Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,126

Image ID Title
CVE-2025-62413 Cross-Site Scripting (XSS) in MQTTX is an MQTT (CVE-2025-62413)
CVE-2025-55072 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary…
CVE-2025-54760 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary…
CVE-2025-54859 Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary…
CVE-2025-24833 Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of…
CVE-2025-62381 sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to…
CVE-2025-62410 In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating…
CVE-2025-62380 mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions…
CVE-2025-62378 CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a…
CVE-2025-61933 Cross-Site Scripting (XSS) in BIG-IP APM (CVE-2025-61933)
CVE-2025-59269 Cross-Site Scripting (XSS) in BIG-IP Configuration utility (CVE-2025-59269)
CVE-2025-10869 Cross-Site Scripting (XSS) in Oct8Ne (CVE-2025-10869)
CVE-2025-11160 Vulnerability in WPBakery Page Builder (WordPress plugin) (CVE-2025-11160)
CVE-2025-54272 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-54272)
CVE-2025-61796 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-61796)
CVE-2025-61797 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-61797)
CVE-2025-54264 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2025-54264)
CVE-2025-54266 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2025-54266)
CVE-2025-62374 Parse Javascript SDK provides access to the powerful Parse Server backend from your JavaScript app. Prior to 7.0.0…
CVE-2025-62366 mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions…
CVE-2025-42901 SAP Application Server for ABAP allows an authenticated attacker to store malicious JavaScript payloads which could be…
CVE-2025-62358 Cross-Site Scripting (XSS) in WeGIA (CVE-2025-62358)
CVE-2025-11184 Cross-Site Scripting (XSS) in QGIS QWC2 Registration GUI (CVE-2025-11184)
CVE-2025-11183 Cross-Site Scripting (XSS) in QGIS QWC2 (CVE-2025-11183)
CVE-2025-11655 Vulnerability in Total.js Flow (CVE-2025-11655)
CVE-2025-61927 Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Happy DOM v19 and lower…
CVE-2025-60308 Cross-Site Scripting (XSS) in Fabian (CVE-2025-60308)
CVE-2025-11189 Cross-Site Scripting (XSS) in Kiwire Captive Portal (CVE-2025-11189)
CVE-2025-35060 Cross-Site Scripting (XSS) in Newforma (CVE-2025-35060)
CVE-2025-60302 Cross-Site Scripting (XSS) in Fabian (CVE-2025-60302)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details