Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,206

Image ID Title
CVE-2026-44287 Code Injection in FastGPT (CVE-2026-44287)
CVE-2026-47248 Vulnerability in parse-server (CVE-2026-47248)
CVE-2026-47141 Vulnerability in vm2 (CVE-2026-47141)
CVE-2026-45668 Path Traversal in Trilium Notes (CVE-2026-45668)
CVE-2026-45628 Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.2 and earlier, Dokploy constructs shell commands…
CVE-2026-47139 Vulnerability in vm2 (CVE-2026-47139)
CVE-2026-47140 Vulnerability in vm2 (CVE-2026-47140)
CVE-2026-47210 Vulnerability in vm2 (CVE-2026-47210)
CVE-2026-47137 Vulnerability in vm2 (CVE-2026-47137)
CVE-2026-47209 Vulnerability in vm2 (CVE-2026-47209)
CVE-2026-47135 Vulnerability in vm2 (CVE-2026-47135)
CVE-2026-47208 Vulnerability in vm2 (CVE-2026-47208)
CVE-2026-47131 Vulnerability in vm2 (CVE-2026-47131)
CVE-2026-47200 Vulnerability in nuxt (CVE-2026-47200)
CVE-2026-33386 Cross-Site Scripting (XSS) in QuickCMS (CVE-2026-33386)
CVE-2018-25384 Cross-Site Scripting (XSS) in Wikidforum (CVE-2018-25384)
CVE-2026-44495 Code Injection in axios (CVE-2026-44495)
CVE-2026-44494 Vulnerability in axios (CVE-2026-44494)
CVE-2026-44492 SSRF (Server-Side Request Forgery) in axios (CVE-2026-44492)
CVE-2026-44490 Vulnerability in axios (CVE-2026-44490)
CVE-2026-44489 Vulnerability in axios (CVE-2026-44489)
CVE-2026-47694 Cross-Site Scripting (XSS) in WWBN/AVideo (CVE-2026-47694)
CVE-2026-44698 Code Injection in CVE-2026-44698 (CVE-2026-44698)
CVE-2026-48527 Cross-Site Scripting (XSS) in @haxtheweb/haxcms-nodejs (CVE-2026-48527)
CVE-2026-45551 Cross-Site Scripting (XSS) in Group-Office (CVE-2026-45551)
CVE-2026-10058 ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting...
CVE-2026-10057 ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting...
CVE-2026-6275 Cross-Site Scripting (XSS) in StatCounter – Free Real Time Visitor Stats (WordPress plugin) (CVE-2026-6275)
CVE-2026-8732 Vulnerability in WP Maps Pro (WordPress plugin) (CVE-2026-8732)
CVE-2026-7430 Cross-Site Scripting (XSS) in Post Snippets (WordPress plugin) (CVE-2026-7430)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details