Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2017-10918 Vulnerability in Xen (CVE-2017-10918)
CVE-2017-10923 Vulnerability in Xen (CVE-2017-10923)
CVE-2017-6718 Vulnerability in Cisco Ios Xr (CVE-2017-6718)
CVE-2017-6719 Vulnerability in Cisco Ios Xr (CVE-2017-6719)
CVE-2017-6721 Vulnerability in Cisco Wide Area Application Services (CVE-2017-6721)
CVE-2017-5944 Vulnerability in Request Tracker (CVE-2017-5944)
CVE-2017-2298 Vulnerability in Mcollective Sshkey Security (CVE-2017-2298)
CVE-2017-10674 Vulnerability in Antiy Antivirus Engine (CVE-2017-10674)
CVE-2017-10688 Vulnerability in LibTIFF (CVE-2017-10688)
CVE-2017-4997 Vulnerability in EMC VASA Provider Virtual Appliance (CVE-2017-4997)
CVE-2014-8149 Vulnerability in OpenDaylight defense4all (CVE-2014-8149)
CVE-2015-2245 Vulnerability in Huawei (CVE-2015-2245)
CVE-2017-9982 Vulnerability in TeamSpeak Client (CVE-2017-9982)
CVE-2017-7522 Vulnerability in OpenVPN (CVE-2017-7522)
CVE-2015-3215 Vulnerability in Virtio Win (CVE-2015-3215)
CVE-2017-6662 Vulnerability in Cisco Prime Infrastructure (CVE-2017-6662)
CVE-2017-9773 Vulnerability in Horde_Image (CVE-2017-9773)
CVE-2017-9778 Vulnerability in GNU Debugger (CVE-2017-9778)
CVE-2017-3098 Vulnerability in Adobe Captivate (CVE-2017-3098)
CVE-2017-9741 Vulnerability in Projectsend (CVE-2017-9741)
CVE-2015-3254 Vulnerability in Apache (CVE-2015-3254)
CVE-2017-9675 Vulnerability in Dlink (CVE-2017-9675)
CVE-2017-8545 Vulnerability in Microsoft Outlook (CVE-2017-8545)
CVE-2017-8555 Vulnerability in Microsoft Edge (CVE-2017-8555)
CVE-2017-7676 Vulnerability in Apache (CVE-2017-7676)
CVE-2016-10337 Vulnerability in Google (CVE-2016-10337)
CVE-2016-10338 Vulnerability in Google (CVE-2016-10338)
CVE-2017-7366 Vulnerability in Google (CVE-2017-7366)
CVE-2017-7369 Vulnerability in Google (CVE-2017-7369)
CVE-2014-9962 Vulnerability in DRM provisioning command (CVE-2014-9962)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details