Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-69295 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69295)
CVE-2026-69293 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69293)
CVE-2026-69286 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69286)
CVE-2026-69270 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-69270)
CVE-2026-68839 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-68839)
CVE-2026-79376 An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC...
CVE-2026-62647 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number...
CVE-2026-86440 Vulnerability in Misp Project (CVE-2026-86440)
CVE-2022-51017 PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields...
CVE-2022-51012 PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during...
CVE-2022-51013 PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor...
CVE-2022-51015 PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK...
CVE-2022-51011 PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs...
CVE-2022-51010 PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in...
CVE-2026-86351 Vulnerability in Misp Project (CVE-2026-86351)
CVE-2025-52651 HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or...
CVE-2021-48007 PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket...
CVE-2026-84947 Vulnerability in Nodejs (CVE-2026-84947)
CVE-2026-84469 Vulnerability in Fastify (CVE-2026-84469)
CVE-2026-84504 Vulnerability in Fastify (CVE-2026-84504)
CVE-2026-85528 Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver...
CVE-2026-85047 Vulnerability in Google Chrome (CVE-2026-85047)
CVE-2026-85239 Vulnerability in Misp Project (CVE-2026-85239)
CVE-2026-85230 Vulnerability in Misp Project (CVE-2026-85230)
CVE-2026-85170 Vulnerability in N8N (CVE-2026-85170)
CVE-2026-84666 Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the...
CVE-2026-76758 Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.
CVE-2026-84357 Vulnerability in Google Chrome (CVE-2026-84357)
CVE-2026-84325 Vulnerability in Google Chrome (CVE-2026-84325)
CVE-2026-73768 Vulnerability in Hpe (CVE-2026-73768)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details