Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-110130 Vulnerability in Dockhand (CVE-2026-110130)
CVE-2026-104937 Vulnerability in Shopware (CVE-2026-104937)
CVE-2026-100133 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-100133)
CVE-2026-110101 Cross-Site Scripting (XSS) in Koillection (CVE-2026-110101)
CVE-2026-55562 Cross-Site Scripting (XSS) in Cronicle (CVE-2026-55562)
CVE-2026-104250 Cross-Site Scripting (XSS) in unstructured (CVE-2026-104250)
CVE-2026-109960 Cross-Site Scripting (XSS) in Froxlor (CVE-2026-109960)
CVE-2026-107832 fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that…
CVE-2026-109761 Use-After-Free in Firefox (CVE-2026-109761)
CVE-2026-109748 Use-After-Free in Firefox (CVE-2026-109748)
CVE-2026-109749 Use-After-Free in Firefox (CVE-2026-109749)
CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in...
CVE-2026-109729 Use-After-Free in Firefox (CVE-2026-109729)
CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in...
CVE-2026-109716 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in...
CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in...
CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was...
CVE-2026-109715 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in...
CVE-2026-78557 Cross-Site Scripting (XSS) in Industrial Edge App Publisher (CVE-2026-78557)
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace...
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated...
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before...
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files...
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported...
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals...
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace...
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files. ...
CVE-2026-109149 Vulnerability in beautifier js-beautify (CVE-2026-109149)
CVE-2026-96535 Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when...
CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into translation...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details