Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2025-10573 Cross-Site Scripting (XSS) in Ivanti Endpoint Manager (CVE-2025-10573)
CVE-2025-42620 In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way…
CVE-2025-13308 Cross-Site Scripting (XSS) in Application Passwords (WordPress plugin) (CVE-2025-13308)
CVE-2025-66562 Cross-Site Scripting (XSS) in TUUI (CVE-2025-66562)
CVE-2025-66554 Cross-Site Scripting (XSS) in Nextcloud (CVE-2025-66554)
CVE-2025-66514 Cross-Site Scripting (XSS) in Nextcloud Mail (CVE-2025-66514)
CVE-2025-6946 Cross-Site Scripting (XSS) in Watchguard Firebox (CVE-2025-6946)
CVE-2025-65945 Vulnerability in Auth0 (CVE-2025-65945)
CVE-2025-65027 Cross-Site Scripting (XSS) in Rommapp (CVE-2025-65027)
CVE-2025-66458 Cross-Site Scripting (XSS) in Lookyloo (CVE-2025-66458)
CVE-2025-13873 Cross-Site Scripting (XSS) in Objectplanet (CVE-2025-13873)
CVE-2025-66412 Cross-Site Scripting (XSS) in @angular/compiler (CVE-2025-66412)
CVE-2025-65622 Cross-Site Scripting (XSS) in Snipe-IT (CVE-2025-65622)
CVE-2025-65621 Cross-Site Scripting (XSS) in Snipe-IT (CVE-2025-65621)
CVE-2025-66035 Vulnerability in @angular/common (CVE-2025-66035)
CVE-2025-64130 Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting vulnerability, which could allow a remote attacker to…
CVE-2025-13589 FMS developed by Otsuka Information Technology has a Reflected Cross-site Scripting vulnerability, allowing…
CVE-2025-13141 Cross-Site Scripting (XSS) in HT Mega – Absolute Addons For Elementor (WordPress plugin) (CVE-2025-13141)
CVE-2025-13159 Cross-Site Scripting (XSS) in WordPress (CVE-2025-13159)
CVE-2025-11003 Vulnerability in WordPress (CVE-2025-11003)
CVE-2025-64762 Vulnerability in Workos (CVE-2025-64762)
CVE-2025-64308 The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to…
CVE-2025-13204 Vulnerability in Silentmatt (CVE-2025-13204)
CVE-2025-10018 Cross-Site Scripting (XSS) in QuickCMS (CVE-2025-10018)
CVE-2025-64718 Vulnerability in Nodeca (CVE-2025-64718)
CVE-2025-40681 Cross-site Scripting (XSS) vulnerability reflected in xCally's Omnichannel v3.30.1. This vulnerability allowsan…
CVE-2025-64716 Cross-Site Scripting (XSS) in Anubis (CVE-2025-64716)
CVE-2025-11997 Information Disclosure in Document Pro Elementor – Documentation & Knowledge Base (WordPress plugin) (CVE-2025-11997)
CVE-2025-64338 Cross-Site Scripting (XSS) in Oxygenz (CVE-2025-64338)
CVE-2025-12460 An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below. An attacker can send a specially…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details