Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-45642 Vulnerability in Microsoft Windows 10 1607 (CVE-2026-45642)
CVE-2026-45636 Vulnerability in Windows NTFS (CVE-2026-45636)
CVE-2026-11701 Vulnerability in Google Chrome (CVE-2026-11701)
CVE-2026-11697 Vulnerability in Google Chrome (CVE-2026-11697)
CVE-2026-11686 Vulnerability in Google Chrome (CVE-2026-11686)
CVE-2026-11689 Vulnerability in Google Chrome (CVE-2026-11689)
CVE-2026-11691 Vulnerability in Google Chrome (CVE-2026-11691)
CVE-2026-11682 Vulnerability in Google Chrome (CVE-2026-11682)
CVE-2026-11685 Vulnerability in Google Chrome (CVE-2026-11685)
CVE-2026-11676 Vulnerability in Google Chrome (CVE-2026-11676)
CVE-2026-11675 Vulnerability in Google Chrome (CVE-2026-11675)
CVE-2026-11666 Vulnerability in Google Chrome (CVE-2026-11666)
CVE-2026-11660 Vulnerability in Google Chrome (CVE-2026-11660)
CVE-2026-11659 Vulnerability in Google Chrome (CVE-2026-11659)
CVE-2026-11658 Vulnerability in Google Chrome (CVE-2026-11658)
CVE-2026-11653 Vulnerability in Google Chrome (CVE-2026-11653)
CVE-2026-49234 Vulnerability in routinator (CVE-2026-49234)
CVE-2026-47430 Vulnerability in cordova-plugin-inappbrowser (CVE-2026-47430)
CVE-2026-11460 Vulnerability in Boost Serialization (CVE-2026-11460)
CVE-2026-45291 Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to…
CVE-2026-36501 Vulnerability in Controller (CVE-2026-36501)
CVE-2026-8714 Vulnerability in TP-Link Tapo C520WS (CVE-2026-8714)
CVE-2025-5089 In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed...
CVE-2025-5090 CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes...
CVE-2026-47668 Vulnerability in dbgate-serve (CVE-2026-47668)
CVE-2026-45723 Vulnerability in github.com/siderolabs/omni (CVE-2026-45723)
CVE-2026-11297 Vulnerability in Google Chrome (CVE-2026-11297)
CVE-2026-11287 Vulnerability in Google Chrome (CVE-2026-11287)
CVE-2026-11286 Vulnerability in Google Chrome (CVE-2026-11286)
CVE-2026-11280 Vulnerability in Google Chrome (CVE-2026-11280)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details