Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,126

Image ID Title
CVE-2025-59764 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59764)
CVE-2025-59751 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59751)
CVE-2025-59752 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59752)
CVE-2025-59753 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59753)
CVE-2025-59754 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59754)
CVE-2025-59755 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59755)
CVE-2025-59756 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59756)
CVE-2025-59757 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59757)
CVE-2025-59746 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59746)
CVE-2025-59747 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59747)
CVE-2025-59748 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59748)
CVE-2025-59749 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59749)
CVE-2025-59750 Cross-Site Scripting (XSS) in Andsoft (CVE-2025-59750)
CVE-2025-56200 Cross-Site Scripting (XSS) in Validator Project (CVE-2025-56200)
CVE-2025-56571 Vulnerability in Finance.js (CVE-2025-56571)
CVE-2025-56572 Vulnerability in Ebradyjobory (CVE-2025-56572)
CVE-2025-35034 Cross-Site Scripting (XSS) in Medical Informatics Engineering Enterprise Health (CVE-2025-35034)
CVE-2025-57875 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57875)
CVE-2025-57876 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57876)
CVE-2025-57873 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57873)
CVE-2025-57874 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57874)
CVE-2025-57877 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57877)
CVE-2025-57871 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2025-57871)
CVE-2025-56807 Cross-Site Scripting (XSS) in FairSketch RISE Ultimate Project Manager & CRM (CVE-2025-56807)
CVE-2025-36352 Cross-Site Scripting (XSS) in IBM License Metric Tool (CVE-2025-36352)
CVE-2025-36239 Cross-Site Scripting (XSS) in IBM Storage TS4500 Library (CVE-2025-36239)
CVE-2025-11019 Cross-Site Scripting (XSS) in Total.js CMS (CVE-2025-11019)
CVE-2025-60249 Cross-Site Scripting (XSS) in vulnerability-lookup (CVE-2025-60249)
CVE-2025-33116 Cross-Site Scripting (XSS) in IBM Watson Studio (CVE-2025-33116)
CVE-2025-59831 Command Injection in Riceball (CVE-2025-59831)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details