Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2017-3790 Vulnerability in Cisco Expressway Series (CVE-2017-3790)
CVE-2017-3792 Vulnerability in Cisco TelePresence Multipoint Control Unit (MCU) Software (CVE-2017-3792)
CVE-2016-4038 Vulnerability in Samsung Mobile (CVE-2016-4038)
CVE-2016-9420 Vulnerability in MyBB (CVE-2016-9420)
CVE-2016-9249 Vulnerability in Big Ip Local Traffic Manager (CVE-2016-9249)
CVE-2016-6266 Vulnerability in Trend Micro Smart Protection Server (CVE-2016-6266)
CVE-2016-6267 Vulnerability in Trend Micro Smart Protection Server (CVE-2016-6267)
CVE-2016-2516 Vulnerability in NTP (CVE-2016-2516)
CVE-2016-2517 Vulnerability in NTP (CVE-2016-2517)
CVE-2016-9939 Vulnerability in Crypto++ (CVE-2016-9939)
CVE-2015-8138 Vulnerability in NTP (CVE-2015-8138)
CVE-2016-10176 Vulnerability in Netgear Wnr2000V5 Firmware (CVE-2016-10176)
CVE-2017-3316 Vulnerability in Oracle Vm Virtualbox (CVE-2017-3316)
CVE-2017-3321 Vulnerability in Oracle Mysql Cluster (CVE-2017-3321)
CVE-2017-3323 Vulnerability in Oracle Mysql Cluster (CVE-2017-3323)
CVE-2017-3273 Vulnerability in Oracle (CVE-2017-3273)
CVE-2017-3280 Vulnerability in Oracle Partner Management (CVE-2017-3280)
CVE-2017-3283 Vulnerability in Oracle Partner Management (CVE-2017-3283)
CVE-2016-9795 Vulnerability in Broadcom Solaris (CVE-2016-9795)
CVE-2017-3236 Vulnerability in Oracle Flexcube Universal Banking (CVE-2017-3236)
CVE-2017-3241 Vulnerability in Oracle Jdk (CVE-2017-3241)
CVE-2017-3242 Vulnerability in Oracle Vm Server (CVE-2017-3242)
CVE-2017-3256 Vulnerability in Oracle (CVE-2017-3256)
CVE-2017-3258 Vulnerability in Oracle Debian Linux (CVE-2017-3258)
CVE-2016-10024 Vulnerability in Xen (CVE-2016-10024)
CVE-2016-9317 Vulnerability in GD Graphics Library (CVE-2016-9317)
CVE-2017-3800 Vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliances (CVE-2017-3800)
CVE-2017-5371 Vulnerability in SAP Adaptive Server Enterprise (CVE-2017-5371)
CVE-2016-6603 Vulnerability in ZOHO WebNMS Framework (CVE-2016-6603)
CVE-2016-9379 Vulnerability in Citrix Xen (CVE-2016-9379)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details