516a96c00692a0394fca1d57b12a97a96f0ea11
Evidence Type Source Name Value Confidence Vendor pom name abego TreeLayout Core High Vendor pom description Efficient and customizable TreeLayout Algorithm in Java. Medium Vendor pom groupid abego.treelayout Highest Vendor pom organization name abego Software GmbH, Germany High Vendor pom artifactid abego.treelayout.core Low Vendor pom url http://code.google.com/p/treelayout/ Highest Vendor pom organization url http://abego-software.de Medium Product pom name abego TreeLayout Core High Product pom description Efficient and customizable TreeLayout Algorithm in Java. Medium Product pom organization name abego Software GmbH, Germany Low Product pom groupid abego.treelayout Low Product pom url http://code.google.com/p/treelayout/ Medium Product pom artifactid abego.treelayout.core Highest Product pom organization url http://abego-software.de Low Version pom version 1.0.1 Highest
maven: org.abego.treelayout:org.abego.treelayout.core:1.0.1 Confidence :High htrace-core-3.1.0-incubating.jar (shaded: commons-logging:commons-logging:1.1.1)Description:
Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/htrace-core-3.1.0-incubating.jar/META-INF/maven/commons-logging/commons-logging/pom.xmlMD5: 976d812430b8246deeaf2ea54610f263SHA1: 76672afb562b9e903674ad3a544cdf2092f1faa3SHA256: d0f2e16d054e8bb97add9ca26525eb2346f692809fcd2a28787da8ceb3c35ee8
Evidence Type Source Name Value Confidence Vendor pom parent-groupid org.apache.commons Medium Vendor pom artifactid commons-logging Low Vendor pom groupid commons-logging Highest Vendor pom description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Vendor pom parent-artifactid commons-parent Low Vendor pom name Commons Logging High Vendor pom url http://commons.apache.org/logging Highest Product pom parent-groupid org.apache.commons Low Product pom parent-artifactid commons-parent Medium Product pom groupid commons-logging Low Product pom description Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems. Low Product pom artifactid commons-logging Highest Product pom name Commons Logging High Product pom url http://commons.apache.org/logging Medium Version pom version 1.1.1 Highest Version pom parent-version 1.1.1 Low
maven: commons-logging:commons-logging:1.1.1 Confidence :High jaxb-core-2.2.11.jar (shaded: com.sun.istack:istack-commons-runtime:2.21)File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-core-2.2.11.jar/META-INF/maven/com.sun.istack/istack-commons-runtime/pom.xmlMD5: caebf95d1d57fc0321b36137e246e192SHA1: 04c234cf684a202c5c9bb7f0a198ba97e958f8f4SHA256: ebe7137b5fbfd050545f9a7f3f339ae55beb0b53755071b4fd62aa024c626d1c
Evidence Type Source Name Value Confidence Vendor pom groupid sun.istack Highest Vendor pom artifactid istack-commons-runtime Low Vendor pom name istack common utility code runtime High Vendor pom parent-groupid com.sun.istack Medium Vendor pom parent-artifactid istack-commons Low Product pom parent-artifactid istack-commons Medium Product pom parent-groupid com.sun.istack Low Product pom name istack common utility code runtime High Product pom artifactid istack-commons-runtime Highest Product pom groupid sun.istack Low Version pom version 2.21 Highest
maven: com.sun.istack:istack-commons-runtime:2.21 Confidence :High jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-core:2.2.11)Description:
JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-core-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/jaxb-core/pom.xmlMD5: e43898fed87ecb9838381436b212416cSHA1: f3208abdc61be827cf28838c3881213648807821SHA256: ec31409f203bcabf99534f59231ec0576d875d4d4b7349b09566a7a8c8179b24
Evidence Type Source Name Value Confidence Vendor pom artifactid jaxb-core Low Vendor pom description JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. Medium Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom parent-artifactid jaxb-parent Low Vendor pom name JAXB Core High Vendor pom groupid glassfish.jaxb Highest Product pom description JAXB Core module. Contains sources required by XJC, JXC and Runtime modules. Medium Product pom artifactid jaxb-core Highest Product pom groupid glassfish.jaxb Low Product pom parent-artifactid jaxb-parent Medium Product pom name JAXB Core High Product pom parent-groupid com.sun.xml.bind.mvn Low Version pom version 2.2.11 Highest
maven: org.glassfish.jaxb:jaxb-core:2.2.11 Confidence :High jaxb-core-2.2.11.jar (shaded: org.glassfish.jaxb:txw2:2.2.11)Description:
TXW is a library that allows you to write XML documents.
