SS
Product
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
On CISA KEVExploited in the wild
1,107
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 85High 414Medium 1Low 0
Watch
Add SIPLUS S7-1500 CPU 1518-4 PN/DP MFP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22980 | 7.8 | Jan 23 | nfsd: provide locking for v4_end_grace Affected: V3.1.6; V3.1.7 |
| CVE-2025-71123 | 7.8 | Jan 14 | ext4: fix string copying in parse_apply_sb_mount_options() Affected: V3.1.6; V3.1.7 |
| CVE-2025-71086 | 7.8 | Jan 13 | net: rose: fix invalid array index in rose_kill_by_device() Affected: V3.1.6; V3.1.7 |
| CVE-2025-71075 | 7.8 | Jan 13 | scsi: aic94xx: fix use-after-free in device removal path Affected: V3.1.6; V3.1.7 |
| CVE-2025-68764 | 7.8 | Jan 5 | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags Affected: V3.1.6; V3.1.7 |
| CVE-2025-68724 | 7.8 | Dec 24 | crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Affected: V3.1.6; V3.1.7 |
| CVE-2025-68265 | 7.8 | Dec 16 | nvme: fix admin request_queue lifetime Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-40149 | 7.8 | Nov 12 | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-40105 | 7.8 | Oct 30 | vfs: Don't leak disconnected dentries on umount Affected: V3.1.6; V3.1.7 |
| CVE-2025-39978 | 7.8 | Oct 15 | octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() Affected: V3.1.6; V3.1.7 |
| CVE-2025-39977 | 7.8 | Oct 15 | futex: Prevent use-after-free during requeue-PI Affected: V3.1.5; V3.1.6; V3.1.7 |
| CVE-2025-39955 | 7.8 | Oct 9 | tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). Affected: V3.1.6; V3.1.7 |
| CVE-2025-11083 | 7.8 | Sep 27 | GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow Affected: V3.1.5 |
| CVE-2025-11082 | 7.8 | Sep 27 | GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow Affected: V3.1.5 |
| CVE-2025-39871 | 7.8 | Sep 23 | dmaengine: idxd: Remove improper idxd_free Affected: V3.1.6; V3.1.7 |
| CVE-2025-39866 | 7.8 | Sep 19 | fs: writeback: fix use-after-free in __mark_inode_dirty() Affected: V3.1.5; V3.1.6; V3.1.7 |
| CVE-2025-39783 | 7.8 | Sep 11 | PCI: endpoint: Fix configfs group list head handling Affected: V3.1.5 |
| CVE-2025-39691 | 7.8 | Sep 5 | fs/buffer: fix use-after-free when call bh_read() helper Affected: V3.1.6; V3.1.7 |
| CVE-2025-39689 | 7.8 | Sep 5 | ftrace: Also allocate and copy hash for reading of filter files Affected: V3.1.5 |
| CVE-2025-38724 | 7.8 | Sep 4 | nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Affected: V3.1.5 |
| CVE-2025-38708 | 7.8 | Sep 4 | drbd: add missing kref_get in handle_write_conflicts Affected: V3.1.5 |
| CVE-2025-38704 | 7.8 | Sep 4 | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-38702 | 7.8 | Sep 4 | fbdev: fix potential buffer overflow in do_register_framebuffer() Affected: V3.1.5 |
| CVE-2025-38685 | 7.8 | Sep 4 | fbdev: Fix vmalloc out-of-bounds write in fast_imageblit Affected: V3.1.5 |
| CVE-2025-38471 | 7.8 | Jul 28 | tls: always refresh the queue when reading sock Affected: V3.1.5 |
| CVE-2025-38350 | 7.8 | Jul 19 | net/sched: Always pass notifications when child class becomes empty Affected: V3.1.5 |
| CVE-2025-7546 | 7.8 | Jul 13 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write Affected: V3.1.5 |
| CVE-2025-7545 | 7.8 | Jul 13 | GNU Binutils objcopy.c copy_section heap-based overflow Affected: V3.1.5 |
| CVE-2025-7425 | 7.8 | Jul 10 | Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr Affected: V3.1.5 |
| CVE-2025-38280 | 7.8 | Jul 10 | bpf: Avoid __bpf_prog_ret0_warn when jit fails Affected: V3.1.5 |
| CVE-2025-38236 | 7.8 | Jul 8 | af_unix: Don't leave consecutive consumed OOB skbs. Affected: V3.1.5 |
| CVE-2025-38212 | 7.8 | Jul 4 | ipc: fix to protect IPCS lookups using RCU Affected: V3.1.5 |
| CVE-2025-38201 | 7.8 | Jul 4 | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Affected: V3.1.6; V3.1.5; V3.1.7 |
| CVE-2025-38198 | 7.8 | Jul 4 | fbcon: Make sure modelist not set on unregistered console Affected: V3.1.5 |
| CVE-2025-38079 | 7.8 | Jun 18 | crypto: algif_hash - fix double free in hash_accept Affected: V3.1.5 |
| CVE-2025-5245 | 7.8 | May 27 | GNU Binutils objdump debug.c debug_type_samep memory corruption Affected: V3.1.5 |
| CVE-2025-5244 | 7.8 | May 27 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption Affected: V3.1.5 |
| CVE-2025-22083 | 7.8 | Apr 16 | vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint Affected: V3.1.6; V3.1.7 |
| CVE-2025-22056 | 7.8 | Apr 16 | netfilter: nft_tunnel: fix geneve_opt type confusion addition Affected: V3.1.6; V3.1.7 |
| CVE-2025-21999 | 7.8 | Apr 3 | proc: fix UAF in proc_get_inode() Affected: V3.1.6; V3.1.7 |
| CVE-2025-21919 | 7.8 | Apr 1 | sched/fair: Fix potential memory corruption in child_cfs_rq_on_list Affected: V3.1.6; V3.1.7 |
| CVE-2025-21887 | 7.8 | Mar 27 | ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up Affected: V3.1.6; V3.1.7 |
| CVE-2025-21867 | 7.8 | Mar 27 | bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() Affected: V3.1.6; V3.1.7 |
| CVE-2023-52927 | 7.8 | Mar 14 | netfilter: allow exp not to be removed in nf_ct_find_expectation Affected: V3.1.5; V3.1.6; V3.1.7 |
| CVE-2025-21863 | 7.8 | Mar 12 | io_uring: prevent opcode speculation Affected: V3.1.6; V3.1.7 |
| CVE-2025-21780 | 7.8 | Feb 27 | drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() Affected: V3.1.6; V3.1.7 |
| CVE-2025-21764 | 7.8 | Feb 27 | ndisc: use RCU protection in ndisc_alloc_skb() Affected: V3.1.6; V3.1.7 |
| CVE-2025-21756 | 7.8 | Feb 27 | vsock: Keep the binding until socket destruction Affected: V3.1.5 |
| CVE-2024-54458 | 7.8 | Feb 27 | scsi: ufs: bsg: Set bsg_queue to NULL after removal Affected: V3.1.6; V3.1.7 |
| CVE-2025-21731 | 7.8 | Feb 27 | nbd: don't allow reconnect after disconnect Affected: V3.1.6; V3.1.7 |
The 500 most important CVEs for this product (exploited first, then by severity)
