Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2018-12216 Vulnerability in Intel Graphics Driver (CVE-2018-12216)
CVE-2018-12215 Vulnerability in Intel Graphics Driver (CVE-2018-12215)
CVE-2018-12222 Vulnerability in Intel Graphics Driver (CVE-2018-12222)
CVE-2018-12211 Vulnerability in Intel Graphics Driver (CVE-2018-12211)
CVE-2019-1691 Vulnerability in Cisco Firepower Threat Defense Software (CVE-2019-1691)
CVE-2016-10739 Vulnerability in Gnu Glibc (CVE-2016-10739)
CVE-2018-19591 Vulnerability in Gnu Glibc (CVE-2018-19591)
CVE-2018-12123 Vulnerability in Node.js (CVE-2018-12123)
CVE-2018-15454 Vulnerability in Cisco Adaptive Security Appliance Software (CVE-2018-15454)
CVE-2018-1061 Vulnerability in Debian Linux (CVE-2018-1061)
CVE-2018-1060 Vulnerability in Fedoraproject (CVE-2018-1060)
CVE-2018-7161 Vulnerability in Nodejs (CVE-2018-7161)
CVE-2018-7162 Vulnerability in Nodejs (CVE-2018-7162)
CVE-2018-7159 Vulnerability in Nodejs (CVE-2018-7159)
CVE-2018-0228 Vulnerability in Cisco Adaptive Security Appliance (CVE-2018-0228)
CVE-2018-0231 Vulnerability in Cisco Adaptive Security Appliance Software (CVE-2018-0231)
CVE-2017-8046 Vulnerability in Vmware Pivotal Software (CVE-2017-8046)
CVE-2014-8119 Vulnerability in Fedoraproject (CVE-2014-8119)
CVE-2017-17967 Vulnerability in Wps Office (CVE-2017-17967)
CVE-2017-17952 Vulnerability in PHP Scripts Mall PHP Multivendor Ecommerce (CVE-2017-17952)
CVE-2017-15667 Vulnerability in Flexense SysGauge Server (CVE-2017-15667)
CVE-2017-13056 Vulnerability in Tracker Software (CVE-2017-13056)
CVE-2017-7154 Vulnerability in Apple Iphone Os (CVE-2017-7154)
CVE-2017-17850 Vulnerability in Asterisk (CVE-2017-17850)
CVE-2017-17862 Vulnerability in Linux Kernel (CVE-2017-17862)
CVE-2017-17846 Vulnerability in Enigmail (CVE-2017-17846)
CVE-2017-13858 Vulnerability in Apple Mac Os X (CVE-2017-13858)
CVE-2017-13848 Vulnerability in Apple Mac Os X (CVE-2017-13848)
CVE-2017-14022 Vulnerability in Rockwellautomation (CVE-2017-14022)
CVE-2017-15310 Vulnerability in Huawei iReader app (CVE-2017-15310)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details