Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2025-68154 OS Command Injection in Microsoft Windows (CVE-2025-68154)
CVE-2025-68130 tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version…
CVE-2025-68115 Cross-Site Scripting (XSS) in Parse Server's password reset (CVE-2025-68115)
CVE-2025-67744 Code Injection in DeepChat (CVE-2025-67744)
CVE-2023-53888 Code Injection in Zomplog (CVE-2023-53888)
CVE-2025-66843 Cross-Site Scripting (XSS) in grav (CVE-2025-66843)
CVE-2025-65778 Cross-Site Scripting (XSS) in Wekan The Open Source kanban board system (CVE-2025-65778)
CVE-2025-14021 Vulnerability in Linecorp (CVE-2025-14021)
CVE-2025-14695 Vulnerability in SamuNatsu HaloBot (CVE-2025-14695)
CVE-2025-36750 Cross-Site Scripting (XSS) in ShineLan-X (CVE-2025-36750)
CVE-2025-36748 Cross-Site Scripting (XSS) in ShineLan-X (CVE-2025-36748)
CVE-2025-14278 Cross-Site Scripting (XSS) in HT Slider for Elementor (WordPress plugin) (CVE-2025-14278)
CVE-2025-8083 Vulnerability in vuetify (CVE-2025-8083)
CVE-2025-67634 Cross-Site Scripting (XSS) in CISA Software Acquisition Guide Supplier Response Web Tool (CVE-2025-67634)
CVE-2025-67750 Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of…
CVE-2025-67734 Cross-Site Scripting (XSS) in Frappe (CVE-2025-67734)
CVE-2025-67730 Cross-Site Scripting (XSS) in Frappe (CVE-2025-67730)
CVE-2025-67731 Vulnerability in Express itself (CVE-2025-67731)
CVE-2025-67727 Code Injection in Parseplatform (CVE-2025-67727)
CVE-2025-13989 Cross-Site Scripting (XSS) in WP Dropzone (WordPress plugin) (CVE-2025-13989)
CVE-2025-13866 Vulnerability in Flow-Flow Social Feed Stream (WordPress plugin) (CVE-2025-13866)
CVE-2025-66452 Cross-Site Scripting (XSS) in LibreChat (CVE-2025-66452)
CVE-2024-58304 Cross-Site Scripting (XSS) in SPA-CART CMS (CVE-2024-58304)
CVE-2024-58292 Cross-Site Scripting (XSS) in XMB Forum (CVE-2024-58292)
CVE-2024-58296 Cross-Site Scripting (XSS) in CE Phoenix (CVE-2024-58296)
CVE-2025-59803 Vulnerability in Apple macOS (CVE-2025-59803)
CVE-2025-59802 Vulnerability in Apple macOS (CVE-2025-59802)
CVE-2025-55307 Out-of-Bounds Read in Microsoft Windows (CVE-2025-55307)
CVE-2025-55308 Use-After-Free in Microsoft Windows (CVE-2025-55308)
CVE-2025-55309 Use-After-Free in Apple macOS (CVE-2025-55309)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details