Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2025-14814 Cross-Site Scripting (XSS) in CSS & JavaScript Toolbox (WordPress plugin) (CVE-2025-14814)
CVE-2026-97723 madpsy ka9q_ubersdr before 0.1.58 has a stored cross-site scripting (XSS) vulnerability in the...
CVE-2026-97366 Command Injection in jhen0409 react-native-debugger (CVE-2026-97366)
CVE-2026-88388 Vulnerability in Espruino (CVE-2026-88388)
CVE-2026-48542 Cross-Site Scripting (XSS) in Krayin CRM (CVE-2026-48542)
CVE-2026-48541 Cross-Site Scripting (XSS) in Krayin CRM (CVE-2026-48541)
CVE-2026-48540 Cross-Site Scripting (XSS) in Krayin CRM (CVE-2026-48540)
CVE-2026-48543 Cross-Site Scripting (XSS) in Krayin CRM (CVE-2026-48543)
CVE-2026-61823 Cross-Site Scripting (XSS) in code16/sharp (CVE-2026-61823)
CVE-2026-57440 Cross-Site Scripting (XSS) in starcitizenwiki/embedvideo (CVE-2026-57440)
CVE-2026-97233 Cross-Site Scripting (XSS) in volotat Anagnorisis (CVE-2026-97233)
CVE-2026-91121 Cross-Site Scripting (XSS) in Discourse (CVE-2026-91121)
CVE-2026-85057 Vulnerability in github.com/zitadel/zitadel (CVE-2026-85057)
CVE-2026-61784 Cross-Site Scripting (XSS) in xhtml-purifier (CVE-2026-61784)
CVE-2026-61782 Information Disclosure in @rsdoctor/rspack-plugin (CVE-2026-61782)
CVE-2026-54461 Vulnerability in Habitica (CVE-2026-54461)
CVE-2026-88390 Out-of-Bounds Write in Espruino (CVE-2026-88390)
CVE-2026-91122 Cross-Site Scripting (XSS) in Discourse (CVE-2026-91122)
CVE-2026-63498 Cross-Site Scripting (XSS) in snipe/snipe-it (CVE-2026-63498)
CVE-2026-97226 Path Traversal in DbGate (CVE-2026-97226)
CVE-2026-97225 Vulnerability in DbGate (CVE-2026-97225)
CVE-2026-88362 MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c...
CVE-2026-77581 BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS…
CVE-2026-56736 Cross-Site Scripting (XSS) in thorsten/phpmyfaq (CVE-2026-56736)
CVE-2026-97062 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-97062)
CVE-2026-97057 Vulnerability in redis-parser (CVE-2026-97057)
CVE-2026-97058 Vulnerability in sprintf-js (CVE-2026-97058)
CVE-2026-4637 Cross-Site Scripting (XSS) in Paessler PRTG Network Monitor (CVE-2026-4637)
CVE-2026-97151 Vulnerability in mammoth (CVE-2026-97151)
CVE-2026-96680 Vulnerability in ByteDance Coze Scraper Extension (CVE-2026-96680)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details