Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/sane@1.0.30-r0?arch=armhf&distroversion=v3.21&reponame=community |
| Type | apk |
| Namespace | alpine |
| Name | sane |
| Version | 1.0.30-r0 |
| Qualifiers |
| arch |
armhf |
| distroversion |
v3.21 |
| reponame |
community |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-19f9-y7mq-6yck |
| vulnerability_id |
VCID-19f9-y7mq-6yck |
| summary |
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-083. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12863 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28193 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28265 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28214 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28172 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.2813 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28134 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12863 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12863
|
| risk_score |
2.1 |
| exploitability |
0.5 |
| weighted_severity |
4.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-19f9-y7mq-6yck |
|
| 1 |
| url |
VCID-37g9-4adu-ckev |
| vulnerability_id |
VCID-37g9-4adu-ckev |
| summary |
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-082. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12862 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28193 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28265 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28214 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28172 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.2813 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00106 |
| scoring_system |
epss |
| scoring_elements |
0.28134 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12862 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12862
|
| risk_score |
2.1 |
| exploitability |
0.5 |
| weighted_severity |
4.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-37g9-4adu-ckev |
|
| 2 |
| url |
VCID-8b5q-wz8z-a3ak |
| vulnerability_id |
VCID-8b5q-wz8z-a3ak |
| summary |
An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, aka GHSL-2020-081. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12864 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27908 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27976 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27927 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.2789 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27846 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00104 |
| scoring_system |
epss |
| scoring_elements |
0.27853 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12864 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12864
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8b5q-wz8z-a3ak |
|
| 3 |
| url |
VCID-97ru-t9z7-t3hm |
| vulnerability_id |
VCID-97ru-t9z7-t3hm |
| summary |
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12866 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.43989 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44059 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44067 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44042 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44006 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00215 |
| scoring_system |
epss |
| scoring_elements |
0.44016 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12866 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12866
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
5.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-97ru-t9z7-t3hm |
|
| 4 |
| url |
VCID-hhw1-hkq8-byfa |
| vulnerability_id |
VCID-hhw1-hkq8-byfa |
| summary |
A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12861 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00584 |
| scoring_system |
epss |
| scoring_elements |
0.6946 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00584 |
| scoring_system |
epss |
| scoring_elements |
0.6944 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69545 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69552 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69543 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00588 |
| scoring_system |
epss |
| scoring_elements |
0.69506 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12861 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12861
|
| risk_score |
3.6 |
| exploitability |
0.5 |
| weighted_severity |
7.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hhw1-hkq8-byfa |
|
| 5 |
| url |
VCID-mea2-7w1r-qyf5 |
| vulnerability_id |
VCID-mea2-7w1r-qyf5 |
| summary |
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12865 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57359 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57411 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57421 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57409 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57397 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00346 |
| scoring_system |
epss |
| scoring_elements |
0.57413 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12865 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12865
|
| risk_score |
3.6 |
| exploitability |
0.5 |
| weighted_severity |
7.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mea2-7w1r-qyf5 |
|
| 6 |
| url |
VCID-wyay-j35z-6yaa |
| vulnerability_id |
VCID-wyay-j35z-6yaa |
| summary |
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-2020-075. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12867 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.29987 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30058 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.30022 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.29992 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.29964 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00117 |
| scoring_system |
epss |
| scoring_elements |
0.29977 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-12867 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-12867
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
5.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wyay-j35z-6yaa |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/sane@1.0.30-r0%3Farch=armhf&distroversion=v3.21&reponame=community |