File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-core-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/txw2/pom.xmlMD5: 83d24d59202baf2810daa01739963822SHA1: 4be03527dbf2428f7ea99fb9c2f50f089dffad5eSHA256: 8514cb724b4fca59a5cf272b632e539bd0a0f3cacf1844082d0a173a86406bd8
Evidence Type Source Name Value Confidence Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom name TXW2 Runtime High Vendor pom parent-artifactid jaxb-txw-parent Low Vendor pom groupid glassfish.jaxb Highest Vendor pom artifactid txw2 Low Vendor pom description
TXW is a library that allows you to write XML documents.
Medium Product pom name TXW2 Runtime High Product pom groupid glassfish.jaxb Low Product pom parent-groupid com.sun.xml.bind.mvn Low Product pom artifactid txw2 Highest Product pom description
TXW is a library that allows you to write XML documents.
Medium Product pom parent-artifactid jaxb-txw-parent Medium Version pom version 2.2.11 Highest
maven: org.glassfish.jaxb:txw2:2.2.11 Confidence :High jaxb-impl-2.2.11.jar (shaded: org.glassfish.jaxb:jaxb-runtime:2.2.11)Description:
JAXB (JSR 222) Reference Implementation File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/lib/jaxb-impl-2.2.11.jar/META-INF/maven/org.glassfish.jaxb/jaxb-runtime/pom.xmlMD5: fa2e4dc2609e6a4d96418f4ac6519e8dSHA1: 6a1651361e4c2392aff30da0df648187f670f8cbSHA256: e5327b31b595ab8143e97836d5ccdf85feb91e7ff5666f7b26913632facca4aa
Evidence Type Source Name Value Confidence Vendor pom description JAXB (JSR 222) Reference Implementation Medium Vendor pom name JAXB Runtime High Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom artifactid jaxb-runtime Low Vendor pom parent-artifactid jaxb-runtime-parent Low Vendor pom groupid glassfish.jaxb Highest Product pom description JAXB (JSR 222) Reference Implementation Medium Product pom name JAXB Runtime High Product pom artifactid jaxb-runtime Highest Product pom groupid glassfish.jaxb Low Product pom parent-groupid com.sun.xml.bind.mvn Low Product pom parent-artifactid jaxb-runtime-parent Medium Version pom version 2.2.11 Highest
maven: org.glassfish.jaxb:jaxb-runtime:2.2.11 Confidence :High netty-common-4.1.7.Final.jar (shaded: io.netty:netty-common:4.1.7.Final)File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-common-4.1.7.Final.jar/META-INF/maven/io.netty/netty-common/pom.xmlMD5: 05e1b886e3e56ab83bdb8070a17cc552SHA1: 6ec2d761bcd48fe3c6adb9e50298e666260743e5SHA256: c1b2ae56e8e705833dfcfcad71fce12881e89b87befc0750f9660d6a3365ba90
Evidence Type Source Name Value Confidence Vendor pom parent-artifactid netty-parent Low Vendor pom name Netty/Common High Vendor pom groupid io.netty Highest Vendor pom artifactid netty-common Low Product pom name Netty/Common High Product pom groupid io.netty Low Product pom parent-artifactid netty-parent Medium Product pom artifactid netty-common Highest Version pom version 4.1.7.Final Highest
maven: io.netty:netty-common:4.1.7.Final Confidence :Highcpe: cpe:/a:netty_project:netty:4.1.7 Confidence :Low suppress netty-common-4.1.7.Final.jar (shaded: org.jctools:jctools-core:1.2.1)Description:
Java Concurrency Tools Core Library License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/indexer-elastic/netty-common-4.1.7.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: b104e807eab8c5ec728e4440814b4e86
SHA1: 890d905133422e4be5df7cffa81e7dd9c5336d7e
SHA256: 12444dc7be1ea1e1b5361f4bb9fb9ae04197b64846c3ce915b363cfafbcdf8d9
Evidence Type Source Name Value Confidence Vendor pom url JCTools Highest Vendor pom groupid jctools Highest Vendor pom artifactid jctools-core Low Vendor pom description Java Concurrency Tools Core Library Medium Vendor pom name Java Concurrency Tools Core Library High Product pom artifactid jctools-core Highest Product pom groupid jctools Low Product pom description Java Concurrency Tools Core Library Medium Product pom name Java Concurrency Tools Core Library High Product pom url JCTools High Version pom version 1.2.1 Highest
maven: org.jctools:jctools-core:1.2.1 Confidence :High Suppressed Vulnerabilitiestika-core-1.17.jar Description:
This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also
includes the core facades for the Tika API.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/tika-core-1.17.jar
MD5: dc1ba32dd6647a99822cf91e9c6a249d
SHA1: b450102c2aee98107474d2f92661d947b9cef183
