Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,131

Image ID Title
CVE-2026-85541 DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability....
CVE-2026-84469 Vulnerability in fastify (CVE-2026-84469)
CVE-2026-85525 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed...
CVE-2026-85061 Cross-Site Scripting (XSS) in maplibre-gl (CVE-2026-85061)
CVE-2026-85063 Vulnerability in csv-parse (CVE-2026-85063)
CVE-2026-84185 Vulnerability in jwcrypto library (CVE-2026-84185)
CVE-2026-71429 Vulnerability in stream-json (CVE-2026-71429)
CVE-2026-63376 Vulnerability in toml (CVE-2026-63376)
CVE-2026-77465 Vulnerability in toml (CVE-2026-77465)
CVE-2026-82024 Cross-Site Scripting (XSS) in LearnPress WordPress Plugin (CVE-2026-82024)
CVE-2026-85227 Cross-Site Scripting (XSS) in MISP (CVE-2026-85227)
CVE-2026-85230 Vulnerability in MISP dashboard ButtonWidget configuration (CVE-2026-85230)
CVE-2026-56126 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status:...
CVE-2026-56128 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall:...
CVE-2026-56127 pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules:...
CVE-2026-85159 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-85158 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-76178 A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of...
CVE-2026-84856 Vulnerability in rowboatlabs rowboat (CVE-2026-84856)
CVE-2026-75134 Cross-Site Scripting (XSS) in SEOWriting plugin for WordPress (CVE-2026-75134)
CVE-2026-84673 Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin...
CVE-2026-84665 Cross-Site Scripting (XSS) in Jenkins SonarQube Scanner Plugin (CVE-2026-84665)
CVE-2026-84649 Cross-Site Request Forgery (CSRF) in Stapler (CVE-2026-84649)
CVE-2026-78689 Vulnerability in Description NGINX JavaScript (CVE-2026-78689)
CVE-2026-78222 Vulnerability in NGINX JavaScript (CVE-2026-78222)
CVE-2026-18329 Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a...
CVE-2026-19698 Vulnerability in GutenKit (WordPress plugin) (CVE-2026-19698)
CVE-2026-84803 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-84803)
CVE-2026-84793 Cross-Site Scripting (XSS) in Craft CMS (CVE-2026-84793)
CVE-2026-75528 Cross-Site Scripting (XSS) in Broken Link Checker (WordPress plugin) (CVE-2026-75528)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details