Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-17679 Vulnerability in Google Chrome (CVE-2026-17679)
CVE-2026-17684 Vulnerability in Google Chrome (CVE-2026-17684)
CVE-2026-17672 Vulnerability in Google Chrome (CVE-2026-17672)
CVE-2026-17671 Vulnerability in Google Chrome (CVE-2026-17671)
CVE-2026-17663 Vulnerability in Google Chrome (CVE-2026-17663)
CVE-2026-17664 Vulnerability in Google Chrome (CVE-2026-17664)
CVE-2026-17660 Vulnerability in Google Chrome (CVE-2026-17660)
CVE-2026-17655 Vulnerability in Google Chrome (CVE-2026-17655)
CVE-2026-17651 Vulnerability in Google Chrome (CVE-2026-17651)
CVE-2026-67436 Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems…
CVE-2026-54663 Vulnerability in swagger-typescript-api (CVE-2026-54663)
CVE-2026-18174 Vulnerability in Fastify (CVE-2026-18174)
CVE-2026-65891 Vulnerability in Widgetfactorylimited (CVE-2026-65891)
CVE-2026-58186 Vulnerability in Apache (CVE-2026-58186)
CVE-2026-58183 Vulnerability in Apache (CVE-2026-58183)
CVE-2026-33267 Vulnerability in Apache (CVE-2026-33267)
CVE-2026-54632 Vulnerability in SIPSorcery (CVE-2026-54632)
CVE-2026-62828 Vulnerability in Microsoft Edge (CVE-2026-62828)
CVE-2026-62425 [This CNA information record relates to multiple CVEs; the text explains which aspects...
CVE-2026-59878 Vulnerability in Apache Activemq (CVE-2026-59878)
CVE-2026-43813 Vulnerability in Apple Ipados (CVE-2026-43813)
CVE-2026-43793 Vulnerability in Apple macOS (CVE-2026-43793)
CVE-2026-43777 Vulnerability in Apple macOS (CVE-2026-43777)
CVE-2026-43714 Vulnerability in Apple Ipados (CVE-2026-43714)
CVE-2026-54272 Vulnerability in ip-address (CVE-2026-54272)
CVE-2026-46452 Vulnerability in Apache (CVE-2026-46452)
CVE-2026-54120 Vulnerability in Microsoft Surface (CVE-2026-54120)
CVE-2026-65604 Vulnerability in Skipper (CVE-2026-65604)
CVE-2026-47219 Vulnerability in find-my-way (CVE-2026-47219)
CVE-2026-73418 Vulnerability in @auth/core (CVE-2026-73418)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details