Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 125
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 78120 Cwe 787105 Cwe 41699 Cwe 2296 Cwe 11990 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 1,691

ID Title
CVE-2026-10981 Vulnerability in google (CVE-2026-10981)
CVE-2026-10983 Vulnerability in google (CVE-2026-10983)
CVE-2026-10971 Vulnerability in google (CVE-2026-10971)
CVE-2026-10969 Vulnerability in privilege-escalation (CVE-2026-10969)
CVE-2026-10970 Vulnerability in google (CVE-2026-10970)
CVE-2026-10974 Vulnerability in google (CVE-2026-10974)
CVE-2026-10966 Vulnerability in google (CVE-2026-10966)
CVE-2026-10968 Vulnerability in google (CVE-2026-10968)
CVE-2026-10942 Vulnerability in privilege-escalation (CVE-2026-10942)
CVE-2026-10938 Vulnerability in google (CVE-2026-10938)
CVE-2026-10922 Vulnerability in google (CVE-2026-10922)
CVE-2026-10920 Vulnerability in google (CVE-2026-10920)
CVE-2026-10917 Vulnerability in google (CVE-2026-10917)
CVE-2026-10916 Vulnerability in google (CVE-2026-10916)
CVE-2026-10912 Vulnerability in c (CVE-2026-10912)
CVE-2026-10911 Vulnerability in google (CVE-2026-10911)
CVE-2026-10904 Vulnerability in google (CVE-2026-10904)
CVE-2026-36175 Vulnerability in CVE-2026-36175 (CVE-2026-36175)
CVE-2026-10863 Vulnerability in sqli (CVE-2026-10863)
CVE-2026-37460 Vulnerability in c (CVE-2026-37460)
CVE-2026-35081 Vulnerability in mbs-solutions (CVE-2026-35081)
CVE-2026-35049 Vulnerability in CVE-2026-35049 (CVE-2026-35049)
CVE-2026-44367 Vulnerability in apache (CVE-2026-44367)
CVE-2026-7195 CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x,...
CVE-2026-3620 Vulnerability in wordpress (CVE-2026-3620)
CVE-2026-10566 Vulnerability in deserialization (CVE-2026-10566)
CVE-2026-28578 Vulnerability in dos (CVE-2026-28578)
CVE-2026-0085 Vulnerability in dos (CVE-2026-0085)
CVE-2026-0070 Vulnerability in dos (CVE-2026-0070)
CVE-2026-0078 Vulnerability in google (CVE-2026-0078)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →