Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,206

Image ID Title
CVE-2026-61456 Cross-Site Scripting (XSS) in Grav API plugin (CVE-2026-61456)
CVE-2026-29519 Cross-Site Scripting (XSS) in Lucee CFML Server (CVE-2026-29519)
CVE-2026-41877 Cross-Site Scripting (XSS) in R-SOFT DMS (CVE-2026-41877)
CVE-2026-15026 Vulnerability in WordPress (CVE-2026-15026)
CVE-2026-59855 Vulnerability in SiYuan (CVE-2026-59855)
CVE-2026-59833 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-59833)
CVE-2026-55424 Cross-Site Scripting (XSS) in Discourse (CVE-2026-55424)
CVE-2026-39243 Vulnerability in decompress (CVE-2026-39243)
CVE-2026-39245 Path Traversal in decompress (CVE-2026-39245)
CVE-2026-39246 Vulnerability in decompress (CVE-2026-39246)
CVE-2026-60120 Cross-Site Scripting (XSS) in Bagisto (CVE-2026-60120)
CVE-2026-0279 Cross-Site Scripting (XSS) in Pan Os (CVE-2026-0279)
CVE-2026-52774 Vulnerability in yeswiki/yeswiki (CVE-2026-52774)
CVE-2026-52773 Vulnerability in yeswiki/yeswiki (CVE-2026-52773)
CVE-2026-52763 Vulnerability in yeswiki/yeswiki (CVE-2026-52763)
CVE-2026-13461 When coupled with the SSL bypass vulnerability, JavaScript can be injected into a WebView in the...
CVE-2026-59817 Vulnerability in ghost (CVE-2026-59817)
CVE-2026-59214 Cross-Site Scripting (XSS) in open-webui (CVE-2026-59214)
CVE-2026-12406 Vulnerability in WordPress (CVE-2026-12406)
CVE-2026-14245 Vulnerability in miniOrange OTP Login, Verification and SMS Notifications (WordPress plugin) (CVE-2026-14245)
CVE-2026-58191 Cross-Site Scripting (XSS) in @appium/base-driver (CVE-2026-58191)
CVE-2026-57481 Information Disclosure in parse (CVE-2026-57481)
CVE-2026-55596 Cross-Site Scripting (XSS) in @platejs/media (CVE-2026-55596)
CVE-2026-57480 Vulnerability in parse (CVE-2026-57480)
CVE-2026-49866 Vulnerability in @libp2p/gossipsub (CVE-2026-49866)
CVE-2026-53649 Vulnerability in github.com/BishopFox/joro (CVE-2026-53649)
CVE-2026-59802 Vulnerability in PasswordPusher (CVE-2026-59802)
CVE-2026-55575 Vulnerability in liquidjs (CVE-2026-55575)
CVE-2026-59929 Vulnerability in mistune (CVE-2026-59929)
CVE-2026-59930 Vulnerability in mistune (CVE-2026-59930)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details