Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-110643 OS Command Injection in transcribe2texts (CVE-2026-110643)
CVE-2026-110648 OS Command Injection in @offactory/compress-fonts (CVE-2026-110648)
CVE-2026-110644 OS Command Injection in nodejs-whisper (CVE-2026-110644)
CVE-2026-110645 OS Command Injection in Video-stitch (CVE-2026-110645)
CVE-2026-110649 OS Command Injection in Stills (CVE-2026-110649)
CVE-2026-110637 OS Command Injection in buildebooks (CVE-2026-110637)
CVE-2026-110640 OS Command Injection in Whisper-node (CVE-2026-110640)
CVE-2026-110635 OS Command Injection in webp-converter (CVE-2026-110635)
CVE-2026-110638 OS Command Injection in doc-recog (CVE-2026-110638)
CVE-2026-110639 OS Command Injection in @mborne/extract (CVE-2026-110639)
CVE-2026-110634 OS Command Injection in git-diff (CVE-2026-110634)
CVE-2026-101019 Vulnerability in Description NGINX JavaScript (CVE-2026-101019)
CVE-2020-37282 OS Command Injection in office-converter (CVE-2020-37282)
CVE-2026-101025 Vulnerability in Description NGINX JavaScript (CVE-2026-101025)
CVE-2026-110690 Vulnerability in Cloud Commander (CVE-2026-110690)
CVE-2026-104748 Privilege Escalation in WordPress (CVE-2026-104748)
CVE-2026-106469 Cross-Site Scripting (XSS) in Gutenverse Form (WordPress plugin) (CVE-2026-106469)
CVE-2026-107178 Cross-Site Scripting (XSS) in Image Photo Gallery Final Tiles Grid (WordPress plugin) (CVE-2026-107178)
CVE-2026-105261 Cross-Site Scripting (XSS) in WordPress (CVE-2026-105261)
CVE-2026-104644 Cross-Site Scripting (XSS) in Image Photo Gallery Final Tiles Grid (WordPress plugin) (CVE-2026-104644)
CVE-2026-93885 Cross-Site Scripting (XSS) in Cryptocurrency Donation Box – Bitcoin & Crypto Donations (WordPress plugin) (CVE-2026-93885)
CVE-2026-110445 TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-110444 TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability....
CVE-2026-103423 Vulnerability in Booking Package (WordPress plugin) (CVE-2026-103423)
CVE-2026-83958 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-83958)
CVE-2026-83960 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-83960)
CVE-2026-63169 Cross-Site Scripting (XSS) in Omnispace Agora Project (CVE-2026-63169)
CVE-2026-63156 Cross-Site Scripting (XSS) in Omnispace Agora Project (CVE-2026-63156)
CVE-2026-107371 When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time…
CVE-2026-104587 blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability....

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details