You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2017/11/16 10:51:37 UTC
svn commit: r1815437 [2/2] - in /ofbiz: ofbiz-framework/trunk/build.gradle
tools/security/dependency-check/README.txt
tools/security/dependency-check/dependency-check-report.html
Modified: ofbiz/tools/security/dependency-check/dependency-check-report.html
URL: http://svn.apache.org/viewvc/ofbiz/tools/security/dependency-check/dependency-check-report.html?rev=1815437&r1=1815436&r2=1815437&view=diff
==============================================================================
--- ofbiz/tools/security/dependency-check/dependency-check-report.html (original)
+++ ofbiz/tools/security/dependency-check/dependency-check-report.html Thu Nov 16 10:51:37 2017
@@ -567,34 +567,34 @@ Getting Help: <a href="https://groups.go
<h2 class="">Project: ofbiz</h2>
<div class="">
-
Scan Information (<a href="#" title="Click to toggle display" onclick="return toggleDisplay(this, '.scaninfo', 'show all', 'show less'); return false;">show all</a>):<br/>
+
Scan Information (<a href="#" title="Click to toggle display" onclick="return toggleDisplay(this, '.scaninfo', 'show all', 'show less'); return false;">show all</a>):<br/>
<ul class="indent">
- <li><i>dependency-check version</i>: 2.1.1</li>
- <li><i>Report Generated On</i>: sept. 29, 2017 at 08:51:07 +02:00</li>
- <li><i>Dependencies Scanned</i>: 444 (442 unique)</li>
- <li><i>Vulnerable Dependencies</i>: <span id="vulnerableCount">126</span></li>
- <li><i>Vulnerabilities Found</i>: 497</li>
+ <li><i>dependency-check version</i>: 3.0.2</li>
+ <li><i>Report Generated On</i>: nov. 16, 2017 at 11:18:37 +01:00</li>
+ <li><i>Dependencies Scanned</i>: 444 (444 unique)</li>
+ <li><i>Vulnerable Dependencies</i>: <span id="vulnerableCount">119</span></li>
+ <li><i>Vulnerabilities Found</i>: 422</li>
<li><i>Vulnerabilities Suppressed</i>: 0</li>
<li class="scaninfo">...</li>
- <li class="scaninfo hidden"><i>NVD CVE 2002</i>: 21/09/2017 09:13:36</li>
- <li class="scaninfo hidden"><i>NVD CVE 2003</i>: 29/08/2017 09:31:01</li>
- <li class="scaninfo hidden"><i>NVD CVE 2004</i>: 17/08/2017 09:29:57</li>
- <li class="scaninfo hidden"><i>NVD CVE 2005</i>: 16/09/2017 09:25:56</li>
- <li class="scaninfo hidden"><i>NVD CVE 2006</i>: 03/09/2017 09:26:27</li>
- <li class="scaninfo hidden"><i>NVD CVE 2007</i>: 08/09/2017 09:27:55</li>
- <li class="scaninfo hidden"><i>NVD CVE 2008</i>: 08/09/2017 09:25:36</li>
- <li class="scaninfo hidden"><i>NVD CVE 2009</i>: 19/09/2017 09:29:07</li>
- <li class="scaninfo hidden"><i>NVD CVE 2010</i>: 27/09/2017 09:21:55</li>
- <li class="scaninfo hidden"><i>NVD CVE 2011</i>: 27/09/2017 14:29:09</li>
- <li class="scaninfo hidden"><i>NVD CVE 2012</i>: 27/09/2017 09:14:30</li>
- <li class="scaninfo hidden"><i>NVD CVE 2013</i>: 22/09/2017 09:14:33</li>
- <li class="scaninfo hidden"><i>NVD CVE 2014</i>: 27/09/2017 09:11:53</li>
- <li class="scaninfo hidden"><i>NVD CVE 2015</i>: 27/09/2017 09:08:47</li>
- <li class="scaninfo hidden"><i>NVD CVE 2016</i>: 27/09/2017 14:29:11</li>
- <li class="scaninfo hidden"><i>NVD CVE 2017</i>: 27/09/2017 09:02:28</li>
- <li class="scaninfo hidden"><i>NVD CVE Checked</i>: 29/09/2017 08:50:37</li>
- <li class="scaninfo hidden"><i>NVD CVE Modified</i>: 29/09/2017 07:02:46</li>
