Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,144

Image ID Title
CVE-2026-72574 A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated...
CVE-2026-72576 Cross-Site Scripting (XSS) in Bludit (CVE-2026-72576)
CVE-2026-72571 A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an...
CVE-2026-72570 A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7...
CVE-2026-72572 A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote...
CVE-2026-17019 Cross-Site Scripting (XSS) in JetEngine (WordPress plugin) (CVE-2026-17019)
CVE-2026-14293 Cross-Site Scripting (XSS) in Autopay (WordPress plugin) (CVE-2026-14293)
CVE-2026-15047 Cross-Site Scripting (XSS) in s2Member (WordPress plugin) (CVE-2026-15047)
CVE-2026-19351 Vulnerability in dresende node-sql-query (CVE-2026-19351)
CVE-2026-19340 SSRF (Server-Side Request Forgery) in anubissbe ProjectHub-Mcp (CVE-2026-19340)
CVE-2026-71502 Cross-Site Scripting (XSS) in CTI-Transmute (CVE-2026-71502)
CVE-2026-19263 Vulnerability in INQUIRELAB mcp-bridge-api (CVE-2026-19263)
CVE-2026-16558 Cross-Site Scripting (XSS) in YMC Filter (WordPress plugin) (CVE-2026-16558)
CVE-2026-16559 Cross-Site Scripting (XSS) in YMC Filter (WordPress plugin) (CVE-2026-16559)
CVE-2026-14526 Privilege Escalation in AI Copilot – Content Generator (WordPress plugin) (CVE-2026-14526)
CVE-2026-48026 Cross-Site Scripting (XSS) in lakeFS (CVE-2026-48026)
CVE-2026-11425 Cross-Site Scripting (XSS) in Domoticz (CVE-2026-11425)
CVE-2026-62293 Vulnerability in HAPI FHIR (CVE-2026-62293)
CVE-2026-71851 Vulnerability in crypto-js (CVE-2026-71851)
CVE-2026-71850 Vulnerability in hono (CVE-2026-71850)
CVE-2026-71849 Information Disclosure in hono (CVE-2026-71849)
CVE-2026-71848 Vulnerability in hono (CVE-2026-71848)
CVE-2026-48093 Cross-Site Scripting (XSS) in WordPress (CVE-2026-48093)
CVE-2026-66494 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page...
CVE-2026-48094 Cross-Site Scripting (XSS) in ShareOpenly (WordPress plugin) (CVE-2026-48094)
CVE-2026-54217 Vulnerability in TeamDavid Webbox (CVE-2026-54217)
CVE-2026-54208 Vulnerability in TeamDavid Webbox (CVE-2026-54208)
CVE-2026-15386 Cross-Site Scripting (XSS) in Meow Gallery (WordPress plugin) (CVE-2026-15386)
CVE-2026-15245 Cross-Site Scripting (XSS) in BNE Testimonials (WordPress plugin) (CVE-2026-15245)
CVE-2026-71445 Cross-Site Scripting (XSS) in /tag/add_tags (CVE-2026-71445)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details