Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,141

Image ID Title
CVE-2026-73492 Cross-Site Scripting (XSS) in Loofah (CVE-2026-73492)
CVE-2026-73329 Cross-Site Scripting (XSS) in CamaleonCMS (CVE-2026-73329)
CVE-2026-72787 Cross-Site Scripting (XSS) in Craft CMS (CVE-2026-72787)
CVE-2026-49466 Cross-Site Scripting (XSS) in WordPress Draft List (CVE-2026-49466)
CVE-2026-19657 Cross-Site Scripting (XSS) in ScadaLTS (CVE-2026-19657)
CVE-2026-48550 Cross-Site Scripting (XSS) in Nagios Core (CVE-2026-48550)
CVE-2026-48552 Cross-Site Scripting (XSS) in Nagios Core (CVE-2026-48552)
CVE-2026-16694 Cross-Site Scripting (XSS) in IBM i (CVE-2026-16694)
CVE-2026-73299 Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks…
CVE-2026-49467 Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through…
CVE-2026-73295 Cross-Site Scripting (XSS) in mkdocs-material (CVE-2026-73295)
CVE-2026-73374 A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the...
CVE-2026-73291 Path Traversal in Seerr (CVE-2026-73291)
CVE-2026-73262 Cross-Site Scripting (XSS) in prowler (CVE-2026-73262)
CVE-2026-45694 Cross-Site Scripting (XSS) in librenms/librenms (CVE-2026-45694)
CVE-2026-57858 Cross-Site Scripting (XSS) in Cal.com Cal.diy (CVE-2026-57858)
CVE-2026-9318 Cross-Site Scripting (XSS) in tablib (CVE-2026-9318)
CVE-2026-66832 When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's...
CVE-2026-73231 Vulnerability in @faker-js/faker (CVE-2026-73231)
CVE-2026-73031 telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers...
CVE-2026-73032 Code Injection in PapersGPT for Zotero (CVE-2026-73032)
CVE-2026-66146 Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044...
CVE-2026-73224 OS Command Injection in electerm (CVE-2026-73224)
CVE-2026-73226 Vulnerability in electerm (CVE-2026-73226)
CVE-2026-73227 Path Traversal in electerm (CVE-2026-73227)
CVE-2026-73222 OS Command Injection in claude-code-templates (CVE-2026-73222)
CVE-2026-18708 Code Injection in MongoDB Server's JavaScript scripting engine (CVE-2026-18708)
CVE-2026-21269 Cross-Site Scripting (XSS) in Adobe Coldfusion (CVE-2026-21269)
CVE-2026-48413 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-48413)
CVE-2026-48414 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-48414)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details