Linux Distros Unpatched Vulnerability : CVE-2026-53299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: airoha: Move ndesc initialization at end of airohaqdmainittx If queue entry list allocation fails in airohaqdmainittxqueue routine, airohaqdmacleanuptxqueu...

Linux Distros Unpatched Vulnerability : CVE-2023-53299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io...

CVE-2023-53299

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...

CVE-2023-53299

creationtimestamp| type| source ---|---|--- 2025-09-16 09:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lywzddxr6t2j...

CVE-2025-53299

CVE-2025-53299 describes a deserialization of untrusted data vulnerability in ThemeMakers Visual Content Composer (WordPress plugin) that enables PHP object injection. Affected versions are up to 1.5.8 (inclusive); the root cause is deserializing untrusted data, which can lead to object injection...

WordPress ThemeMakers Visual Content Composer Plugin <= 1.5.8 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Bonds in WordPress Plugin ThemeMakers Visual Content Composer versions = 1.5.8...

at.austriapro:ebinterface-web (>=1.0.8, <=1.0.9), be.personify.iam:personify-frontend (>=1.0.1.release, <=1.3.0.release) +655 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=7.0.0, <=8.16.0)

org.apache.wicket:wicket-core MAVEN version =7.0.0, =1.0.8, =1.0.1.release, =4.0, =4.0, =4.0, =4.0, =2.2.2, =4.0.0, =7.0.0.0, =7.0.0.0, =1.1.0, =0.0.2, =0.0.1, =2.1.10 and more Source cves: CVE-2024-53299 Source advisory: OSV:GHSA-9CXR-76PM-J3WF...

at.austriapro:ebinterface-web (>=1.0.8, <=1.0.9), be.personify.iam:personify-frontend (>=1.0.1.release, <=1.3.0.release) +655 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=7.0.0, <=8.16.0)

org.apache.wicket:wicket-core MAVEN version =7.0.0, =1.0.8, =1.0.1.release, =4.0, =4.0, =4.0, =4.0, =2.2.2, =4.0.0, =7.0.0.0, =7.0.0.0, =1.1.0, =0.0.2, =0.0.1, =2.1.10 and more Source cves: CVE-2024-53299 Source advisory: GHSA-9CXR-76PM-J3WF...

be.personify.iam:personify-frontend (>=1.3.1.release, <=1.4.2.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=3.0.1-rc, <=3.1.7) +376 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=9.0.0-m1, <=9.18.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0-m1, =1.3.1.release, =3.0.1-rc, =3.0.1-rc, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m3, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.18.0 and more Source cves: CVE-2024-53299https://vulners.com...

be.personify.iam:personify-frontend (>=1.3.1.release, <=1.4.2.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=3.0.1-rc, <=3.1.7) +376 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=9.0.0-m1, <=9.18.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0-m1, =1.3.1.release, =3.0.1-rc, =3.0.1-rc, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m3, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.0.0-m2, =9.18.0 and more Source cves: CVE-2024-53299https://vulners.com...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (4.0.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (4.0.0) +270 more potentially affected by CVE-2024-53299 via org.apache.wicket:wicket-core (>=10.0.0, <=10.2.0)

org.apache.wicket:wicket-core MAVEN version =10.0.0, =1.0.0, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.3, =7.0.3, =0.2, =0.6.5 and more Source cves: CVE-2024-53299 Source advisory: MEND:CVE-2024-53299...

CVE-2024-53299 Apache Wicket: An attacker can intentionally trigger a memory leak

The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources. Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue...

CVE-2024-53299

creationtimestamp| type| source ---|---|--- 2025-01-22 23:43:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgekb456ov2j 2025-01-23 08:40:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113876772257537497 2025-01-23 09:02:50+00:00| seen|...