Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,123
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,124

Image ID Title
CVE-2026-105831 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-105831)
CVE-2026-14990 Cross-Site Scripting (XSS) in IBM DataPower Gateway (CVE-2026-14990)
CVE-2026-104646 Cross-Site Scripting (XSS) in Image Photo Gallery Final Tiles Grid (WordPress plugin) (CVE-2026-104646)
CVE-2026-76276 Vulnerability in Splunk Enterprise (CVE-2026-76276)
CVE-2026-106108 Path Traversal in @quasar/app-vite (CVE-2026-106108)
CVE-2025-70519 The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or...
CVE-2025-70515 The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or...
CVE-2026-102258 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the...
CVE-2026-93684 An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put...
CVE-2026-87971 Cross-Site Scripting (XSS) in If-So Dynamic Content (WordPress plugin) (CVE-2026-87971)
CVE-2026-96594 Cross-Site Scripting (XSS) in Gitea (CVE-2026-96594)
CVE-2026-106550 Vulnerability in Mozilla (CVE-2026-106550)
CVE-2026-106446 Code Injection in handlebars (CVE-2026-106446)
CVE-2026-106445 Vulnerability in handlebars (CVE-2026-106445)
CVE-2026-106448 Vulnerability in StableLib (CVE-2026-106448)
CVE-2026-106444 Vulnerability in handlebars (CVE-2026-106444)
CVE-2026-106447 Vulnerability in StableLib (CVE-2026-106447)
CVE-2026-103667 Cross-Site Scripting (XSS) in Gitea (CVE-2026-103667)
CVE-2026-106512 The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content...
CVE-2026-106120 Information Disclosure in liquidjs (CVE-2026-106120)
CVE-2026-106033 Cross-Site Scripting (XSS) in Ansible Platform UI (CVE-2026-106033)
CVE-2026-106106 Cross-Site Scripting (XSS) in @quasar/render-ssr-error (CVE-2026-106106)
CVE-2026-106109 Path Traversal in @quasar/app-vite (CVE-2026-106109)
CVE-2026-106107 Cross-Site Scripting (XSS) in @quasar/app-vite (CVE-2026-106107)
CVE-2026-106104 Vulnerability in quasar (CVE-2026-106104)
CVE-2026-106105 Vulnerability in @quasar/ssl-certificate (CVE-2026-106105)
CVE-2026-106103 Path Traversal in @quasar/icongenie (CVE-2026-106103)
CVE-2026-106101 Vulnerability in quasar (CVE-2026-106101)
CVE-2026-106102 Cross-Site Scripting (XSS) in quasar (CVE-2026-106102)
CVE-2026-105868 Unrestricted File Upload in payload (CVE-2026-105868)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details