Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-54705 Vulnerability in mathlive (CVE-2026-54705)
CVE-2026-54666 Vulnerability in swagger-typescript-api (CVE-2026-54666)
CVE-2026-8791 Cross-Site Scripting (XSS) in Booking System Trafft (WordPress plugin) (CVE-2026-8791)
CVE-2026-16597 Cross-Site Scripting (XSS) in WordPress (CVE-2026-16597)
CVE-2026-13605 Cross-Site Scripting (XSS) in PhotoSwipe (WordPress plugin) (CVE-2026-13605)
CVE-2026-14893 IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer...
CVE-2026-16771 In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server...
CVE-2026-7775 Cross-Site Scripting (XSS) in IBM Sterling B2B Integrator (CVE-2026-7775)
CVE-2026-66750 Vulnerability in Let (CVE-2026-66750)
CVE-2026-66749 Vulnerability in Let (CVE-2026-66749)
CVE-2026-67174 Cross-Site Scripting (XSS) in Pivotick (CVE-2026-67174)
CVE-2026-66920 Vulnerability in Pivotick (CVE-2026-66920)
CVE-2026-66918 Cross-Site Scripting (XSS) in Pivotick (CVE-2026-66918)
CVE-2026-66919 Cross-Site Scripting (XSS) in Pivotick (CVE-2026-66919)
CVE-2026-66922 Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node...
CVE-2026-66921 Cross-Site Scripting (XSS) in Pivotick (CVE-2026-66921)
CVE-2026-54545 Path Traversal in @wakaru/cli (CVE-2026-54545)
CVE-2026-66825 Cross-Site Scripting (XSS) in Pivotick (CVE-2026-66825)
CVE-2026-66824 A stored cross-site scripting vulnerability existed in the capture tree visualization page. The...
CVE-2026-66031 Cross-Site Scripting (XSS) in Ekushey Project Manager CRM through (CVE-2026-66031)
CVE-2026-56747 Code Injection in Cribl Stream (CVE-2026-56747)
CVE-2026-66030 Cross-Site Scripting (XSS) in Ekushey Project Manager CRM through (CVE-2026-66030)
CVE-2026-66029 Cross-Site Scripting (XSS) in Ekushey Project Manager CRM through (CVE-2026-66029)
CVE-2026-59239 Cross-Site Scripting (XSS) in Roskus Prospero Flow CRM (CVE-2026-59239)
CVE-2026-66395 Cross-Site Scripting (XSS) in SiYuan desktop (CVE-2026-66395)
CVE-2026-66396 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-66396)
CVE-2026-54272 Vulnerability in ip-address (CVE-2026-54272)
CVE-2026-17514 Path Traversal in ZJONSSON node-unzipper (CVE-2026-17514)
CVE-2026-14856 Cross-Site Scripting (XSS) in TastyIgniter (CVE-2026-14856)
CVE-2026-55968 Vulnerability in Apache (CVE-2026-55968)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details