Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,130

Image ID Title
CVE-2026-45381 Cross-Site Scripting (XSS) in Tautulli (CVE-2026-45381)
CVE-2026-91165 Cross-Site Scripting (XSS) in Warpgate (CVE-2026-91165)
CVE-2026-58491 Cross-Site Scripting (XSS) in Warpgate (CVE-2026-58491)
CVE-2026-76898 SSRF (Server-Side Request Forgery) in draw.io (CVE-2026-76898)
CVE-2026-58504 Cross-Site Scripting (XSS) in draw.io (CVE-2026-58504)
CVE-2026-36472 CuteNews v.2.1.2 is vulnerable to Cross Site Scripting (XSS). Improper neutralization of the...
CVE-2026-68919 Vulnerability in GoCD (CVE-2026-68919)
CVE-2026-94373 Cross-Site Scripting (XSS) in MISP (CVE-2026-94373)
CVE-2026-94277 Cross-Site Scripting (XSS) in MISP (CVE-2026-94277)
CVE-2026-84223 Cross-Site Scripting (XSS) in Kirki (WordPress plugin) (CVE-2026-84223)
CVE-2026-93964 Authentication Bypass in NginxProxyManager nginx-proxy-manager (CVE-2026-93964)
CVE-2026-93985 Code Injection in JavaScript webhook template validator (CVE-2026-93985)
CVE-2026-1256 Cross-Site Scripting (XSS) in YS LeadGen (WordPress plugin) (CVE-2026-1256)
CVE-2026-4327 Code Injection in Welcomizer (WordPress plugin) (CVE-2026-4327)
CVE-2026-85680 Cross-Site Scripting (XSS) in Ultimate Member (WordPress plugin) (CVE-2026-85680)
CVE-2026-93922 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-93922)
CVE-2026-92708 Information Disclosure in devalue (CVE-2026-92708)
CVE-2026-82890 Cross-Site Scripting (XSS) in IBM Guardium Data Protection (CVE-2026-82890)
CVE-2026-93759 Code Injection in Mongoid (CVE-2026-93759)
CVE-2026-93751 Vulnerability in uri-js (CVE-2026-93751)
CVE-2026-93749 Vulnerability in source-map-js (CVE-2026-93749)
CVE-2026-91127 Cross-Site Scripting (XSS) in @file-viewer/doc (CVE-2026-91127)
CVE-2026-84992 Cross-Site Scripting (XSS) in md-editor-v3 (CVE-2026-84992)
CVE-2026-77301 Vulnerability in adm-zip (CVE-2026-77301)
CVE-2026-93690 Vulnerability in uri-js (CVE-2026-93690)
CVE-2026-93687 Vulnerability in braces (CVE-2026-93687)
CVE-2026-1029 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1029)
CVE-2026-1025 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1025)
CVE-2026-1037 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1037)
CVE-2026-1031 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1031)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details