CVE-2022-29775

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Jun 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-297769.8Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktoCVE-2022-297779.8Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopCVE-2022-297788.8D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' atCVE-2022-297795.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.CVE-2022-29787.8A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with foCVE-2022-297805.5Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c.CVE-2022-297845.3PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java.CVE-2022-297886.5libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to caCVE-2022-297897.5The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerabiliCVE-2022-29797.8Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitraryCVE-2022-297907.5The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability mCVE-2022-297917.5The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability w
CVE-2022-29775: Critical severity, CVSS 9.8 | Vulnix