Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2023-5649 Vulnerability in Brocade ASCG (CVE-2023-5649)
CVE-2026-76277 Vulnerability in Splunk Enterprise (CVE-2026-76277)
CVE-2026-76279 Vulnerability in Splunk Enterprise (CVE-2026-76279)
CVE-2026-76273 Vulnerability in Splunk Enterprise (CVE-2026-76273)
CVE-2026-107225 Vulnerability in github.com/xuri/excelize/v2 (CVE-2026-107225)
CVE-2026-76468 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco...
CVE-2026-76456 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS...
CVE-2026-107278 Vulnerability in MISP (CVE-2026-107278)
CVE-2026-106563 Vulnerability in @backstage/plugin-kubernetes-backend (CVE-2026-106563)
CVE-2026-106491 Vulnerability in @backstage/plugin-proxy-backend (CVE-2026-106491)
CVE-2026-106512 The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content...
CVE-2026-106443 Vulnerability in WeasyPrint (CVE-2026-106443)
CVE-2026-106414 Vulnerability in Google Chrome (CVE-2026-106414)
CVE-2026-106396 Vulnerability in Google Chrome (CVE-2026-106396)
CVE-2026-106353 Vulnerability in Google Chrome (CVE-2026-106353)
CVE-2026-106331 Vulnerability in Google Chrome (CVE-2026-106331)
CVE-2026-106299 Vulnerability in Google Chrome (CVE-2026-106299)
CVE-2026-106263 Vulnerability in Google Chrome (CVE-2026-106263)
CVE-2026-106226 Vulnerability in Google Chrome (CVE-2026-106226)
CVE-2026-106206 Vulnerability in Google Chrome (CVE-2026-106206)
CVE-2026-106185 Vulnerability in Google Chrome (CVE-2026-106185)
CVE-2025-71383 Vulnerability in Dbit WIFI4 N300 (CVE-2025-71383)
CVE-2026-34498 Vulnerability in Illustra Standard - L4L China (CVE-2026-34498)
CVE-2026-56596 Vulnerability in HCL BigFix Service Management (CVE-2026-56596)
CVE-2026-105757 Vulnerability in vllm (CVE-2026-105757)
CVE-2026-105756 Vulnerability in vllm (CVE-2026-105756)
CVE-2026-105754 Vulnerability in vllm (CVE-2026-105754)
CVE-2026-58834 Vulnerability in Google (CVE-2026-58834)
CVE-2026-55269 Vulnerability in Google (CVE-2026-55269)
CVE-2026-28640 Vulnerability in Google (CVE-2026-28640)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details