Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,141

Image ID Title
CVE-2026-55451 Vulnerability in gettext-converter (CVE-2026-55451)
CVE-2026-54156 Vulnerability in node-opcua (CVE-2026-54156)
CVE-2026-54155 Vulnerability in node-opcua (CVE-2026-54155)
CVE-2026-54150 Path Traversal in next-video (CVE-2026-54150)
CVE-2026-61704 SSRF (Server-Side Request Forgery) in link-preview-js (CVE-2026-61704)
CVE-2026-76833 @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers...
CVE-2026-64971 Cross-Site Scripting (XSS) in ATutor (CVE-2026-64971)
CVE-2026-64970 Cross-Site Scripting (XSS) in ATutor (CVE-2026-64970)
CVE-2026-73220 Vulnerability in CVAT (CVE-2026-73220)
CVE-2026-77075 Code Injection in N8N (CVE-2026-77075)
CVE-2026-77077 Code Injection in N8N (CVE-2026-77077)
CVE-2026-77083 Vulnerability in N8N (CVE-2026-77083)
CVE-2026-19615 Cross-Site Scripting (XSS) in Admin and Site Enhancements (WordPress plugin) (CVE-2026-19615)
CVE-2026-76367 Cross-Site Scripting (XSS) in Splunk SOAR (CVE-2026-76367)
CVE-2026-76346 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76346)
CVE-2026-76337 Path Traversal in Splunk Enterprise (CVE-2026-76337)
CVE-2026-76333 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76333)
CVE-2026-76324 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76324)
CVE-2026-76326 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76326)
CVE-2026-76325 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76325)
CVE-2026-76252 Cross-Site Scripting (XSS) in Splunk Enterprise (CVE-2026-76252)
CVE-2026-69222 Vulnerability in liquidjs (CVE-2026-69222)
CVE-2026-61556 Vulnerability in liquidjs (CVE-2026-61556)
CVE-2026-54743 Cross-Site Scripting (XSS) in Lemmy (CVE-2026-54743)
CVE-2026-68559 Vulnerability in Wekan (CVE-2026-68559)
CVE-2026-68900 Cross-Site Scripting (XSS) in Wekan (CVE-2026-68900)
CVE-2026-68899 Unrestricted File Upload in Wekan (CVE-2026-68899)
CVE-2026-68561 Privilege Escalation in Wekan (CVE-2026-68561)
CVE-2026-68560 OS Command Injection in Wekan (CVE-2026-68560)
CVE-2026-68901 Vulnerability in Wekan (CVE-2026-68901)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details