Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-15209 Vulnerability in JS Help Desk (WordPress plugin) (CVE-2026-15209)
CVE-2026-14931 Information Disclosure in JS Help Desk (WordPress plugin) (CVE-2026-14931)
CVE-2026-14928 Information Disclosure in JS Help Desk (WordPress plugin) (CVE-2026-14928)
CVE-2026-14930 Vulnerability in JS Help Desk (WordPress plugin) (CVE-2026-14930)
CVE-2026-14833 Cross-Site Scripting (XSS) in WordPress (CVE-2026-14833)
CVE-2026-13393 Cross-Site Scripting (XSS) in ElementsKit Elementor Addons (WordPress plugin) (CVE-2026-13393)
CVE-2026-58039 Vulnerability in Node.js Permission Model enforcement (CVE-2026-58039)
CVE-2026-66420 Vulnerability in MeshCentral (CVE-2026-66420)
CVE-2026-66421 Cross-Site Scripting (XSS) in OpenClaw Dashboard (CVE-2026-66421)
CVE-2025-51684 Cross-Site Scripting (XSS) in CleverTap Web SDK (CVE-2025-51684)
CVE-2025-0152 Cross-Site Scripting (XSS) in IBM Engineering Requirements Management DOORS (CVE-2025-0152)
CVE-2026-61526 Cross-Site Scripting (XSS) in AdonisJS HTTP Server (CVE-2026-61526)
CVE-2026-68499 Vulnerability in re2 (CVE-2026-68499)
CVE-2026-67550 Out-of-Bounds Read in re2 (CVE-2026-67550)
CVE-2026-48910 Vulnerability in Apache (CVE-2026-48910)
CVE-2026-54722 Vulnerability in dssrf (CVE-2026-54722)
CVE-2025-36298 Cross-Site Scripting (XSS) in Ibm Windows (CVE-2025-36298)
CVE-2025-36431 Cross-Site Scripting (XSS) in Ibm Windows (CVE-2025-36431)
CVE-2026-58040 An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname...
CVE-2026-56850 Authentication Bypass in Node.js HTTPS Agent connection reuse (CVE-2026-56850)
CVE-2026-59328 Cross-Site Scripting (XSS) in Broadcom Spring Tools (CVE-2026-59328)
CVE-2026-58043 Vulnerability in Node.js Permission Model enforcement (CVE-2026-58043)
CVE-2026-56847 Vulnerability in Node.js Permission Model enforcement (CVE-2026-56847)
CVE-2026-14207 Cross-Site Scripting (XSS) in LifterLMS (WordPress plugin) (CVE-2026-14207)
CVE-2026-14592 Cross-Site Scripting (XSS) in WP Real IP-based Access Control (WordPress plugin) (CVE-2026-14592)
CVE-2026-13330 Cross-Site Scripting (XSS) in Animation Addons for Elementor (WordPress plugin) (CVE-2026-13330)
CVE-2026-13344 Cross-Site Scripting (XSS) in Essential Addons for Elementor (WordPress plugin) (CVE-2026-13344)
CVE-2026-14239 Cross-Site Scripting (XSS) in tourmaster (WordPress plugin) (CVE-2026-14239)
CVE-2026-67595 Vulnerability in VaahCMS (CVE-2026-67595)
CVE-2026-3093 Cross-Site Scripting (XSS) in Gitlab (CVE-2026-3093)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details