Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-96620 Vulnerability in claude-agent-sdk (CVE-2026-96620)
CVE-2026-111374 Vulnerability in FreeRDP (CVE-2026-111374)
CVE-2026-110916 Vulnerability in Google Chrome (CVE-2026-110916)
CVE-2026-108427 Vulnerability in Microsoft Office Word (CVE-2026-108427)
CVE-2026-100347 Vulnerability in github.com/getkin/kin-openapi (CVE-2026-100347)
CVE-2026-79837 Vulnerability in HPE NonStop SQL/MX UDR SERVER (CVE-2026-79837)
CVE-2026-77470 Vulnerability in Lychee (CVE-2026-77470)
CVE-2026-77466 Vulnerability in Lychee (CVE-2026-77466)
CVE-2026-79835 Vulnerability in HPE Nonstop KMS Server (CVE-2026-79835)
CVE-2026-79836 A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory...
CVE-2026-79834 Vulnerability in HPE NonStop SQL/MX SQLCAT (CVE-2026-79834)
CVE-2026-79829 Vulnerability in HPE NonStop HTTP WEBSERVER (CVE-2026-79829)
CVE-2026-79821 Vulnerability in HPE NonStop SOAP (CVE-2026-79821)
CVE-2026-76661 Vulnerability in HPE NonStop QIOMON (CVE-2026-76661)
CVE-2026-76660 Vulnerability in HPE NonStop CIPSAM (CVE-2026-76660)
CVE-2026-110870 Vulnerability in Nodemailer (CVE-2026-110870)
CVE-2026-73261 Vulnerability in Mongoose (CVE-2026-73261)
CVE-2026-101992 Vulnerability in Juniper Networks Junos OS (CVE-2026-101992)
CVE-2026-101969 Vulnerability in Juniper Networks Junos OS (CVE-2026-101969)
CVE-2026-101943 Vulnerability in Juniper Networks Junos OS (CVE-2026-101943)
CVE-2026-67416 Vulnerability in RabbitMQ (CVE-2026-67416)
CVE-2026-73790 Vulnerability in HPE NonStop iTP WebServer (CVE-2026-73790)
CVE-2026-110455 A malicious actor with access to the network and under certain conditions could exploit an...
CVE-2026-48378 Vulnerability in CAI Content Credentials (CVE-2026-48378)
CVE-2026-48377 Vulnerability in CAI Content Credentials (CVE-2026-48377)
CVE-2026-104345 Vulnerability in CAI Content Credentials (CVE-2026-104345)
CVE-2026-102501 Vulnerability in CAI Content Credentials (CVE-2026-102501)
CVE-2026-100119 Vulnerability in CAI Content Credentials (CVE-2026-100119)
CVE-2026-100120 Vulnerability in CAI Content Credentials (CVE-2026-100120)
CVE-2026-100124 Vulnerability in CAI Content Credentials (CVE-2026-100124)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details