Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-48257 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48257)
CVE-2026-48262 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48262)
CVE-2026-48260 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48260)
CVE-2026-48255 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48255)
CVE-2026-48254 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48254)
CVE-2026-48261 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48261)
CVE-2026-47994 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-47994)
CVE-2026-47995 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-47995)
CVE-2026-54087 Unrestricted File Upload in easycorp/easyadmin-bundle (CVE-2026-54087)
CVE-2026-54335 Vulnerability in @feathersjs/commons (CVE-2026-54335)
CVE-2026-59891 Vulnerability in @sigstore/oci (CVE-2026-59891)
CVE-2026-54433 Cross-Site Scripting (XSS) in Roundcube Webmail (CVE-2026-54433)
CVE-2026-36214 Cross-Site Scripting (XSS) in osTicket (CVE-2026-36214)
CVE-2026-9292 A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud...
CVE-2026-60119 Vulnerability in Hi.Events (CVE-2026-60119)
CVE-2026-52838 Cross-Site Scripting (XSS) in alextselegidis/easyappointments (CVE-2026-52838)
CVE-2026-15697 Code Injection in svgdotjs svg.js (CVE-2026-15697)
CVE-2026-15699 Code Injection in spencermountain compromise (CVE-2026-15699)
CVE-2026-58475 Cross-Site Scripting (XSS) in Dan In Ca (CVE-2026-58475)
CVE-2026-52837 Information Disclosure in alextselegidis/easyappointments (CVE-2026-52837)
CVE-2026-44752 SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious...
CVE-2026-44760 Due to a Cross-Site Scripting (XSS) vulnerability, applications based on Business Server Pages...
CVE-2026-58486 Vulnerability in HedgeDoc (CVE-2026-58486)
CVE-2026-62327 Vulnerability in 9Router through (CVE-2026-62327)
CVE-2026-58411 Cross-Site Scripting (XSS) in ChurchCRM (CVE-2026-58411)
CVE-2026-58487 Cross-Site Scripting (XSS) in HedgeDoc (CVE-2026-58487)
CVE-2026-58500 Cross-Site Scripting (XSS) in appium-mcp (CVE-2026-58500)
CVE-2026-59801 Information Disclosure in 9router (CVE-2026-59801)
CVE-2026-15598 Code Injection in antv layout (CVE-2026-15598)
CVE-2026-58228 Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacker to bypass URL scheme…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details