Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2026-27229 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27229)
CVE-2026-27230 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27230)
CVE-2026-27231 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27231)
CVE-2026-27232 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27232)
CVE-2026-27233 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27233)
CVE-2026-27223 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27223)
CVE-2026-27224 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27224)
CVE-2026-27225 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27225)
CVE-2026-27226 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27226)
CVE-2026-30951 SQL Injection in Sequelize is a Node.js ORM tool. Prior to (CVE-2026-30951)
CVE-2026-28292 Vulnerability in simple-git (CVE-2026-28292)
CVE-2025-13902 Cross-Site Scripting (XSS) in Schneider Electric Modicon M258 Firmware (CVE-2025-13902)
CVE-2025-40638 Cross-Site Scripting (XSS) in Sbitsoft (CVE-2025-40638)
CVE-2026-29786 Path Traversal in Isaacs (CVE-2026-29786)
CVE-2025-69654 Vulnerability in Quickjs Project (CVE-2025-69654)
CVE-2026-29063 Vulnerability in Immutable Js (CVE-2026-29063)
CVE-2025-69653 Vulnerability in Quickjs Project (CVE-2025-69653)
CVE-2026-29091 Vulnerability in Locutus (CVE-2026-29091)
CVE-2026-29074 Vulnerability in SVGO (CVE-2026-29074)
CVE-2026-20066 Vulnerability in Cisco Snort 3 Detection Engine (CVE-2026-20066)
CVE-2025-66024 Vulnerability in org.xwiki.contrib.blog:application-blog-ui (CVE-2025-66024)
CVE-2026-3520 Vulnerability in Multer (CVE-2026-3520)
CVE-2025-15599 Cross-Site Scripting (XSS) in DOMPurify (CVE-2025-15599)
CVE-2026-3343 Cross-Site Scripting (XSS) in Fireware OS Web UI enabled execution (CVE-2026-3343)
CVE-2026-2293 Authorization Flaw in nest.Js (CVE-2026-2293)
CVE-2026-3304 Vulnerability in Multer (CVE-2026-3304)
CVE-2026-2359 Vulnerability in Multer (CVE-2026-2359)
CVE-2026-24351 Cross-Site Scripting (XSS) in PluXml CMS (CVE-2026-24351)
CVE-2026-1692 Vulnerability in Arcinfo (CVE-2026-1692)
CVE-2026-27970 Cross-Site Scripting (XSS) in Angular (CVE-2026-27970)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details