Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-89269 Cross-Site Scripting (XSS) in WP Testimonials (WordPress plugin) (CVE-2026-89269)
CVE-2026-109758 Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM...
CVE-2026-92883 Cross-Site Scripting (XSS) in Gitlab (CVE-2026-92883)
CVE-2026-75076 Information Disclosure in IBM Aspera Enterprise WebApps (CVE-2026-75076)
CVE-2026-75063 Cross-Site Scripting (XSS) in Ibm Planning Analytics (CVE-2026-75063)
CVE-2026-18541 Cross-Site Scripting (XSS) in Ibm Planning Analytics (CVE-2026-18541)
CVE-2026-109595 Path Traversal in Hugo (CVE-2026-109595)
CVE-2025-71432 Cross-Site Scripting (XSS) in Frappe ERPNext (CVE-2025-71432)
CVE-2025-71430 Cross-Site Scripting (XSS) in Frappe (CVE-2025-71430)
CVE-2026-109565 Cross-Site Scripting (XSS) in Rapyd Admin (CVE-2026-109565)
CVE-2026-109563 Vulnerability in N3.js (CVE-2026-109563)
CVE-2020-37279 OS Command Injection in easy-pdf-merge (CVE-2020-37279)
CVE-2026-84319 Vulnerability in github.com/0xJacky/Nginx-UI (CVE-2026-84319)
CVE-2025-27896 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2025-27897 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2025-27895 IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2026-109300 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109300)
CVE-2026-109291 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109291)
CVE-2026-109288 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109288)
CVE-2026-85965 Use-After-Free in Progress MarkLogic Server (CVE-2026-85965)
CVE-2026-109352 Cross-Site Scripting (XSS) in LibreNMS (CVE-2026-109352)
CVE-2026-109338 Vulnerability in SurrealDB (CVE-2026-109338)
CVE-2026-109328 Cross-Site Scripting (XSS) in Admidio (CVE-2026-109328)
CVE-2026-109327 Cross-Site Scripting (XSS) in Admidio (CVE-2026-109327)
CVE-2026-109307 Cross-Site Scripting (XSS) in Craft CMS (CVE-2026-109307)
CVE-2026-109392 Cross-Site Scripting (XSS) in Pimcore (CVE-2026-109392)
CVE-2026-108897 Vulnerability in Smart Media4U Technology SHAREit App (CVE-2026-108897)
CVE-2026-103527 Cross-Site Scripting (XSS) in Thelia (CVE-2026-103527)
CVE-2026-103524 Cross-Site Scripting (XSS) in Thelia (CVE-2026-103524)
CVE-2026-108831 Vulnerability in meetecho janus-gateway (CVE-2026-108831)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details