Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,130

Image ID Title
CVE-2026-12749 Cross-Site Scripting (XSS) in Ibm Cloud Pak For Business Automation (CVE-2026-12749)
CVE-2026-81897 Cross-Site Scripting (XSS) in Concrete CMS below CMS (CVE-2026-81897)
CVE-2026-81894 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81894)
CVE-2026-59160 Vulnerability in @yeger/turbo-graph (CVE-2026-59160)
CVE-2026-18111 Vulnerability in Concrete CMS (CVE-2026-18111)
CVE-2026-91942 Cross-Site Scripting (XSS) in crawl4ai (CVE-2026-91942)
CVE-2026-87793 Cross-Site Scripting (XSS) in Design Scuole Italia (WordPress theme) (CVE-2026-87793)
CVE-2026-65831 Privilege Escalation in ArcadeDB (CVE-2026-65831)
CVE-2026-92040 Use-After-Free in Mozilla Firefox (CVE-2026-92040)
CVE-2026-92021 Use-After-Free in Mozilla Firefox (CVE-2026-92021)
CVE-2026-86818 Vulnerability in fast-uri (CVE-2026-86818)
CVE-2026-91922 Cross-Site Scripting (XSS) in Steedos Platform (CVE-2026-91922)
CVE-2026-86472 Vulnerability in fast-uri (CVE-2026-86472)
CVE-2026-90711 Vulnerability in proxy-addr (CVE-2026-90711)
CVE-2026-17495 Vulnerability in moment (CVE-2026-17495)
CVE-2026-91146 Cross-Site Scripting (XSS) in Takahe (CVE-2026-91146)
CVE-2026-81901 Vulnerability in Concrete CMS (CVE-2026-81901)
CVE-2026-68489 Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0...
CVE-2026-7884 Cross-Site Scripting (XSS) in IBM Cognos Analytics (CVE-2026-7884)
CVE-2026-90946 DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the...
CVE-2026-91021 Cross-Site Scripting (XSS) in Trilium Notes (CVE-2026-91021)
CVE-2026-59960 OS Command Injection in @argos-ci/core (CVE-2026-59960)
CVE-2026-61534 Vulnerability in yayson (CVE-2026-61534)
CVE-2026-4103 Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user...
CVE-2026-82019 Cross-Site Scripting (XSS) in TripleLift (CVE-2026-82019)
CVE-2026-90957 Cross-Site Scripting (XSS) in Affected (CVE-2026-90957)
CVE-2026-90931 Cross-Site Scripting (XSS) in LaraDashboard (CVE-2026-90931)
CVE-2026-78318 Cross-Site Scripting (XSS) in Apache (CVE-2026-78318)
CVE-2026-88932 Vulnerability in multer (CVE-2026-88932)
CVE-2026-88853 Cross-Site Scripting (XSS) in Modals Pro (CVE-2026-88853)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details