Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2026-82646 Cross-Site Scripting (XSS) in WWBN AVideo (CVE-2026-82646)
CVE-2026-82635 Path Traversal in Pake (CVE-2026-82635)
CVE-2026-14835 Cross-Site Scripting (XSS) in SOGO Add Script to Individual Pages Header Footer (WordPress plugin) (CVE-2026-14835)
CVE-2026-82562 Vulnerability in qs (CVE-2026-82562)
CVE-2026-82417 Vulnerability in qs (CVE-2026-82417)
CVE-2026-55855 SQL Injection in mariadb (CVE-2026-55855)
CVE-2026-55779 Cross-Site Scripting (XSS) in silverstripe/versioned (CVE-2026-55779)
CVE-2026-82333 Vulnerability in multer (CVE-2026-82333)
CVE-2026-77063 Vulnerability in multer (CVE-2026-77063)
CVE-2026-77037 Vulnerability in multer (CVE-2026-77037)
CVE-2026-77078 Vulnerability in multer (CVE-2026-77078)
CVE-2026-55854 Vulnerability in mariadb (CVE-2026-55854)
CVE-2026-55891 Vulnerability in privatebin/privatebin (CVE-2026-55891)
CVE-2026-55696 Cross-Site Scripting (XSS) in privatebin/privatebin (CVE-2026-55696)
CVE-2026-55378 OS Command Injection in JS Recon (CVE-2026-55378)
CVE-2026-50980 Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before...
CVE-2026-55215 Vulnerability in mariadb (CVE-2026-55215)
CVE-2026-55248 Vulnerability in plone.app.portlets (CVE-2026-55248)
CVE-2026-55566 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55566)
CVE-2026-55549 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
CVE-2026-55834 Open Redirect in github.com/pocket-id/pocket-id/backend (CVE-2026-55834)
CVE-2026-38725 xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject...
CVE-2026-15603 Vulnerability in morgan (CVE-2026-15603)
CVE-2026-82244 Code Injection in Budibase (CVE-2026-82244)
CVE-2026-6286 Cross-Site Scripting (XSS) in Booking for Appointments and Events Calendar – Amelia (WordPress plugin) (CVE-2026-6286)
CVE-2026-82090 Cross-Site Scripting (XSS) in Pocket (CVE-2026-82090)
CVE-2026-78615 Cross-Site Scripting (XSS) in WatchGuard Dimension's report detail page (CVE-2026-78615)
CVE-2026-78616 Cross-Site Scripting (XSS) in WatchGuard Dimension's Trusted CA certificate configuration (CVE-2026-78616)
CVE-2026-78195 Cross-Site Scripting (XSS) in WatchGuard Dimension Backup Historical Data feature (CVE-2026-78195)
CVE-2026-78047 Cross-Site Scripting (XSS) in WatchGuard Dimension's task scheduling feature (CVE-2026-78047)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details