Connexion Inscription
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Liées 2,856
slug: cwe-20

Explication

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Exemple
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnérabilités associées 2,857

Image ID Titre
CVE-2026-84135 Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.
CVE-2026-82740 Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a…
CVE-2026-82738 Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by…
CVE-2026-82732 Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument…
CVE-2026-83492 Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue...
CVE-2026-81633 Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay…
CVE-2026-82550 A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown...
CVE-2026-82648 WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...
CVE-2026-82639 NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...
CVE-2026-55068 Vulnérabilité dans github.com/free5gc/free5gc (CVE-2026-55068)
CVE-2026-78009 An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote...
CVE-2026-59322 Vulnérabilité dans Vmware Spring Integration (CVE-2026-59322)
CVE-2026-59298 Vulnérabilité dans Spring Cloud Function. Spring Cloud Function (CVE-2026-59298)
CVE-2026-35868 Vulnérabilité dans LB-link Router AC2100_AZ3 (CVE-2026-35868)
CVE-2026-35869 Vulnérabilité dans LB-link Router AC450M (CVE-2026-35869)
CVE-2026-81827 Vulnérabilité dans Affected (CVE-2026-81827)
CVE-2026-81707 Vulnérabilité dans openssl_encrypt (CVE-2026-81707)
CVE-2026-81686 Vulnérabilité dans openssl_encrypt (CVE-2026-81686)
CVE-2026-57499 Vulnérabilité dans Liman (CVE-2026-57499)
CVE-2026-30068 Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc...
CVE-2026-30058 Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows...
CVE-2026-30064 Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1...
CVE-2026-26452 ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing...
CVE-2026-81662 Vulnérabilité dans Affected (CVE-2026-81662)
CVE-2026-59354 Vulnérabilité dans Vmware Spring Security (CVE-2026-59354)
CVE-2026-47880 Vulnérabilité dans Vmware Spring Integration (CVE-2026-47880)
CVE-2026-56547 The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to...
CVE-2026-13480 Vulnérabilité dans Zephyrproject (CVE-2026-13480)
CVE-2026-77554 A malicious actor with access to the network could exploit an Improper Input Validation...
CVE-2026-77552 A malicious actor with access to the network could exploit an Improper Input Validation...

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus