Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,859

Image ID Title
CVE-2026-45565 Vulnerability in Apache (CVE-2026-45565)
CVE-2026-45556 Vulnerability in Apache (CVE-2026-45556)
CVE-2026-45558 Vulnerability in Apache (CVE-2026-45558)
CVE-2026-45328 Vulnerability in ESF-IDF (CVE-2026-45328)
CVE-2026-45329 Vulnerability in ESF-IDF (CVE-2026-45329)
CVE-2026-41727 Vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41727)
CVE-2026-47903 Vulnerability in CAI Content Credentials (CVE-2026-47903)
CVE-2026-34712 Vulnerability in CAI Content Credentials (CVE-2026-34712)
CVE-2026-47930 Vulnerability in Adobe Coldfusion (CVE-2026-47930)
CVE-2026-47931 Vulnerability in Adobe Coldfusion (CVE-2026-47931)
CVE-2026-47928 Vulnerability in Adobe Coldfusion (CVE-2026-47928)
CVE-2026-47909 Vulnerability in Adobe macOS (CVE-2026-47909)
CVE-2026-44811 Vulnerability in Windows DWM Core Library (CVE-2026-44811)
CVE-2026-40376 Vulnerability in Visual Studio Code (CVE-2026-40376)
CVE-2026-0415 Vulnerability in Netgear Rbe970 Firmware (CVE-2026-0415)
CVE-2026-0419 Vulnerability in Netgear Jr6150 Firmware (CVE-2026-0419)
CVE-2026-0412 Vulnerability in NETGEAR JR6150 (CVE-2026-0412)
CVE-2026-0410 Vulnerability in Netgear R7000 Firmware (CVE-2026-0410)
CVE-2026-0416 Vulnerability in Netgear Raxe450 Firmware (CVE-2026-0416)
CVE-2026-0417 Vulnerability in NETGEAR devices (CVE-2026-0417)
CVE-2026-9210 Vulnerability in Netgear Ex3700 Firmware (CVE-2026-9210)
CVE-2026-9211 Vulnerability in Netgear Cax30 Firmware (CVE-2026-9211)
CVE-2026-9212 Vulnerability in Netgear Lbr1020 Firmware (CVE-2026-9212)
CVE-2026-9213 Vulnerability in Netgear Mr70 Firmware (CVE-2026-9213)
CVE-2026-49840 Vulnerability in FreeSWITCH (CVE-2026-49840)
CVE-2026-49475 Vulnerability in FreeSWITCH (CVE-2026-49475)
CVE-2026-48569 Vulnerability in Visual Studio Code (CVE-2026-48569)
CVE-2026-48288 Vulnerability in Adobe Experience Manager (CVE-2026-48288)
CVE-2026-48289 Vulnerability in Adobe Experience Manager (CVE-2026-48289)
CVE-2026-47641 Vulnerability in Microsoft Sharepoint Server (CVE-2026-47641)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details