Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,206

Image ID Title
CVE-2026-57248 Vulnerability in Microsoft Windows (CVE-2026-57248)
CVE-2026-57237 Use-After-Free in Microsoft Windows (CVE-2026-57237)
CVE-2026-57238 Use-After-Free in Microsoft Windows (CVE-2026-57238)
CVE-2026-57240 Use-After-Free in Microsoft Windows (CVE-2026-57240)
CVE-2026-13126 Use-After-Free in Microsoft Windows (CVE-2026-13126)
CVE-2026-13127 Use-After-Free in Microsoft Windows (CVE-2026-13127)
CVE-2026-13128 Use-After-Free in Microsoft Windows (CVE-2026-13128)
CVE-2026-13129 Use-After-Free in Microsoft Windows (CVE-2026-13129)
CVE-2026-9731 Cross-Site Request Forgery (CSRF) in Wp Js Detect (WordPress plugin) (CVE-2026-9731)
CVE-2026-36162 Cross-Site Scripting (XSS) in LiquidFiles (CVE-2026-36162)
CVE-2026-36163 Cross-Site Scripting (XSS) in LiquidFiles (CVE-2026-36163)
CVE-2026-55408 Code Injection in Koodo Reader (CVE-2026-55408)
CVE-2026-55592 Cross-Site Scripting (XSS) in Dashy (CVE-2026-55592)
CVE-2026-56812 Vulnerability in phoenix (CVE-2026-56812)
CVE-2025-66470 Cross-Site Scripting (XSS) in nicegui (CVE-2025-66470)
CVE-2025-62800 Cross-Site Scripting (XSS) in fastmcp (CVE-2025-62800)
CVE-2025-62172 Cross-Site Scripting (XSS) in homeassistant (CVE-2025-62172)
CVE-2025-53354 Cross-Site Scripting (XSS) in nicegui (CVE-2025-53354)
CVE-2026-13356 Vulnerability in Mozilla Firefox (CVE-2026-13356)
CVE-2026-53641 Cross-Site Scripting (XSS) in FOSSBilling (CVE-2026-53641)
CVE-2026-59710 Cross-Site Scripting (XSS) in showdown (CVE-2026-59710)
CVE-2026-55630 Cross-Site Scripting (XSS) in kiwitcms (CVE-2026-55630)
CVE-2026-55501 Vulnerability in 9router (CVE-2026-55501)
CVE-2026-59711 Cross-Site Scripting (XSS) in showdown (CVE-2026-59711)
CVE-2026-55430 Vulnerability in github.com/coder/coder/v2 (CVE-2026-55430)
CVE-2026-53486 Path Traversal in @xhmikosr/decompress (CVE-2026-53486)
CVE-2026-11766 Vulnerability in Ultimate Member (WordPress plugin) (CVE-2026-11766)
CVE-2026-14802 Command Injection in react-dev-utils (CVE-2026-14802)
CVE-2026-14631 Vulnerability in webpack-dev-server (CVE-2026-14631)
CVE-2026-9756 Cross-Site Scripting (XSS) in GenerateBlocks (WordPress plugin) (CVE-2026-9756)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details