Cwe 20

🧬 CWE Related 125
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,280

ID Title
CVE-2026-60648 Vulnerability in c (CVE-2026-60648)
CVE-2026-60636 Vulnerability in c (CVE-2026-60636)
CVE-2026-60634 Vulnerability in c (CVE-2026-60634)
CVE-2026-60633 Vulnerability in c (CVE-2026-60633)
CVE-2026-60620 Vulnerability in c (CVE-2026-60620)
CVE-2026-60613 Vulnerability in c (CVE-2026-60613)
CVE-2026-60603 Vulnerability in c (CVE-2026-60603)
CVE-2026-60526 Vulnerability in c (CVE-2026-60526)
CVE-2026-64877 Vulnerability in sqli (CVE-2026-64877)
CVE-2026-15724 Vulnerability in path-traversal (CVE-2026-15724)
CVE-2026-15792 Vulnerability in mobyproject (CVE-2026-15792)
CVE-2026-16378 Vulnerability in mozilla (CVE-2026-16378)
CVE-2026-1771 Vulnerability in wordpress (CVE-2026-1771)
CVE-2026-58624 Vulnerability in apache (CVE-2026-58624)
CVE-2026-44978 Vulnerability in dos (CVE-2026-44978)
CVE-2026-35048 Vulnerability in CVE-2026-35048 (CVE-2026-35048)
CVE-2026-63428 Vulnerability in CVE-2026-63428 (CVE-2026-63428)
CVE-2026-63734 Vulnerability in dos (CVE-2026-63734)
CVE-2026-42566 Vulnerability in meshtastic (CVE-2026-42566)
CVE-2026-16117 Vulnerability in fastify (CVE-2026-16117)
CVE-2026-7755 IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
CVE-2024-23577 Vulnerability in CVE-2024-23577 (CVE-2024-23577)
CVE-2026-53411 Vulnerability in zoom (CVE-2026-53411)
CVE-2026-53412 Vulnerability in zoom (CVE-2026-53412)
CVE-2026-53409 Vulnerability in zoom (CVE-2026-53409)
CVE-2026-54728 Vulnerability in CVE-2026-54728 (CVE-2026-54728)
CVE-2026-50012 Vulnerability in squid-cache (CVE-2026-50012)
CVE-2026-11386 Vulnerability in CVE-2026-11386 (CVE-2026-11386)
CVE-2026-40958 Vulnerability in dos (CVE-2026-40958)
CVE-2026-56678 Vulnerability in CVE-2026-56678 (CVE-2026-56678)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →