Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-85415 Cross-Site Scripting (XSS) in Audio Player Block (WordPress plugin) (CVE-2026-85415)
CVE-2026-102599 Vulnerability in engine.io (CVE-2026-102599)
CVE-2026-103043 Vulnerability in anchorme (CVE-2026-103043)
CVE-2026-102342 Cross-Site Scripting (XSS) in ammonia (CVE-2026-102342)
CVE-2026-71189 An attacker can construct a request that, if issued by another application user, will cause...
CVE-2026-102830 Cross-Site Scripting (XSS) in jupyterlab (CVE-2026-102830)
CVE-2026-102828 OS Command Injection in simple-git (CVE-2026-102828)
CVE-2026-102827 Command Injection in simple-git (CVE-2026-102827)
CVE-2026-102829 OS Command Injection in @simple-git/argv-parser (CVE-2026-102829)
CVE-2026-102826 Command Injection in simple-git (CVE-2026-102826)
CVE-2026-102282 Vulnerability in adm-zip (CVE-2026-102282)
CVE-2026-102677 Vulnerability in electron (CVE-2026-102677)
CVE-2026-102672 Vulnerability in electron (CVE-2026-102672)
CVE-2026-49264 Cross-Site Scripting (XSS) in oauthlib (CVE-2026-49264)
CVE-2026-92231 Cross-Site Scripting (XSS) in Joomla (CVE-2026-92231)
CVE-2026-102676 Privilege Escalation in electron (CVE-2026-102676)
CVE-2026-102674 Vulnerability in electron (CVE-2026-102674)
CVE-2026-102673 Vulnerability in electron (CVE-2026-102673)
CVE-2026-102675 Vulnerability in electron (CVE-2026-102675)
CVE-2026-101127 Cross-Site Scripting (XSS) in Balbooa (CVE-2026-101127)
CVE-2026-97711 Cross-Site Scripting (XSS) in serialize-javascript (CVE-2026-97711)
CVE-2026-102630 Vulnerability in UnoPim (CVE-2026-102630)
CVE-2026-102600 Vulnerability in @socket.io/cluster-engine (CVE-2026-102600)
CVE-2026-7192 Vulnerability in Dbit T-CPE301K 4G WiFi minirouter (CVE-2026-7192)
CVE-2026-100825 Use-After-Free in Mozilla Firefox (CVE-2026-100825)
CVE-2026-100813 Vulnerability in Mozilla Firefox (CVE-2026-100813)
CVE-2026-100817 Vulnerability in Mozilla Firefox (CVE-2026-100817)
CVE-2026-100814 Buffer Overflow in Mozilla Firefox (CVE-2026-100814)
CVE-2026-100793 JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Firefox 157.
CVE-2026-100796 Use-After-Free in Firefox (CVE-2026-100796)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details