Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,856
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,857

Image ID Title
CVE-2026-101919 Vulnerability in HyperShift operator (CVE-2026-101919)
CVE-2026-104811 DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary...
CVE-2026-105117 OpenAM before 16.1.3 contains an email content injection vulnerability that allows...
CVE-2026-63569 Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy…
CVE-2025-31980 Vulnerability in Hcltech (CVE-2025-31980)
CVE-2026-55094 Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior…
CVE-2026-47546 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause…
CVE-2026-47547 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause…
CVE-2026-47542 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-47543 VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-47522 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-103389 MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a…
CVE-2026-103321 MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph…
CVE-2026-85532 Vulnerability in Apache (CVE-2026-85532)
CVE-2026-93995 Vulnerability in Apache (CVE-2026-93995)
CVE-2026-103237 MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various…
CVE-2026-102823 Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in…
CVE-2026-95382 Vulnerability in Google Chrome (CVE-2026-95382)
CVE-2026-95381 Vulnerability in Google Chrome (CVE-2026-95381)
CVE-2026-95364 Vulnerability in Google Chrome (CVE-2026-95364)
CVE-2026-95341 Vulnerability in Google Chrome (CVE-2026-95341)
CVE-2026-95276 Vulnerability in Google Chrome (CVE-2026-95276)
CVE-2026-102677 Vulnerability in electron (CVE-2026-102677)
CVE-2026-102600 Vulnerability in @socket.io/cluster-engine (CVE-2026-102600)
CVE-2026-100787 Vulnerability in Mozilla Firefox (CVE-2026-100787)
CVE-2026-101266 A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire…
CVE-2026-97027 Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry…
CVE-2026-100370 DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to version 1.0.15, the isDangerousUrl() method is…
CVE-2026-96760 Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The…
CVE-2026-13018 Vulnerability in Google Chrome (CVE-2026-13018)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details