Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-83801 Cross-Site Scripting (XSS) in nautobot (CVE-2026-83801)
CVE-2026-62985 Vulnerability in request-filtering-agent (CVE-2026-62985)
CVE-2026-75744 Cross-Site Scripting (XSS) in Adobe Experience Manager Forms JEE (CVE-2026-75744)
CVE-2026-75684 Cross-Site Scripting (XSS) in Adobe macOS (CVE-2026-75684)
CVE-2026-75689 Cross-Site Scripting (XSS) in Adobe macOS (CVE-2026-75689)
CVE-2026-75697 Cross-Site Scripting (XSS) in Adobe macOS (CVE-2026-75697)
CVE-2026-63386 Vulnerability in js-toml (CVE-2026-63386)
CVE-2026-48361 Cross-Site Scripting (XSS) in Adobe macOS (CVE-2026-48361)
CVE-2026-95657 Cross-Site Scripting (XSS) in dgtlmoon Changedetection.io (CVE-2026-95657)
CVE-2026-95624 The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter...
CVE-2026-86062 Cross-Site Scripting (XSS) in lightrag-hku (CVE-2026-86062)
CVE-2026-56682 Vulnerability in 9router (CVE-2026-56682)
CVE-2026-76803 Vulnerability in github.com/projectdiscovery/nuclei/v3 (CVE-2026-76803)
CVE-2026-75510 Cross-Site Scripting (XSS) in @novu/js (CVE-2026-75510)
CVE-2026-56681 Vulnerability in 9router (CVE-2026-56681)
CVE-2026-79315 A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface...
CVE-2026-95682 Cross-Site Scripting (XSS) in MISP (CVE-2026-95682)
CVE-2026-95665 Cross-Site Scripting (XSS) in MISP (CVE-2026-95665)
CVE-2026-95661 Cross-Site Scripting (XSS) in MISP (CVE-2026-95661)
CVE-2026-95659 Vulnerability in MISP (CVE-2026-95659)
CVE-2026-92969 Vulnerability in HUSKY – Products Filter for WooCommerce Professional (WordPress plugin) (CVE-2026-92969)
CVE-2026-88788 Cross-Site Scripting (XSS) in Text Styler (WordPress plugin) (CVE-2026-88788)
CVE-2026-61852 SQL Injection in Chartbrew (CVE-2026-61852)
CVE-2026-61851 Vulnerability in Chartbrew (CVE-2026-61851)
CVE-2026-65980 SQL Injection in Chartbrew (CVE-2026-65980)
CVE-2026-78847 An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib...
CVE-2026-61743 Vulnerability in Chartbrew (CVE-2026-61743)
CVE-2026-46650 Cross-Site Scripting (XSS) in Joplin (CVE-2026-46650)
CVE-2026-58270 Vulnerability in @sync-in/server (CVE-2026-58270)
CVE-2026-55105 Cross-Site Scripting (XSS) in Joplin (CVE-2026-55105)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details