Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-77554 A malicious actor with access to the network could exploit an Improper Input Validation...
CVE-2026-77552 A malicious actor with access to the network could exploit an Improper Input Validation...
CVE-2026-77546 A malicious actor with access to the network and low privileges could exploit an Improper Input...
CVE-2026-77547 A malicious actor with access to the network and low privileges could exploit an Improper Input...
CVE-2026-77548 A malicious actor with access to the network and low privileges could exploit an Improper Input...
CVE-2026-77542 A malicious actor with access to the network and high privileges could exploit an Improper Input...
CVE-2026-77543 A malicious actor with access to the network and low privileges could exploit an Improper Input...
CVE-2026-77540 A malicious actor with access to the network and high privileges could exploit an Improper Input...
CVE-2026-77539 A malicious actor with access to the network and high privileges could exploit an Improper Input...
CVE-2026-77537 A malicious actor with access to the network could exploit an Improper Input Validation...
CVE-2026-77535 A malicious actor with access to the network and high privileges could exploit an Improper Input...
CVE-2026-77533 A malicious actor with access to the network and low privileges could exploit an Improper Input...
CVE-2026-78237 Vulnerability in ABR (CVE-2026-78237)
CVE-2026-18260 Vulnerability in Drupal Disable Login Page (CVE-2026-18260)
CVE-2026-18261 Vulnerability in Drupal Powerful Surveys (CVE-2026-18261)
CVE-2026-16641 Vulnerability in Drupal Commerce Elavon (CVE-2026-16641)
CVE-2026-15088 Vulnerability in Drupal Development Environment (CVE-2026-15088)
CVE-2026-16643 Vulnerability in Drupal Lunr exposed filters (CVE-2026-16643)
CVE-2026-16642 Vulnerability in Drupal Email Login OTP (CVE-2026-16642)
CVE-2026-65637 Vulnerability in Apache Tomcat (CVE-2026-65637)
CVE-2026-79288 Vulnerability in Google Chrome (CVE-2026-79288)
CVE-2026-79272 Vulnerability in Google Chrome (CVE-2026-79272)
CVE-2026-79260 Vulnerability in Google Chrome (CVE-2026-79260)
CVE-2026-79253 Vulnerability in Google Chrome (CVE-2026-79253)
CVE-2026-79243 Vulnerability in Google Chrome (CVE-2026-79243)
CVE-2026-79259 Vulnerability in Google Chrome (CVE-2026-79259)
CVE-2026-79255 Vulnerability in Google Chrome (CVE-2026-79255)
CVE-2026-79251 Vulnerability in Google Chrome (CVE-2026-79251)
CVE-2026-79230 Vulnerability in Google Chrome (CVE-2026-79230)
CVE-2026-79203 Vulnerability in Google Chrome (CVE-2026-79203)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details