SHA256: $enc.html($dependency.Sha255sum)
Evidence Type Source Name Value Confidence Vendor pom organization url http://www.apache.org Medium Vendor Manifest bundle-docurl http://tika.apache.org/ Low Vendor Manifest Implementation-Vendor-Id org.apache.tika Medium Vendor pom parent-artifactid tika-parent Low Vendor pom name Apache Tika core High Vendor pom parent-groupid org.apache.tika Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor Manifest implementation-url http://tika.apache.org/ Low Vendor Manifest bundle-symbolicname org.apache.tika.core Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor pom groupid apache.tika Highest Vendor manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Vendor Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Vendor pom artifactid tika-core Low Vendor pom url http://tika.apache.org/ Highest Vendor file name tika-core High Vendor pom organization name The Apache Software Foundation High Product Manifest bundle-docurl http://tika.apache.org/ Low Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org Low Product pom parent-groupid org.apache.tika Low Product pom name Apache Tika core High Product pom url http://tika.apache.org/ Medium Product pom artifactid tika-core Highest Product pom description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest implementation-url http://tika.apache.org/ Low Product Manifest bundle-symbolicname org.apache.tika.core Medium Product pom groupid apache.tika Low Product Manifest Implementation-Title Apache Tika core High Product pom parent-artifactid tika-parent Medium Product Manifest Bundle-Name Apache Tika core Medium Product manifest Bundle-Description This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API. Low Product Manifest require-capability osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))" Low Product Manifest specification-title Apache Tika core Medium Product file name tika-core High Version file version 1.17 Highest Version Manifest Implementation-Version 1.17 High Version pom version 1.17 Highest
Related Dependencies tika-parsers-1.17.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/tika-parsers-1.17.jar MD5: 1ed1107da299a57372c21eed26cfec0d SHA1: 4277c54fcaed542fbc8a0001fdb4c23baccc0132 SHA256: c96e424d73ac3b637e7b348b781df311952b98e92c43d8ead3a45eee21c4bb3d Suppressed Vulnerabilities CVE-2018-1335 suppressed
Severity:High CVSS Score: 9.3 CWE: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') Notes: only applies to tika-server < 1.18
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18. Vulnerable Software & Versions: (show all )
vorbis-java-tika-0.8.jar File Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/any23/vorbis-java-tika-0.8.jarMD5: 85c7b34d5f94e66bf0c79f5d673db750SHA1: 4ddbb27ac5884a0f0398a63d46a89d3bc87dc457SHA256: $enc.html($dependency.Sha255sum)
Evidence Type Source Name Value Confidence Vendor jar package name gagravarr Low Vendor file name vorbis-java-tika High Vendor pom name Apache Tika plugin for Ogg, Vorbis and FLAC High Vendor pom url Gagravarr/VorbisJava Highest Vendor pom groupid gagravarr Highest Vendor pom parent-groupid org.gagravarr Medium Vendor pom parent-artifactid vorbis-java-parent Low Vendor jar package name tika Low Vendor pom artifactid vorbis-java-tika Low Product pom parent-artifactid vorbis-java-parent Medium Product file name vorbis-java-tika High Product pom name Apache Tika plugin for Ogg, Vorbis and FLAC High Product pom groupid gagravarr Low Product pom artifactid vorbis-java-tika Highest Product pom url Gagravarr/VorbisJava High Product jar package name tika Low Product pom parent-groupid org.gagravarr Low Version file version 0.8 Highest Version pom version 0.8 Highest
Related Dependencies vorbis-java-tika-0.8.jarFile Path: /mnt/data/wastl/proj/crawler/nutch/git/trunk/build/plugins/parse-tika/vorbis-java-tika-0.8.jar MD5: 85c7b34d5f94e66bf0c79f5d673db750 SHA1: 4ddbb27ac5884a0f0398a63d46a89d3bc87dc457 SHA256: a1b62281a99aec10dc69db1d2f8250952dca5841eedf1167b6b6f9585e2d0d26 Suppressed Vulnerabilities CVE-2018-1335 suppressed
Severity:High CVSS Score: 9.3 CWE: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') Notes: only applies to tika-server < 1.18
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a server that is open to untrusted clients. The mitigation is to upgrade to Tika 1.18. Vulnerable Software & Versions: (show all )