Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-59955 Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59955)
CVE-2026-59954 Vulnerability in com.ctrip.framework.apollo:apollo (CVE-2026-59954)
CVE-2026-22102 A POST request sent to a specific webserver endpoint can be used to write to arbitrary file...
CVE-2026-15531 Vulnerability in yashbhalgat HashNeRF-pytorch (CVE-2026-15531)
CVE-2026-15535 Vulnerability in AkariAsai self-rag (CVE-2026-15535)
CVE-2026-15529 Vulnerability in pyod (CVE-2026-15529)
CVE-2026-3576 Vulnerability in Planyo Online Reservation System (WordPress plugin) (CVE-2026-3576)
CVE-2026-40454 Vulnerability in Apache (CVE-2026-40454)
CVE-2026-15288 Vulnerability in SureForms – Drag and Drop Form Builder for (WordPress plugin) (CVE-2026-15288)
CVE-2026-0282 Vulnerability in Pan Os (CVE-2026-0282)
CVE-2026-51598 Vulnerability in MERCURY MIPC252W IP Camera v1.0.5 Build 230306 Rel.79931n) (CVE-2026-51598)
CVE-2026-51599 Vulnerability in MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n (CVE-2026-51599)
CVE-2026-51606 Vulnerability in Tenda CP3 (CVE-2026-51606)
CVE-2025-58146 There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try ...
CVE-2026-50553 Vulnerability in github.com/enchant97/note-mark/backend (CVE-2026-50553)
CVE-2026-15131 Vulnerability in Google Chrome (CVE-2026-15131)
CVE-2026-15124 Vulnerability in Google Chrome (CVE-2026-15124)
CVE-2026-15122 Vulnerability in Google Chrome (CVE-2026-15122)
CVE-2026-15115 Vulnerability in Google Chrome (CVE-2026-15115)
CVE-2026-15105 Vulnerability in davenardella snap7 (CVE-2026-15105)
CVE-2026-10037 Vulnerability in Ubuntu (CVE-2026-10037)
CVE-2026-49830 Vulnerability in org.dspace:dspace-api (CVE-2026-49830)
CVE-2026-53600 Vulnerability in async-tar (CVE-2026-53600)
CVE-2026-59724 Vulnerability in engine.io (CVE-2026-59724)
CVE-2026-41042 Vulnerability in Apache (CVE-2026-41042)
CVE-2026-53513 Vulnerability in @better-auth/sso (CVE-2026-53513)
CVE-2025-59940 Vulnerability in mkdocs-include-markdown-plugin (CVE-2025-59940)
CVE-2025-10950 Vulnerability in ml-logger (CVE-2025-10950)
CVE-2026-54234 Vulnerability in vllm (CVE-2026-54234)
CVE-2026-48316 Vulnerability in Adobe Coldfusion (CVE-2026-48316)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details