Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-86431 Cross-Site Scripting (XSS) in league/commonmark (CVE-2026-86431)
CVE-2026-78325 Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android...
CVE-2026-86315 Vulnerability in Escargot (CVE-2026-86315)
CVE-2026-86253 Path Traversal in h3 (CVE-2026-86253)
CVE-2022-51009 Vulnerability in PocketMine-MP (CVE-2022-51009)
CVE-2026-84219 Cross-Site Scripting (XSS) in Kirki (WordPress plugin) (CVE-2026-84219)
CVE-2026-86188 AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing...
CVE-2026-86185 Vulnerability in Bilibili Desktop (CVE-2026-86185)
CVE-2026-84931 Cross-Site Scripting (XSS) in Joli Table Of Contents (WordPress plugin) (CVE-2026-84931)
CVE-2026-84899 Cross-Site Scripting (XSS) in VikWidgetsLoader (WordPress plugin) (CVE-2026-84899)
CVE-2026-84935 Cross-Site Scripting (XSS) in HT Menu (WordPress plugin) (CVE-2026-84935)
CVE-2026-84896 Cross-Site Scripting (XSS) in King Addons for Elementor (WordPress plugin) (CVE-2026-84896)
CVE-2026-19769 Cross-Site Scripting (XSS) in WordPress (CVE-2026-19769)
CVE-2026-3853 Cross-Site Scripting (XSS) in Divi (WordPress theme) (CVE-2026-3853)
CVE-2022-26961 Cross-Site Scripting (XSS) in Italtel NetMatch-S (CVE-2022-26961)
CVE-2026-9317 Vulnerability in Nango (CVE-2026-9317)
CVE-2026-73848 Cross-Site Scripting (XSS) in Emlog (CVE-2026-73848)
CVE-2026-19534 Vulnerability in undici (CVE-2026-19534)
CVE-2026-85024 Vulnerability in undici (CVE-2026-85024)
CVE-2026-85014 Vulnerability in undici (CVE-2026-85014)
CVE-2026-38961 Cross-Site Scripting (XSS) in Netgate pfSense Plus (CVE-2026-38961)
CVE-2026-79419 Cross-Site Scripting (XSS) in EMX Tecnologia Gestao X Business Suite (CVE-2026-79419)
CVE-2026-79418 Cross-Site Scripting (XSS) in EMX Tecnologia Gestao X (CVE-2026-79418)
CVE-2026-75170 Cross-Site Scripting (XSS) in HubCore platform (CVE-2026-75170)
CVE-2026-85625 Vulnerability in sift (CVE-2026-85625)
CVE-2026-85610 Code Injection in OpenPanel (CVE-2026-85610)
CVE-2026-85599 Cross-Site Scripting (XSS) in Grav Shortcode Core (CVE-2026-85599)
CVE-2026-85601 Cross-Site Scripting (XSS) in Grav Admin (CVE-2026-85601)
CVE-2026-85593 Cross-Site Scripting (XSS) in phpMyFAQ (CVE-2026-85593)
CVE-2026-85577 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details