Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2025-0178 Vulnerability in Watchguard Fireware OS (CVE-2025-0178)
CVE-2025-1239 Cross-Site Scripting (XSS) in Fireware OS (CVE-2025-1239)
CVE-2024-11831 Cross-Site Scripting (XSS) in serialize-javascript (CVE-2024-11831)
CVE-2024-55591 KEV [KEV] Vulnerability in Fortinet FortiOS and FortiProxy (CVE-2024-55591)
CVE-2025-23108 Cross-Site Scripting (XSS) in Mozilla Firefox (CVE-2025-23108)
CVE-2025-0240 Use-After-Free in Mozilla Firefox (CVE-2025-0240)
CVE-2024-11680 KEV [KEV] Authentication Bypass in ProjectSend (CVE-2024-11680)
CVE-2024-21536 Vulnerability in Chimurai (CVE-2024-21536)
CVE-2024-42831 Cross-Site Scripting (XSS) in Elaine's Realtime CRM Automation (CVE-2024-42831)
CVE-2024-9440 Cross-Site Scripting (XSS) in Slim Select (CVE-2024-9440)
CVE-2024-8644 Vulnerability in ValeApp (CVE-2024-8644)
CVE-2023-46948 A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote…
CVE-2024-42467 SSRF (Server-Side Request Forgery) in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467)
CVE-2024-43111 Cross-Site Scripting (XSS) in Mozilla Firefox Mobile (CVE-2024-43111)
CVE-2024-3166 Cross-Site Scripting (XSS) in Mintplexlabs (CVE-2024-3166)
CVE-2024-4367 Vulnerability in pdfjs-dist (CVE-2024-4367)
CVE-2023-6717 Cross-Site Scripting (XSS) in Keycloak (CVE-2023-6717)
CVE-2024-24398 Path Traversal in Stimulsoft GmbH Stimulsoft Dashboard.JS (CVE-2024-24398)
CVE-2024-24396 Cross-Site Scripting (XSS) in Stimulsoft GmbH Stimulsoft Dashboard.JS (CVE-2024-24396)
CVE-2024-24397 Cross-Site Scripting (XSS) in Stimulsoft GmbH Stimulsoft Dashboard.JS (CVE-2024-24397)
CVE-2024-0758 Cross-Site Scripting (XSS) in de.ipb-halle:molecularfaces (CVE-2024-0758)
CVE-2024-22048 Cross-Site Scripting (XSS) in govuk_tech_docs (CVE-2024-22048)
CVE-2024-21910 Vulnerability in django-tinymce (CVE-2024-21910)
CVE-2024-21911 Cross-Site Scripting (XSS) in tinymce (CVE-2024-21911)
CVE-2024-21908 Cross-Site Scripting (XSS) in tinymce (CVE-2024-21908)
CVE-2023-48795 Vulnerability in russh (CVE-2023-48795)
CVE-2023-30585 Vulnerability in Node.js (CVE-2023-30585)
CVE-2023-48238 Vulnerability in json-web-token (CVE-2023-48238)
CVE-2023-46233 Vulnerability in crypto-js (CVE-2023-46233)
CVE-2023-45815 Cross-Site Scripting (XSS) in archivebox (CVE-2023-45815)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details