| Package | Description |
|---|---|
| org.owasp.dependencycheck |
Includes the main entry point for dependency-check.
|
| org.owasp.dependencycheck.analyzer |
Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
|
| org.owasp.dependencycheck.data.nvdcve |
Contains classes used to work with the NVD CVE data.
|
| org.owasp.dependencycheck.data.update.nvd |
Contains classes used to download, parse, and load the NVD CVE data from NIST into the local database.
|
| org.owasp.dependencycheck.utils |
Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.
|
| Modifier and Type | Method and Description |
|---|---|
void |
Engine.doUpdates()
Cycles through the cached web data sources and calls update on all of
them.
|
void |
Engine.doUpdates(boolean remainOpen)
Cycles through the cached web data sources and calls update on all of
them.
|
void |
Engine.openDatabase()
This method is only public for unit/integration testing.
|
void |
Engine.openDatabase(boolean readOnly,
boolean lockRequired)
This method is only public for unit/integration testing.
|
| Modifier and Type | Method and Description |
|---|---|
void |
CPEAnalyzer.open(CveDB cve)
Opens the data source.
|
void |
NpmCPEAnalyzer.open(CveDB cve)
Opens the data source.
|
| Modifier and Type | Class and Description |
|---|---|
class |
CorruptDatabaseException
An exception used to indicate the db4o database is corrupt.
|
| Modifier and Type | Method and Description |
|---|---|
Connection |
ConnectionFactory.getConnection()
Constructs a new database connection object per the database
configuration.
|
Set<Pair<String,String>> |
CveDB.getVendorProductList()
Returns the entire list of vendor/product combinations.
|
Set<Pair<String,String>> |
CveDB.getVendorProductListForNode()
Returns the entire list of vendor/product combinations filtered for just
Node JS related products.
|
List<Vulnerability> |
CveDB.getVulnerabilities(us.springett.parsers.cpe.Cpe cpe)
Retrieves the vulnerabilities associated with the specified CPE.
|
Vulnerability |
CveDB.getVulnerability(String cve)
Gets a vulnerability for the provided CVE.
|
void |
ConnectionFactory.initialize()
Initializes the connection factory.
|
| Constructor and Description |
|---|
CveDB(Settings settings)
Creates a new CveDB object and opens the database connection.
|
| Modifier and Type | Method and Description |
|---|---|
protected void |
ProcessTask.importJSON(File file)
Imports the NVD CVE JSON File into the database.
|
| Modifier and Type | Method and Description |
|---|---|
static int |
DBUtils.getGeneratedKey(PreparedStatement statement)
Returns the generated integer primary key for a newly inserted row.
|
Copyright © 2012–2020 OWASP. All rights reserved.