Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2016-6129 Vulnerability in OP-TEE (CVE-2016-6129)
CVE-2017-3896 Vulnerability in Intel Security McAfee Agent (CVE-2017-3896)
CVE-2017-5589 Vulnerability in Yaxim (CVE-2017-5589)
CVE-2017-5590 Vulnerability in Chatsecure (CVE-2017-5590)
CVE-2017-5591 Vulnerability in sleekxmpp (CVE-2017-5591)
CVE-2017-5592 Vulnerability in Profanity Project (CVE-2017-5592)
CVE-2017-5593 Vulnerability in Psi Plus (CVE-2017-5593)
CVE-2017-5602 Vulnerability in Jappix Project (CVE-2017-5602)
CVE-2017-5603 Vulnerability in Jitsi (CVE-2017-5603)
CVE-2017-5604 Vulnerability in Mcabber (CVE-2017-5604)
CVE-2017-5605 Vulnerability in Movim (CVE-2017-5605)
CVE-2017-5606 Vulnerability in Xabber (CVE-2017-5606)
CVE-2017-5858 Vulnerability in Conversejs (CVE-2017-5858)
CVE-2016-0206 Vulnerability in Ibm Cloud Orchestrator (CVE-2016-0206)
CVE-2016-9686 Vulnerability in Puppet Enterprise (CVE-2016-9686)
CVE-2017-0422 Vulnerability in Bionic DNS (CVE-2017-0422)
CVE-2016-2781 Vulnerability in Gnu Coreutils (CVE-2016-2781)
CVE-2016-6131 Vulnerability in GNU Libiberty (CVE-2016-6131)
CVE-2016-7164 Vulnerability in Libtorrent (CVE-2016-7164)
CVE-2016-5102 Vulnerability in LibTIFF (CVE-2016-5102)
CVE-2010-5328 Vulnerability in Linux Kernel (CVE-2010-5328)
CVE-2017-5880 Vulnerability in Splunk (CVE-2017-5880)
CVE-2016-6500 Vulnerability in Forgerock Racf Connector (CVE-2016-6500)
CVE-2017-3809 Vulnerability in Cisco Firepower Management Center (CVE-2017-3809)
CVE-2017-3814 Vulnerability in Cisco Firepower System Software (CVE-2017-3814)
CVE-2017-3818 Vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliances (CVE-2017-3818)
CVE-2017-3822 Vulnerability in Cisco Firepower Threat Defense (CVE-2017-3822)
CVE-2016-6234 Vulnerability in Lepton Project (CVE-2016-6234)
CVE-2016-6084 Vulnerability in Ibm Bigfix Platform (CVE-2016-6084)
CVE-2016-10079 Vulnerability in SAPlpd (CVE-2016-10079)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details