- <li class="scaninfo hidden"><i>VersionCheckOn</i>: 1506520451876</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2002</i>: 09/11/2017 09:45:42</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2003</i>: 09/11/2017 09:43:38</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2004</i>: 09/11/2017 09:43:05</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2005</i>: 09/11/2017 09:42:02</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2006</i>: 09/11/2017 09:40:15</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2007</i>: 16/11/2017 10:30:23</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2008</i>: 09/11/2017 09:34:54</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2009</i>: 09/11/2017 09:32:06</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2010</i>: 15/11/2017 09:22:41</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2011</i>: 14/11/2017 09:21:13</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2012</i>: 16/11/2017 10:30:24</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2013</i>: 16/11/2017 10:30:23</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2014</i>: 16/11/2017 10:30:24</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2015</i>: 16/11/2017 10:30:23</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2016</i>: 16/11/2017 10:30:23</li>
+ <li class="scaninfo hidden"><i>NVD CVE 2017</i>: 16/11/2017 10:30:22</li>
+ <li class="scaninfo hidden"><i>NVD CVE Checked</i>: 16/11/2017 11:17:45</li>
+ <li class="scaninfo hidden"><i>NVD CVE Modified</i>: 16/11/2017 07:02:06</li>
+ <li class="scaninfo hidden"><i>VersionCheckOn</i>: 1510827465359</li>
</ul><br/>
Display: <a href="#" title="Click to toggle display" onclick="return toggleDisplay(this, '.notvulnerable', 'Showing Vulnerable Dependencies (click to show all)', 'Showing All Dependencies (click to show less)'); return false;">Showing Vulnerable Dependencies (click to show all)</a><br/><br/>
<table id="summaryTable" class="lined">
@@ -608,4812 +608,6221 @@ Getting Help: <a href="https://groups.go
<th class="sortable" data-sort="int" title="The count of evidence collected to identify the CPE">Evidence Count</th>
</tr></thead>
<tr class="notvulnerable">
- <td data-sort-value="ANTLR-2.7.6.JAR"><a href="#l1_cf4f67dae5df4f9932ae7810f4548ef3e14dd35e">antlr-2.7.6.jar</a></td>
- <td data-sort-value="">
- </td>
- <td data-sort-value="antlr:antlr:2.7.6"> <a href="http://search.maven.org/#search|ga|1|1%3A%22cf4f67dae5df4f9932ae7810f4548ef3e14dd35e%22" target="_blank">antlr:antlr:2.7.6</a> <span title="verified from repo" style="color:green">✓</span>
+ <td data-sort-value="XERCESIMPL-2.9.1.JAR"><a href="#l1_7bc7e49ddfe4fb5f193ed37ecc96c12292c8ceb6">xercesImpl-2.9.1.jar</a></td>
+ <td data-sort-value="">
+ </td>
+ <td data-sort-value="xerces:xercesimpl:2.9.1"> <a href="http://search.maven.org/remotecontent?filepath=xerces/xercesImpl/2.9.1/xercesImpl-2.9.1.jar" target="_blank">xerces:xercesImpl:2.9.1</a> <span title="verified from repo" style="color:green">✓</span>
</td>
<td data-sort-value="-10">
</td>
<td>0</td>
<td data-sort-value="0"></td>
- <td>14</td>
+ <td>55</td>
</tr>
<tr class="notvulnerable">
- <td data-sort-value="AOPALLIANCE-1.0.JAR"><a href="#l2_0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8">aopalliance-1.0.jar</a></td>
+ <td data-sort-value="CORE-3.3.0.JAR"><a href="#l2_73c49077166faa4c3c0059c5f583d1d7bd1475fe">core-3.3.0.jar</a></td>
