Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-10021 Vulnerability in Google Chrome (CVE-2026-10021)
CVE-2026-10004 Vulnerability in Google Chrome (CVE-2026-10004)
CVE-2026-9979 Vulnerability in Google Chrome (CVE-2026-9979)
CVE-2026-9980 Vulnerability in Google Chrome (CVE-2026-9980)
CVE-2026-9982 Vulnerability in Google Chrome (CVE-2026-9982)
CVE-2026-9985 Vulnerability in Google Chrome (CVE-2026-9985)
CVE-2026-9986 Vulnerability in Google Chrome (CVE-2026-9986)
CVE-2026-9987 Vulnerability in Google Chrome (CVE-2026-9987)
CVE-2026-9969 Vulnerability in Google Chrome (CVE-2026-9969)
CVE-2026-9977 Vulnerability in Google Chrome (CVE-2026-9977)
CVE-2026-9950 Vulnerability in Google Chrome (CVE-2026-9950)
CVE-2026-9914 Vulnerability in Google Chrome (CVE-2026-9914)
CVE-2026-49095 Vulnerability in elk (CVE-2026-49095)
CVE-2026-30760 Vulnerability in SourceBans Material Admin (CVE-2026-30760)
CVE-2026-22872 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-22872)
CVE-2026-30963 Vulnerability in github.com/projectcapsule/capsule (CVE-2026-30963)
CVE-2026-5509 Vulnerability in Archer BE450 (CVE-2026-5509)
CVE-2026-42553 Vulnerability in cinny (CVE-2026-42553)
CVE-2026-42459 Vulnerability in github.com/free5gc/udm (CVE-2026-42459)
CVE-2026-48922 Vulnerability in org.jenkins-ci.plugins:credentials-binding (CVE-2026-48922)
CVE-2026-24195 Vulnerability in NVIDIA Display Driver for Linux (CVE-2026-24195)
CVE-2025-33221 Vulnerability in Nvidia (CVE-2025-33221)
CVE-2026-43935 Vulnerability in e107 (CVE-2026-43935)
CVE-2026-9521 Vulnerability in fraillt bitsery (CVE-2026-9521)
CVE-2026-9497 Vulnerability in org.mengyun:tcc-transaction (CVE-2026-9497)
CVE-2026-40411 Vulnerability in Azure Virtual Network Gateway (CVE-2026-40411)
CVE-2026-3294 Vulnerability in Tp Link Re305 Firmware (CVE-2026-3294)
CVE-2026-26147 Vulnerability in Azure Compute Gallery (CVE-2026-26147)
CVE-2026-44417 Vulnerability in org.apache.cxf:cxf-rt-transports-jms (CVE-2026-44417)
CVE-2026-34207 Vulnerability in TypeBot (CVE-2026-34207)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details