Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-100643 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-100643)
CVE-2026-100639 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-100639)
CVE-2026-100634 Vulnerability in SiYuan (CVE-2026-100634)
CVE-2026-100630 Cross-Site Scripting (XSS) in AVideo (CVE-2026-100630)
CVE-2026-100611 Capgo (capgo.app backend, versions ≤ 12.261.0) improperly restricts which roles the...
CVE-2026-85081 Cross-Site Scripting (XSS) in File Manager (WordPress plugin) (CVE-2026-85081)
CVE-2026-100521 Cross-Site Scripting (XSS) in Cotonti (CVE-2026-100521)
CVE-2026-100522 Cross-Site Scripting (XSS) in Cotonti (CVE-2026-100522)
CVE-2026-71483 Cross-Site Scripting (XSS) in Horilla (CVE-2026-71483)
CVE-2026-63216 Vulnerability in Zammad (CVE-2026-63216)
CVE-2026-56731 Cross-Site Scripting (XSS) in Zammad (CVE-2026-56731)
CVE-2026-67410 Information Disclosure in RabbitMQ (CVE-2026-67410)
CVE-2026-67237 Cross-Site Scripting (XSS) in RabbitMQ (CVE-2026-67237)
CVE-2026-18312 Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata...
CVE-2026-85293 Cross-Site Scripting (XSS) in InvoicePlane (CVE-2026-85293)
CVE-2026-100176 Cross-Site Scripting (XSS) in AIL Framework (CVE-2026-100176)
CVE-2026-100190 The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site...
CVE-2026-100174 The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored...
CVE-2026-100172 Cross-Site Scripting (XSS) in AIL Framework (CVE-2026-100172)
CVE-2026-6084 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6084)
CVE-2026-6086 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6086)
CVE-2026-6082 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6082)
CVE-2026-6083 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6083)
CVE-2026-6087 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6087)
CVE-2026-6085 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6085)
CVE-2026-6088 Cross-Site Scripting (XSS) in StockAgile API (CVE-2026-6088)
CVE-2026-96752 Cross-Site Scripting (XSS) in Zero Spam for (WordPress plugin) (CVE-2026-96752)
CVE-2026-84280 Cross-Site Scripting (XSS) in Fancy Product Designer (WordPress plugin) (CVE-2026-84280)
CVE-2026-17577 Cross-Site Scripting (XSS) in SSL Zen (WordPress plugin) (CVE-2026-17577)
CVE-2026-83591 Cross-Site Scripting (XSS) in AMP for WP – Accelerated Mobile Pages (WordPress plugin) (CVE-2026-83591)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details