Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2024-13992 Cross-Site Scripting (XSS) in Nagios Xi (CVE-2024-13992)
CVE-2025-27208 Cross-Site Scripting (XSS) in Revive Adserver (CVE-2025-27208)
CVE-2024-13993 Cross-Site Scripting (XSS) in Nagios Xi (CVE-2024-13993)
CVE-2023-53690 Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rende...
CVE-2023-7312 Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in th...
CVE-2011-10036 Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the handling of the "backend_url" JavaScript link. Insufficient validation or escaping of user-supplied input may...
CVE-2025-64112 Cross-Site Scripting (XSS) in Laravel Collections (CVE-2025-64112)
CVE-2025-64118 node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns…
CVE-2025-53883 A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run arbitrary javascript via a reflected XSS issue in the search fields.This issue aff...
CVE-2025-62798 Cross-Site Scripting (XSS) in Laravel Sharp (CVE-2025-62798)
CVE-2025-34318 Cross-Site Scripting (XSS) in IPFire (CVE-2025-34318)
CVE-2025-34315 Cross-Site Scripting (XSS) in IPFire (CVE-2025-34315)
CVE-2025-34316 Cross-Site Scripting (XSS) in IPFire (CVE-2025-34316)
CVE-2025-53533 Cross-Site Scripting (XSS) in Pi Hole Web Interface (CVE-2025-53533)
CVE-2025-32785 Cross-Site Scripting (XSS) in Pi Hole Web Interface (CVE-2025-32785)
CVE-2025-36138 Cross-Site Scripting (XSS) in IBM QRadar SIEM (CVE-2025-36138)
CVE-2025-36170 Cross-Site Scripting (XSS) in IBM QRadar SIEM (CVE-2025-36170)
CVE-2025-11682 Cross-Site Scripting (XSS) in Perx Customer Engagement & Loyalty Platform (CVE-2025-11682)
CVE-2025-62942 Cross-Site Scripting (XSS) in WP Mapbox GL JS Maps (CVE-2025-62942)
CVE-2025-11760 Information Disclosure in WordPress (CVE-2025-11760)
CVE-2025-62716 Cross-Site Scripting (XSS) in Plane (CVE-2025-62716)
CVE-2025-9158 The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which…
CVE-2025-62517 Rollbar.js offers error tracking and logging from Javascript to Rollbar. In versions before 2.26.5 and from…
CVE-2025-60837 Cross-Site Scripting (XSS) in MCMS (CVE-2025-60837)
CVE-2025-9980 Cross-Site Scripting (XSS) in QuickCMS (CVE-2025-9980)
CVE-2025-9981 Cross-Site Scripting (XSS) in QuickCMS (CVE-2025-9981)
CVE-2025-62610 Vulnerability in Hono (CVE-2025-62610)
CVE-2025-11952 Cross-Site Scripting (XSS) in Oct8Ne (CVE-2025-11952)
CVE-2025-62595 Open Redirect in Koajs (CVE-2025-62595)
CVE-2025-62522 Path Traversal in Vite (CVE-2025-62522)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details