Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,206

Image ID Title
CVE-2026-25558 Cross-Site Scripting (XSS) in QloApps (CVE-2026-25558)
CVE-2026-9549 Cross-Site Scripting (XSS) in Checkmk (CVE-2026-9549)
CVE-2026-7186 Cross-Site Scripting (XSS) in Checkmk (CVE-2026-7186)
CVE-2026-8078 Cross-Site Scripting (XSS) in Checkmk (CVE-2026-8078)
CVE-2026-8833 Cross-Site Scripting (XSS) in Checkmk (CVE-2026-8833)
CVE-2026-11569 Cross-Site Scripting (XSS) in Quay (CVE-2026-11569)
CVE-2021-47984 Cross-Site Scripting (XSS) in WordPress Plugin WP24 Domain Check (CVE-2021-47984)
CVE-2021-47983 Cross-Site Scripting (XSS) in WordPress Plugin Stripe Payments (CVE-2021-47983)
CVE-2023-54351 Cross-Site Scripting (XSS) in WordPress Sonaar Music Plugin (CVE-2023-54351)
CVE-2026-11408 Command Injection in vertex-app vertex (CVE-2026-11408)
CVE-2026-9016 Vulnerability in WordPress (CVE-2026-9016)
CVE-2026-9280 Cross-Site Scripting (XSS) in Ad Inserter – Ad Manager & AdSense Ads (WordPress plugin) (CVE-2026-9280)
CVE-2026-7795 Cross-Site Scripting (XSS) in Click to Chat – WA Widget (WordPress plugin) (CVE-2026-7795)
CVE-2026-9281 Cross-Site Scripting (XSS) in WordPress (CVE-2026-9281)
CVE-2026-8438 Cross-Site Scripting (XSS) in All-In-One Security (AIOS) – Security and Firewall (WordPress plugin) (CVE-2026-8438)
CVE-2026-11422 Vulnerability in Markdown Preview Enhanced (CVE-2026-11422)
CVE-2026-46400 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version…
CVE-2026-46401 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper…
CVE-2026-46493 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for…
CVE-2026-46397 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an Authenticated Local…
CVE-2026-46398 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 25.0.0 and prior to version…
CVE-2026-45778 Cross-Site Scripting (XSS) in OpenXDMoD (CVE-2026-45778)
CVE-2026-46392 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the…
CVE-2026-46394 OS Command Injection in HAXcms PHP backend (CVE-2026-46394)
CVE-2026-46399 HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0…
CVE-2026-46390 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version…
CVE-2026-50733 Vulnerability in Markdown Preview Enhanced (CVE-2026-50733)
CVE-2026-47731 Path Traversal in ait-core (CVE-2026-47731)
CVE-2026-48017 Code Injection in dbgate-api (CVE-2026-48017)
CVE-2026-47669 Path Traversal in dbgate (CVE-2026-47669)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details