Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2025-71165 Cross-Site Scripting (XSS) in Typesetter CMS (CVE-2025-71165)
CVE-2025-71166 Cross-Site Scripting (XSS) in Typesetter CMS (CVE-2025-71166)
CVE-2025-55462 Vulnerability in Eramba (CVE-2025-55462)
CVE-2026-22610 Cross-Site Scripting (XSS) in @angular/compiler (CVE-2026-22610)
CVE-2026-22029 Cross-Site Scripting (XSS) in Shopify (CVE-2026-22029)
CVE-2025-59057 Cross-Site Scripting (XSS) in react-router (CVE-2025-59057)
CVE-2026-21884 Cross-Site Scripting (XSS) in react-router (CVE-2026-21884)
CVE-2025-14984 Cross-Site Scripting (XSS) in Gutenverse Form (WordPress plugin) (CVE-2025-14984)
CVE-2025-15479 Cross-Site Scripting (XSS) in Ngsurvey (CVE-2025-15479)
CVE-2025-14842 Unrestricted File Upload in WordPress (CVE-2025-14842)
CVE-2025-66648 Cross-Site Scripting (XSS) in vega-functions (CVE-2025-66648)
CVE-2025-68428 Vulnerability in jsPDF (CVE-2025-68428)
CVE-2025-65110 Cross-Site Scripting (XSS) in Vega (CVE-2025-65110)
CVE-2026-0621 Vulnerability in @modelcontextprotocol/sdk (CVE-2026-0621)
CVE-2025-59158 Vulnerability in Coollabs (CVE-2025-59158)
CVE-2025-68272 Vulnerability in Signalk (CVE-2025-68272)
CVE-2025-15355 ISOinsight developed by NetVision Information has a Reflected Cross-site Scripting vulnerability, allowing…
CVE-2025-15284 Vulnerability in qs (CVE-2025-15284)
CVE-2025-69211 Vulnerability in Nest (CVE-2025-69211)
CVE-2025-68951 Cross-Site Scripting (XSS) in phpMyFAQ (CVE-2025-68951)
CVE-2025-65442 Cross-Site Scripting (XSS) in 201206030 novel (CVE-2025-65442)
CVE-2025-68697 Privilege Escalation in N8N (CVE-2025-68697)
CVE-2025-61914 Cross-Site Scripting (XSS) in N8N (CVE-2025-61914)
CVE-2025-13158 Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to…
CVE-2025-68946 Cross-Site Scripting (XSS) in Gitea (CVE-2025-68946)
CVE-2025-67288 Unrestricted File Upload in Umbraco CMS (CVE-2025-67288)
CVE-2025-15002 Vulnerability in SeaCMS (CVE-2025-15002)
CVE-2025-14202 A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG…
CVE-2025-68147 Cross-Site Scripting (XSS) in Return Policy" configuration field (CVE-2025-68147)
CVE-2025-65233 Cross-Site Scripting (XSS) in SLiMS (CVE-2025-65233)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details