<td data-sort-value="">
</td>
- <td data-sort-value="aopalliance:aopalliance:1.0"> <a href="http://search.maven.org/#search|ga|1|1%3A%220235ba8b489512805ac13a8f9ea77a1ca5ebe3e8%22" target="_blank">aopalliance:aopalliance:1.0</a> <span title="verified from repo" style="color:green">✓</span>
+ <td data-sort-value="com.google.zxing:core:3.3.0"> <a href="http://search.maven.org/#search|ga|1|1%3A%2273c49077166faa4c3c0059c5f583d1d7bd1475fe%22" target="_blank">com.google.zxing:core:3.3.0</a> <span title="verified from repo" style="color:green">✓</span>
</td>
<td data-sort-value="-10">
</td>
<td>0</td>
<td data-sort-value="0"></td>
- <td>16</td>
+ <td>24</td>
</tr>
<tr class="notvulnerable">
- <td data-sort-value="XERCESIMPL-2.9.1.JAR"><a href="#l3_7bc7e49ddfe4fb5f193ed37ecc96c12292c8ceb6">xercesImpl-2.9.1.jar</a></td>
- <td data-sort-value="">
- </td>
- <td data-sort-value="xerces:xercesimpl:2.9.1"> <a href="http://search.maven.org/remotecontent?filepath=xerces/xercesImpl/2.9.1/xercesImpl-2.9.1.jar" target="_blank">xerces:xercesImpl:2.9.1</a> <span title="verified from repo" style="color:green">✓</span>
+ <td data-sort-value="CONCURRENTLINKEDHASHMAP-LRU-1.4.2.JAR"><a href="#l3_2eaf3d3c9746d526ff7e5b93931d482c3887e6ac">concurrentlinkedhashmap-lru-1.4.2.jar</a></td>
+ <td data-sort-value="">
+ </td>
+ <td data-sort-value="com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4.2"> <a href="http://search.maven.org/#search|ga|1|1%3A%222eaf3d3c9746d526ff7e5b93931d482c3887e6ac%22" target="_blank">com.googlecode.concurrentlinkedhashmap:concurrentlinkedhashmap-lru:1.4.2</a> <span title="verified from repo" style="color:green">✓</span>
</td>
<td data-sort-value="-10">
</td>
<td>0</td>
<td data-sort-value="0"></td>
- <td>47</td>
+ <td>26</td>
</tr>
<tr class="notvulnerable">
- <td data-sort-value="ASM-ATTRS-1.5.3.JAR"><a href="#l4_911ca40cdb527969ee47dc6f782425d94a36b510">asm-attrs-1.5.3.jar</a></td>
+ <td data-sort-value="EZ-VCARD-0.9.10.JAR"><a href="#l4_1997520f849718ec99a92aa67c17e408e5cca32a">ez-vcard-0.9.10.jar</a></td>
<td data-sort-value="">
</td>
- <td data-sort-value="asm:asm-attrs:1.5.3"> <a href="http://search.maven.org/#search|ga|1|1%3A%22911ca40cdb527969ee47dc6f782425d94a36b510%22" target="_blank">asm:asm-attrs:1.5.3</a> <span title="verified from repo" style="color:green">✓</span>
+ <td data-sort-value="com.googlecode.ez-vcard:ez-vcard:0.9.10"> <a href="http://search.maven.org/#search|ga|1|1%3A%221997520f849718ec99a92aa67c17e408e5cca32a%22" target="_blank">com.googlecode.ez-vcard:ez-vcard:0.9.10</a> <span title="verified from repo" style="color:green">✓</span>
</td>
<td data-sort-value="-10">
</td>
<td>0</td>
<td data-sort-value="0"></td>
- <td>21</td>
+ <td>26</td>
</tr>
<tr class="notvulnerable">
- <td data-sort-value="ASM-1.5.3.JAR"><a href="#l5_63a2715c39c9e97f88fe371d4441a1b3493d74f9">asm-1.5.3.jar</a></td>
- <td data-sort-value="">
- </td>
- <td data-sort-value="asm:asm:1.5.3"> <a href="http://search.maven.org/#search|ga|1|1%3A%2263a2715c39c9e97f88fe371d4441a1b3493d74f9%22" target="_blank">asm:asm:1.5.3</a> <span title="verified from repo" style="color:green">✓</span>
+ <td data-sort-value="OWASP-JAVA-HTML-SANITIZER-20170515.1.JAR"><a href="#l5_2ac64ee731e71b8ce411b7ff306c35eae672f6dd">owasp-java-html-sanitizer-20170515.1.jar</a></td>
[... 96611 lines stripped ...]