Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-106151 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106151)
CVE-2026-106160 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106160)
CVE-2026-106163 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106163)
CVE-2026-106161 In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015,...
CVE-2026-106153 Cross-Site Scripting (XSS) in Progress Kendo UI for jQuery (CVE-2026-106153)
CVE-2026-106149 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106149)
CVE-2026-106157 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106157)
CVE-2026-106148 Vulnerability in Progress Kendo UI for jQuery (CVE-2026-106148)
CVE-2026-106158 In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month...
CVE-2026-106147 In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the...
CVE-2026-103936 Vulnerability in libp2p (CVE-2026-103936)
CVE-2026-57568 Cross-Site Scripting (XSS) in Lychee (CVE-2026-57568)
CVE-2026-58390 Cross-Site Scripting (XSS) in OPNsense (CVE-2026-58390)
CVE-2026-59994 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-59994)
CVE-2026-53575 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-53575)
CVE-2026-109855 undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which…
CVE-2026-110872 Vulnerability in Nodemailer (CVE-2026-110872)
CVE-2026-110869 Vulnerability in Nodemailer (CVE-2026-110869)
CVE-2026-110871 Vulnerability in Nodemailer (CVE-2026-110871)
CVE-2026-110816 ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value`…
CVE-2026-0316 Cross-Site Scripting (XSS) in Palo Alto Networks PAN-OS software enables (CVE-2026-0316)
CVE-2026-54566 Code Injection in Markdown Preview Enhanced (CVE-2026-54566)
CVE-2026-54702 Vulnerability in Markdown Preview Enhanced (CVE-2026-54702)
CVE-2026-54703 Vulnerability in Markdown Preview Enhanced (CVE-2026-54703)
CVE-2026-103974 Cross-Site Scripting (XSS) in lichess.org (CVE-2026-103974)
CVE-2026-102756 Cross-Site Scripting (XSS) in DataEase (CVE-2026-102756)
CVE-2026-102755 Cross-Site Scripting (XSS) in DataEase (CVE-2026-102755)
CVE-2026-102354 Vulnerability in BentoPDF (CVE-2026-102354)
CVE-2026-110715 Out-of-Bounds Write in MuJS (CVE-2026-110715)
CVE-2026-101897 Vulnerability in Angular (CVE-2026-101897)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details