Cwe 20

🧬 CWE Related 2,856

slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。

📌 Example

多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔗 Related links

MITRE CWE-20 公式ページ ↗

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

ID	Title	Severity	Detected
CVE-2026-86475	Vulnerability in WordPress (CVE-2026-86475)	Medium	1 month ago
CVE-2026-91738	Vulnerability in Google Chrome (CVE-2026-91738)	Critical	1 month ago
CVE-2026-19655	On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay...	Medium	1 month ago
CVE-2026-87233	Vulnerability in Oracle Hyperion Financial Management (CVE-2026-87233)	High	1 month ago
CVE-2026-79410	Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9...	High	1 month ago
CVE-2026-58744	Vulnerability in Google (CVE-2026-58744)	High	1 month ago
CVE-2026-58718	Vulnerability in Google (CVE-2026-58718)	Medium	1 month ago
CVE-2026-58691	Vulnerability in Google (CVE-2026-58691)	High	1 month ago
CVE-2026-58683	Vulnerability in Google (CVE-2026-58683)	High	1 month ago
CVE-2026-57008	Vulnerability in Google (CVE-2026-57008)	High	1 month ago
CVE-2026-56975	Vulnerability in Google (CVE-2026-56975)	Medium	1 month ago
CVE-2026-56974	Vulnerability in Google (CVE-2026-56974)	High	1 month ago
CVE-2026-56932	Vulnerability in Google (CVE-2026-56932)	Medium	1 month ago
CVE-2026-56950	Vulnerability in Google (CVE-2026-56950)	Medium	1 month ago
CVE-2026-56907	Vulnerability in Google (CVE-2026-56907)	Medium	1 month ago
CVE-2026-55306	Vulnerability in Google (CVE-2026-55306)	High	1 month ago
CVE-2026-55317	Vulnerability in Google (CVE-2026-55317)	Medium	1 month ago
CVE-2026-55332	Vulnerability in Google (CVE-2026-55332)	Medium	1 month ago
CVE-2026-0199	Vulnerability in Google (CVE-2026-0199)	High	1 month ago
CVE-2026-56831	Vulnerability in shopper/framework (CVE-2026-56831)	Medium	1 month ago
CVE-2025-66974	An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version...	High	1 month ago
CVE-2026-91932	Flowise before 3.1.4 contains a validation bypass vulnerability in MCP server configuration...	High	1 month ago
CVE-2026-91842	A vulnerability has been found in OpenBankProject OBP-API up to 1.10.1. This impacts the function...	Medium	1 month ago
CVE-2026-91819	Affected versions of MISP rely on CakePHP request-method override processing in a way that can...		1 month ago
CVE-2026-88261	Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects...		1 month ago
CVE-2026-86924	Vulnerability in Apple Ipados (CVE-2026-86924)	Medium	1 month ago
CVE-2026-86885	Vulnerability in Apple Ipados (CVE-2026-86885)	Medium	1 month ago
CVE-2026-86879	Vulnerability in Apple Ipados (CVE-2026-86879)	Medium	1 month ago
CVE-2026-84538	Vulnerability in Apple macOS (CVE-2026-84538)	Medium	1 month ago
CVE-2026-43692	Vulnerability in Apple macOS (CVE-2026-43692)	High	1 month ago

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details