Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-9218 Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR...
CVE-2026-107917 Vulnerability in NETGEAR R7300 router (CVE-2026-107917)
CVE-2026-11732 An insufficient input validation vulnerability in the website blocking feature (Block Sites) of...
CVE-2026-107918 Vulnerability in NETGEAR R7300 router (CVE-2026-107918)
CVE-2026-14308 Vulnerability in Zohocorp ManageEngine Malware Protection Plus (CVE-2026-14308)
CVE-2026-108958 Vulnerability in TensorLayer (CVE-2026-108958)
CVE-2026-108947 Vulnerability in yoshitomo-matsubara torchdistill (CVE-2026-108947)
CVE-2026-78673 Vulnerability in IBM Maximo AI Service (CVE-2026-78673)
CVE-2026-84317 Vulnerability in github.com/0xJacky/Nginx-UI (CVE-2026-84317)
CVE-2026-84316 Vulnerability in github.com/0xJacky/Nginx-UI (CVE-2026-84316)
CVE-2026-104364 Vulnerability in IBM Db2 (CVE-2026-104364)
CVE-2026-94451 Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data...
CVE-2026-109311 Vulnerability in vLLM (CVE-2026-109311)
CVE-2026-93693 Vulnerability in Progress ShareFile Storage Zones Controller (CVE-2026-93693)
CVE-2026-21129 Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version...
CVE-2026-21130 Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1...
CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to...
CVE-2026-21128 Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1...
CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct...
CVE-2026-87765 In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register...
CVE-2026-66085 In modem, there is a possible information disclosure due to missing filtering of sensitive data...
CVE-2026-48484 Vulnerability in pyload-ng (CVE-2026-48484)
CVE-2026-103413 Vulnerability in Apache (CVE-2026-103413)
CVE-2026-107734 Vulnerability in SumatraPDF is a multi-format reader for Windows. In (CVE-2026-107734)
CVE-2026-107726 Vulnerability in com.hazelcast:hazelcast (CVE-2026-107726)
CVE-2026-107717 Vulnerability in banks (CVE-2026-107717)
CVE-2026-107720 Vulnerability in fast-jwt (CVE-2026-107720)
CVE-2026-107825 Vulnerability in github.com/corazawaf/coraza/v3 (CVE-2026-107825)
CVE-2026-88257 Vulnerability in ScriptKittyOS beam_mcp (CVE-2026-88257)
CVE-2026-93509 Vulnerability in Wallet System for WooCommerce (WordPress plugin) (CVE-2026-93509)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details