Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,141

Image ID Title
CVE-2026-19978 Command Injection in jiantao88 android-mcp-server (CVE-2026-19978)
CVE-2026-13712 Cross-Site Scripting (XSS) in Divi (WordPress theme) (CVE-2026-13712)
CVE-2026-73052 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-73052)
CVE-2026-73043 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-73043)
CVE-2026-73050 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-73050)
CVE-2026-73041 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-73041)
CVE-2026-14230 Cross-Site Scripting (XSS) in ECS (WordPress plugin) (CVE-2026-14230)
CVE-2026-14484 Path Traversal in WordPress (CVE-2026-14484)
CVE-2026-55156 Path Traversal in @ooples/token-optimizer-mcp (CVE-2026-55156)
CVE-2026-53472 Cross-Site Scripting (XSS) in migration-planner (CVE-2026-53472)
CVE-2026-14290 Cross-Site Scripting (XSS) in Embed Google Photos album (WordPress plugin) (CVE-2026-14290)
CVE-2026-73665 Vulnerability in Sangoma Freepbx (CVE-2026-73665)
CVE-2026-18741 Cross-Site Scripting (XSS) in Worksuite SaaS (CVE-2026-18741)
CVE-2026-73531 Cross-Site Scripting (XSS) in django-helpdesk (CVE-2026-73531)
CVE-2026-73038 Cross-Site Scripting (XSS) in NodeBB (CVE-2026-73038)
CVE-2026-73037 Cross-Site Scripting (XSS) in Next AI Draw.io (CVE-2026-73037)
CVE-2026-73566 Vulnerability in tar (CVE-2026-73566)
CVE-2026-73671 Open Redirect in Saurus CMS Community Edition (CVE-2026-73671)
CVE-2026-73572 Cross-Site Scripting (XSS) in Synacor Zimbra Collaboration Suite (CVE-2026-73572)
CVE-2026-19744 Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows...
CVE-2026-19716 Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify...
CVE-2025-62318 Cross-Site Request Forgery (CSRF) in HCL AION (CVE-2025-62318)
CVE-2026-55102 Vulnerability in hashi-vault-js (CVE-2026-55102)
CVE-2026-55087 Cross-Site Scripting (XSS) in ep_etherpad-lite (CVE-2026-55087)
CVE-2026-73617 Vulnerability in Budibase (CVE-2026-73617)
CVE-2026-73628 Cross-Site Scripting (XSS) in Serendipity (CVE-2026-73628)
CVE-2026-73602 Vulnerability in Flowise (CVE-2026-73602)
CVE-2026-73483 OS Command Injection in flowise (CVE-2026-73483)
CVE-2026-19484 Vulnerability in @fastify/busboy (CVE-2026-19484)
CVE-2026-19481 Vulnerability in @fastify/busboy (CVE-2026-19481)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details