Cwe 20

🧬 CWE Related 125
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,280

ID Title
CVE-2026-62296 Vulnerability in CVE-2026-62296 (CVE-2026-62296)
CVE-2026-62293 Vulnerability in CVE-2026-62293 (CVE-2026-62293)
CVE-2026-62295 Vulnerability in CVE-2026-62295 (CVE-2026-62295)
CVE-2026-54217 Vulnerability in CVE-2026-54217 (CVE-2026-54217)
CVE-2026-54206 Vulnerability in CVE-2026-54206 (CVE-2026-54206)
CVE-2026-54207 Vulnerability in CVE-2026-54207 (CVE-2026-54207)
CVE-2026-54205 Vulnerability in CVE-2026-54205 (CVE-2026-54205)
CVE-2026-54204 Vulnerability in CVE-2026-54204 (CVE-2026-54204)
CVE-2026-54208 Vulnerability in CVE-2026-54208 (CVE-2026-54208)
CVE-2026-54199 Vulnerability in CVE-2026-54199 (CVE-2026-54199)
CVE-2026-19177 Vulnerability in google (CVE-2026-19177)
CVE-2026-19169 Vulnerability in privilege-escalation (CVE-2026-19169)
CVE-2026-19164 Vulnerability in google (CVE-2026-19164)
CVE-2026-19153 Vulnerability in google (CVE-2026-19153)
CVE-2026-19143 Vulnerability in google (CVE-2026-19143)
CVE-2026-15149 Vulnerability in wordpress (CVE-2026-15149)
CVE-2026-14225 Vulnerability in wordpress (CVE-2026-14225)
CVE-2024-6541 Vulnerability in CVE-2024-6541 (CVE-2024-6541)
CVE-2026-16316 Vulnerability in CVE-2026-16316 (CVE-2026-16316)
CVE-2026-57817 Vulnerability in apache (CVE-2026-57817)
CVE-2025-13909 Vulnerability in wso2 (CVE-2025-13909)
CVE-2024-10302 Vulnerability in wso2 (CVE-2024-10302)
CVE-2026-71318 Vulnerability in nuxt (CVE-2026-71318)
CVE-2026-20273 Vulnerability in Cisco ios-xe (CVE-2026-20273)
CVE-2026-20303 Vulnerability in cisco (CVE-2026-20303)
CVE-2026-70607 Vulnerability in electron (CVE-2026-70607)
CVE-2026-70603 Vulnerability in electron (CVE-2026-70603)
CVE-2026-46334 Vulnerability in dos (CVE-2026-46334)
CVE-2026-70589 Vulnerability in ghost (CVE-2026-70589)
CVE-2026-16793 Vulnerability in CVE-2026-16793 (CVE-2026-16793)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →