JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2017-1305 Cross-Site Scripting (XSS) in Ibm Rational Doors Next Generation (CVE-2017-1305)
CVE-2016-9834 Cross-Site Scripting (XSS) in Sophos Cyberoam Firmware (CVE-2016-9834)
CVE-2017-9451 Cross-Site Scripting (XSS) in Flatcore (CVE-2017-9451)
CVE-2017-9420 Cross-Site Scripting (XSS) in WordPress Sunnythemes (CVE-2017-9420)
CVE-2017-9298 Cross-Site Scripting (XSS) in Hitachi (CVE-2017-9298)
CVE-2017-9250 Vulnerability in Jerryscript (CVE-2017-9250)
CVE-2017-7296 Cross-Site Scripting (XSS) in Contiki Os (CVE-2017-7296)
CVE-2017-1325 Cross-Site Scripting (XSS) in Ibm Inotes (CVE-2017-1325)
CVE-2017-1282 Cross-Site Scripting (XSS) in Ibm Content Navigator (CVE-2017-1282)
CVE-2017-1320 Cross-Site Scripting (XSS) in Ibm Tivoli Federated Identity Manager (CVE-2017-1320)
CVE-2017-0223 Buffer Overflow in Microsoft Edge (CVE-2017-0223)
CVE-2017-0252 Buffer Overflow in Microsoft Edge (CVE-2017-0252)
CVE-2017-7474 Vulnerability in Keycloak (CVE-2017-7474)
CVE-2017-0238 Buffer Overflow in Microsoft Edge (CVE-2017-0238)
CVE-2017-0224 Buffer Overflow in Microsoft Edge (CVE-2017-0224)
CVE-2017-0228 Buffer Overflow in Microsoft Edge (CVE-2017-0228)
CVE-2017-0229 Buffer Overflow in Microsoft Edge (CVE-2017-0229)
CVE-2017-0230 Buffer Overflow in Microsoft Edge (CVE-2017-0230)
CVE-2017-0234 Buffer Overflow in Microsoft Edge (CVE-2017-0234)
CVE-2017-0235 Buffer Overflow in Microsoft Edge (CVE-2017-0235)
CVE-2017-0236 Buffer Overflow in Microsoft Edge (CVE-2017-0236)
CVE-2016-3032 Cross-Site Scripting (XSS) in Ibm Cognos Analytics (CVE-2016-3032)
CVE-2016-5888 Cross-Site Scripting (XSS) in Ibm Interact (CVE-2016-5888)
CVE-2016-6035 Cross-Site Scripting (XSS) in Ibm Rational Team Concert (CVE-2016-6035)
CVE-2016-9257 Cross-Site Scripting (XSS) in Big Ip Access Policy Manager (CVE-2016-9257)
CVE-2017-0893 Cross-Site Scripting (XSS) in Nextcloud (CVE-2017-0893)
CVE-2017-7909 Vulnerability in Advantech Bb Smartworx (CVE-2017-7909)
CVE-2017-8288 Vulnerability in Gnome (CVE-2017-8288)
CVE-2017-5045 Cross-Site Scripting (XSS) in Google Chrome (CVE-2017-5045)
CVE-2017-7990 Cross-Site Request Forgery (CSRF) in Openmrs (CVE-2017-7990)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details