Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-67405 Vulnerability in RabbitMQ (CVE-2026-67405)
CVE-2026-66077 Cross-Site Scripting (XSS) in RabbitMQ (CVE-2026-66077)
CVE-2026-84683 Cross-Site Scripting (XSS) in Red Hat Ansible Automation Platform's automation- controller (CVE-2026-84683)
CVE-2026-90900 Cross-Site Request Forgery (CSRF) in Storefront Product Review (CVE-2026-90900)
CVE-2026-96759 Code Injection in orval (CVE-2026-96759)
CVE-2026-96755 Code Injection in orval (CVE-2026-96755)
CVE-2026-96757 Code Injection in orval (CVE-2026-96757)
CVE-2026-96754 Code Injection in orval (CVE-2026-96754)
CVE-2026-93769 Cross-Site Scripting (XSS) in HumHub (CVE-2026-93769)
CVE-2026-18875 Vulnerability in Ibm Financial Transaction Manager (CVE-2026-18875)
CVE-2026-59167 Cross-Site Scripting (XSS) in suneditor (CVE-2026-59167)
CVE-2026-5696 Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’...
CVE-2026-96454 Pake turns a website into a desktop application built on Tauri. Every application it generates...
CVE-2026-95627 When a Tauri application uses the dialog plugin's file or folder picker, an attacker with...
CVE-2026-91818 Use-After-Free in Microsoft Windows (CVE-2026-91818)
CVE-2026-91817 Out-of-Bounds Read in Foxit PDF Editor/Reader's handling of (CVE-2026-91817)
CVE-2026-91816 Use-After-Free in Microsoft Windows (CVE-2026-91816)
CVE-2026-91806 Use-After-Free in Microsoft Windows (CVE-2026-91806)
CVE-2026-91799 Use-After-Free in Microsoft Windows (CVE-2026-91799)
CVE-2026-91792 Use-After-Free in Microsoft Windows (CVE-2026-91792)
CVE-2026-91788 When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute...
CVE-2026-91791 Use-After-Free in Microsoft Windows (CVE-2026-91791)
CVE-2026-50228 An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer...
CVE-2026-5924 Cross-Site Scripting (XSS) in Getwid – Gutenberg Blocks (WordPress plugin) (CVE-2026-5924)
CVE-2026-88997 Cross-Site Scripting (XSS) in JSM Show Post Metadata (WordPress plugin) (CVE-2026-88997)
CVE-2026-86842 Vulnerability in Real3D Flipbook (WordPress plugin) (CVE-2026-86842)
CVE-2026-85006 Cross-Site Scripting (XSS) in HappyAddons for Elementor (WordPress plugin) (CVE-2026-85006)
CVE-2026-18131 Cross-Site Scripting (XSS) in Ibm Financial Transaction Manager (CVE-2026-18131)
CVE-2026-95812 Cross-Site Scripting (XSS) in ClipBucket (CVE-2026-95812)
CVE-2026-77912 Cross-Site Scripting (XSS) in Github (CVE-2026-77912)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details