Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-14987 Cross-Site Scripting (XSS) in GiveWP – Donation Plugin and Fundraising Platform (WordPress plugin) (CVE-2026-14987)
CVE-2026-50289 OS Command Injection in systeminformation (CVE-2026-50289)
CVE-2026-50272 Vulnerability in dd-trace (CVE-2026-50272)
CVE-2026-55652 Authentication Bypass in Wekan (CVE-2026-55652)
CVE-2026-55445 Authentication Bypass in @whyour/qinglong (CVE-2026-55445)
CVE-2026-55234 Vulnerability in Wekan (CVE-2026-55234)
CVE-2026-53446 SSRF (Server-Side Request Forgery) in Wekan (CVE-2026-53446)
CVE-2026-53447 Vulnerability in Wekan (CVE-2026-53447)
CVE-2026-52892 Vulnerability in Wekan (CVE-2026-52892)
CVE-2026-52891 OS Command Injection in Wekan (CVE-2026-52891)
CVE-2026-52890 Path Traversal in Wekan (CVE-2026-52890)
CVE-2026-52893 Authentication Bypass in Wekan (CVE-2026-52893)
CVE-2026-53444 Privilege Escalation in Wekan (CVE-2026-53444)
CVE-2026-53445 Vulnerability in Wekan (CVE-2026-53445)
CVE-2026-15921 Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions…
CVE-2026-54490 Vulnerability in websocket-driver (CVE-2026-54490)
CVE-2026-54466 Vulnerability in websocket-driver (CVE-2026-54466)
CVE-2026-55410 OS Command Injection in @nocobase/plugin-backups (CVE-2026-55410)
CVE-2026-54443 Vulnerability in Dashy (CVE-2026-54443)
CVE-2026-62389 Vulnerability in ws (CVE-2026-62389)
CVE-2026-40501 Vulnerability in Cherry Studio (CVE-2026-40501)
CVE-2026-62948 Cross-Site Scripting (XSS) in OpenWrt (CVE-2026-62948)
CVE-2026-9007 Cross-Site Scripting (XSS) in HCL Notes (CVE-2026-9007)
CVE-2026-41580 Cross-Site Scripting (XSS) in Stirling-PDF (CVE-2026-41580)
CVE-2026-61453 Cross-Site Scripting (XSS) in getgrav/grav (CVE-2026-61453)
CVE-2026-48371 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-48371)
CVE-2026-48263 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48263)
CVE-2026-48355 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48355)
CVE-2026-47999 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-47999)
CVE-2026-48253 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48253)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details