Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2025-59546 Cross-Site Scripting (XSS) in Dnnsoftware (CVE-2025-59546)
CVE-2025-59548 Cross-Site Scripting (XSS) in Dnnsoftware (CVE-2025-59548)
CVE-2025-59539 Cross-Site Scripting (XSS) in Dnnsoftware (CVE-2025-59539)
CVE-2025-0209 Cross-Site Scripting (XSS) in WSO2 Identity Server (CVE-2025-0209)
CVE-2025-7106 Vulnerability in danny-avila/librechat (CVE-2025-7106)
CVE-2025-59434 Information Disclosure in Flowise (CVE-2025-59434)
CVE-2025-59526 mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version…
CVE-2025-59430 Cross-Site Scripting (XSS) in Mesh Connect JS SDK (CVE-2025-59430)
CVE-2025-58653 Cross-Site Scripting (XSS) in JSM file_get_contents() Shortcode (CVE-2025-58653)
CVE-2025-58234 Cross-Site Scripting (XSS) in JS Job Manager (CVE-2025-58234)
CVE-2025-55887 Cross-Site Scripting (XSS) in Ard (CVE-2025-55887)
CVE-2025-55888 Cross-Site Scripting (XSS) in Ard (CVE-2025-55888)
CVE-2025-37122 A vulnerability in the web-based management interface of network access control services could allow an unauthenticated…
CVE-2025-57145 Cross-Site Scripting (XSS) in ATSMS web application (CVE-2025-57145)
CVE-2025-57117 Cross-Site Scripting (XSS) in Rems' Employee Management System (CVE-2025-57117)
CVE-2025-59145 color-name is a JSON with CSS color names. On 8 September 2025, an npm publishing account for color-name was taken over…
CVE-2025-59144 debug is a JavaScript debugging utility. On 8 September 2025, the npm publishing account for debug was taken over after…
CVE-2025-10210 Vulnerability in yanyutao0402 ChanCMS (CVE-2025-10210)
CVE-2025-40725 Cross-Site Scripting (XSS) in Azon Dominator (CVE-2025-40725)
CVE-2025-58752 Vulnerability in Vitejs (CVE-2025-58752)
CVE-2025-58830 Cross-Site Scripting (XSS) in Parallax Scrolling Enllax.js (CVE-2025-58830)
CVE-2025-58831 Cross-Site Request Forgery (CSRF) in Parallax Scrolling Enllax.js (CVE-2025-58831)
CVE-2025-9567 Cross-Site Scripting (XSS) in Sunnet (CVE-2025-9567)
CVE-2025-9568 Cross-Site Scripting (XSS) in Sunnet (CVE-2025-9568)
CVE-2025-58047 Vulnerability in Volto (CVE-2025-58047)
CVE-2025-56236 Cross-Site Scripting (XSS) in FormCms (CVE-2025-56236)
CVE-2025-51971 SQL Injection in PuneethReddyHC Online Shopping System Advanced (CVE-2025-51971)
CVE-2025-51967 Cross-Site Scripting (XSS) in ProjectsAndPrograms School Management System (CVE-2025-51967)
CVE-2024-49790 Cross-Site Scripting (XSS) in IBM Watson Studio on Cloud Pak for Data (CVE-2024-49790)
CVE-2025-34521 Cross-Site Scripting (XSS) in Arcserve Unified Data Protection (CVE-2025-34521)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details