Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-84135 Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-82740 Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a…
CVE-2026-82738 Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by…
CVE-2026-82732 Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument…
CVE-2026-83492 Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue...
CVE-2026-81633 Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay…
CVE-2026-82550 A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown...
CVE-2026-82648 WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...
CVE-2026-82639 NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...
CVE-2026-55068 Vulnerability in github.com/free5gc/free5gc (CVE-2026-55068)
CVE-2026-78009 An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote...
CVE-2026-59322 Vulnerability in Vmware Spring Integration (CVE-2026-59322)
CVE-2026-59298 Vulnerability in Spring Cloud Function. Spring Cloud Function (CVE-2026-59298)
CVE-2026-35868 Vulnerability in LB-link Router AC2100_AZ3 (CVE-2026-35868)
CVE-2026-35869 Vulnerability in LB-link Router AC450M (CVE-2026-35869)
CVE-2026-81827 Vulnerability in Affected (CVE-2026-81827)
CVE-2026-81707 Vulnerability in openssl_encrypt (CVE-2026-81707)
CVE-2026-81686 Vulnerability in openssl_encrypt (CVE-2026-81686)
CVE-2026-57499 Vulnerability in Liman (CVE-2026-57499)
CVE-2026-30068 Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc...
CVE-2026-30058 Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows...
CVE-2026-30064 Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1...
CVE-2026-26452 ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing...
CVE-2026-81662 Vulnerability in Affected (CVE-2026-81662)
CVE-2026-59354 Vulnerability in Vmware Spring Security (CVE-2026-59354)
CVE-2026-47880 Vulnerability in Vmware Spring Integration (CVE-2026-47880)
CVE-2026-56547 The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to...
CVE-2026-13480 Vulnerability in Zephyrproject (CVE-2026-13480)
CVE-2026-77554 A malicious actor with access to the network could exploit an Improper Input Validation...
CVE-2026-77552 A malicious actor with access to the network could exploit an Improper Input Validation...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details