Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-11737 Vulnerability in Netgear Rax20 Firmware (CVE-2026-11737)
CVE-2026-48056 Vulnerability in Streambert (CVE-2026-48056)
CVE-2026-73158 Vulnerability in Affected (CVE-2026-73158)
CVE-2026-71217 Vulnerability in iperf3 (CVE-2026-71217)
CVE-2026-72867 Vulnerability in Dokploy (CVE-2026-72867)
CVE-2026-72728 Vulnerability in Discourse (CVE-2026-72728)
CVE-2026-42537 Vulnerability in Apache (CVE-2026-42537)
CVE-2026-40920 Vulnerability in Apache (CVE-2026-40920)
CVE-2026-21066 Vulnerability in Samsung (CVE-2026-21066)
CVE-2026-21071 Vulnerability in Samsung (CVE-2026-21071)
CVE-2026-21065 Vulnerability in Samsung (CVE-2026-21065)
CVE-2026-21083 Vulnerability in Smart Switch (CVE-2026-21083)
CVE-2026-21072 Vulnerability in Samsung (CVE-2026-21072)
CVE-2026-21070 Vulnerability in Samsung Message (CVE-2026-21070)
CVE-2026-21060 Vulnerability in Samsung Contacts (CVE-2026-21060)
CVE-2026-21061 Vulnerability in Samsung Dialer (CVE-2026-21061)
CVE-2026-21058 Vulnerability in Samsung Contacts (CVE-2026-21058)
CVE-2026-19363 Information Disclosure in lmammino oidc-authorizer (CVE-2026-19363)
CVE-2026-9031 Vulnerability in HTTP-WRITEOEM handler (CVE-2026-9031)
CVE-2026-47662 Vulnerability in Pathling (CVE-2026-47662)
CVE-2026-50540 Vulnerability in Kata Containers (CVE-2026-50540)
CVE-2026-47664 Vulnerability in Pathling (CVE-2026-47664)
CVE-2026-62293 Vulnerability in HAPI FHIR (CVE-2026-62293)
CVE-2026-62295 Vulnerability in HAPI FHIR (CVE-2026-62295)
CVE-2026-62296 Vulnerability in HAPI FHIR (CVE-2026-62296)
CVE-2026-54217 Vulnerability in TeamDavid Webbox (CVE-2026-54217)
CVE-2026-54208 Vulnerability in TeamDavid Webbox (CVE-2026-54208)
CVE-2026-54206 Vulnerability in Tobit Laboratories AG TeamDavid (CVE-2026-54206)
CVE-2026-54205 Vulnerability in Tobit Laboratories AG TeamDavid (CVE-2026-54205)
CVE-2026-54207 Vulnerability in Tobit Laboratories AG TeamDavid (CVE-2026-54207)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details