Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-103625 Vulnerability in Google Chrome (CVE-2026-103625)
CVE-2026-83745 Vulnerability in Apache (CVE-2026-83745)
CVE-2026-96294 Vulnerability in Apache (CVE-2026-96294)
CVE-2026-94646 Vulnerability in Apache (CVE-2026-94646)
CVE-2026-86536 Vulnerability in Apache (CVE-2026-86536)
CVE-2026-86535 Vulnerability in Apache (CVE-2026-86535)
CVE-2026-104473 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-104473)
CVE-2026-104465 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-104465)
CVE-2026-104466 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-104466)
CVE-2026-104450 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-104450)
CVE-2026-94645 Vulnerability in Apache (CVE-2026-94645)
CVE-2026-93880 Cross-Site Scripting (XSS) in Greenshift – animation and page builder blocks (WordPress plugin) (CVE-2026-93880)
CVE-2026-13718 Cross-Site Scripting (XSS) in Tabs Responsive (WordPress plugin) (CVE-2026-13718)
CVE-2026-93367 Cross-Site Scripting (XSS) in Visitors Traffic Real Time Statistics Pro (WordPress plugin) (CVE-2026-93367)
CVE-2026-96780 Vulnerability in figlet (CVE-2026-96780)
CVE-2026-104182 Vulnerability in stream-json (CVE-2026-104182)
CVE-2026-70650 Cross-Site Scripting (XSS) in GetSimple CMS (CVE-2026-70650)
CVE-2026-71542 Cross-Site Scripting (XSS) in GetSimple CMS (CVE-2026-71542)
CVE-2026-102667 Joyland AI app allows an attacker with shared network access to inject JavaScript into content...
CVE-2026-55230 Cross-Site Scripting (XSS) in Vvveb (CVE-2026-55230)
CVE-2026-103923 Vulnerability in katex (CVE-2026-103923)
CVE-2026-103921 Vulnerability in @graphql-tools/executor-legacy-ws (CVE-2026-103921)
CVE-2026-101890 Cross-Site Scripting (XSS) in Prime Mover (WordPress plugin) (CVE-2026-101890)
CVE-2026-67104 Information Disclosure in HCL BigFix Service Management (CVE-2026-67104)
CVE-2026-103004 Vulnerability in Next.js (CVE-2026-103004)
CVE-2026-103249 Cross-Site Scripting (XSS) in n8n (CVE-2026-103249)
CVE-2026-7176 CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-...
CVE-2026-7175 CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile...
CVE-2026-7174 Cross-Site Scripting (XSS) in Entradium (CVE-2026-7174)
CVE-2026-7173 Cross-Site Scripting (XSS) in Entradium (CVE-2026-7173)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details