Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,144

Image ID Title
CVE-2026-67340 OS Command Injection in com.arcadedb:arcadedb-engine (CVE-2026-67340)
CVE-2026-67333 Open Redirect in better-auth (CVE-2026-67333)
CVE-2026-67338 Vulnerability in JupyterLab (CVE-2026-67338)
CVE-2026-67319 Vulnerability in axios (CVE-2026-67319)
CVE-2026-67321 Vulnerability in axios (CVE-2026-67321)
CVE-2026-67320 Information Disclosure in axios (CVE-2026-67320)
CVE-2026-67313 Vulnerability in axios (CVE-2026-67313)
CVE-2026-67316 Vulnerability in axios (CVE-2026-67316)
CVE-2026-67315 Vulnerability in axios (CVE-2026-67315)
CVE-2026-67314 Vulnerability in axios (CVE-2026-67314)
CVE-2026-67312 Vulnerability in axios (CVE-2026-67312)
CVE-2026-67318 Vulnerability in axios (CVE-2026-67318)
CVE-2025-71404 Cross-Site Scripting (XSS) in better-auth (CVE-2025-71404)
CVE-2026-17580 Vulnerability in WordPress (CVE-2026-17580)
CVE-2026-18059 Information Disclosure in WordPress (CVE-2026-18059)
CVE-2026-15964 Vulnerability in Single Sign On For TNG (WordPress plugin) (CVE-2026-15964)
CVE-2026-2916 Information Disclosure in Jeg Kit for Elementor (WordPress plugin) (CVE-2026-2916)
CVE-2026-15234 Cross-Site Scripting (XSS) in Codeless Page Builder (WordPress plugin) (CVE-2026-15234)
CVE-2026-15262 Cross-Site Scripting (XSS) in Admin Columns for ACF Fields (WordPress plugin) (CVE-2026-15262)
CVE-2026-14292 Cross-Site Scripting (XSS) in Download Manager (WordPress plugin) (CVE-2026-14292)
CVE-2026-10827 Vulnerability in Spectra Legacy (WordPress plugin) (CVE-2026-10827)
CVE-2026-12696 Cross-Site Scripting (XSS) in wpForo Forum (WordPress plugin) (CVE-2026-12696)
CVE-2025-15669 Cross-Site Scripting (XSS) in Bit Form (WordPress plugin) (CVE-2025-15669)
CVE-2026-52232 Cross-Site Scripting (XSS) in FS Inc S3150-8T2F Switch 2.2.0D Build (CVE-2026-52232)
CVE-2026-62324 Cross-Site Scripting (XSS) in jodit (CVE-2026-62324)
CVE-2026-55100 Vulnerability in hashi-vault-js (CVE-2026-55100)
CVE-2026-54729 SSRF (Server-Side Request Forgery) in dssrf (CVE-2026-54729)
CVE-2026-59232 Cross-Site Scripting (XSS) in Roskus Prospero Flow CRM (CVE-2026-59232)
CVE-2026-46594 A reflected cross-site scripting (XSS) vulnerability has been identified in the PHP Jabbers - PHP...
CVE-2026-14928 Information Disclosure in JS Help Desk (WordPress plugin) (CVE-2026-14928)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details