Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-14827 Cross-Site Scripting (XSS) in Calendar (WordPress plugin) (CVE-2026-14827)
CVE-2026-14190 Cross-Site Scripting (XSS) in Sina Extension for Elementor (WordPress plugin) (CVE-2026-14190)
CVE-2026-14203 Cross-Site Scripting (XSS) in Smart Manager (WordPress plugin) (CVE-2026-14203)
CVE-2026-17497 OS Command Injection in NoteGen (CVE-2026-17497)
CVE-2026-17496 Cross-Site Scripting (XSS) in NoteGen (CVE-2026-17496)
CVE-2026-73647 Vulnerability in quasar (CVE-2026-73647)
CVE-2026-73413 Vulnerability in shescape (CVE-2026-73413)
CVE-2026-73411 Vulnerability in shescape (CVE-2026-73411)
CVE-2026-73414 OS Command Injection in shescape (CVE-2026-73414)
CVE-2026-73412 OS Command Injection in shescape (CVE-2026-73412)
CVE-2026-73567 Vulnerability in sm-crypto (CVE-2026-73567)
CVE-2026-73561 Vulnerability in @anephenix/hub (CVE-2026-73561)
CVE-2026-62280 Cross-Site Scripting (XSS) in org.openidentityplatform.openam:openam-oauth2 (CVE-2026-62280)
CVE-2026-57531 Cross-Site Scripting (XSS) in Milkdown (CVE-2026-57531)
CVE-2026-57530 Cross-Site Scripting (XSS) in Milkdown (CVE-2026-57530)
CVE-2026-73643 Vulnerability in js-yaml (CVE-2026-73643)
CVE-2026-73646 Path Traversal in postcss (CVE-2026-73646)
CVE-2026-73649 Code Injection in velocityjs (CVE-2026-73649)
CVE-2026-73428 Cross-Site Scripting (XSS) in trix (CVE-2026-73428)
CVE-2026-59940 Unsafe Deserialization in seroval (CVE-2026-59940)
CVE-2026-55730 Cross-Site Scripting (XSS) in Loytec LWEB-802 (CVE-2026-55730)
CVE-2026-12496 Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L...
CVE-2026-15810 Cross-Site Scripting (XSS) in Google Cloud Looker (CVE-2026-15810)
CVE-2026-6454 Cross-Site Scripting (XSS) in Firelight Lightbox (WordPress plugin) (CVE-2026-6454)
CVE-2026-15420 Path Traversal in WordPress (CVE-2026-15420)
CVE-2026-15100 Cross-Site Scripting (XSS) in Post Grid Gutenberg Blocks – PostX (WordPress plugin) (CVE-2026-15100)
CVE-2024-58353 Cal.com (repository calcom/cal.diy) in versions <= 4.7.15 is vulnerable to cross-site scripting ...
CVE-2026-16763 Command Injection in localstack serverless-localstack (CVE-2026-16763)
CVE-2025-71389 Code Injection in Cal.com (CVE-2025-71389)
CVE-2024-58355 Vulnerability in Cal.com (CVE-2024-58355)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details