Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,144

Image ID Title
CVE-2026-6909 Cross-Site Scripting (XSS) in ATutor (CVE-2026-6909)
CVE-2026-6956 Cross-Site Scripting (XSS) in ATutor (CVE-2026-6956)
CVE-2026-6433 Vulnerability in Custom css-js-php (WordPress plugin) (CVE-2026-6433)
CVE-2022-50970 Cross-Site Scripting (XSS) in WordPress Plugin AAWP (CVE-2022-50970)
CVE-2022-50957 Cross-Site Scripting (XSS) in Drupal avatar_uploader (CVE-2022-50957)
CVE-2022-50958 Cross-Site Scripting (XSS) in WordPress Plugin Jetpack (CVE-2022-50958)
CVE-2022-50959 Cross-Site Scripting (XSS) in WordPress Contact Form Builder (CVE-2022-50959)
CVE-2022-50960 Cross-Site Scripting (XSS) in WordPress International Sms For Contact Form 7 Integration (CVE-2022-50960)
CVE-2022-50961 Cross-Site Scripting (XSS) in WordPress Plugin IP2Location Country Blocker (CVE-2022-50961)
CVE-2022-50945 Cross-Site Scripting (XSS) in WordPress 3dady real-time web stats plugin (CVE-2022-50945)
CVE-2022-50947 Cross-Site Scripting (XSS) in WordPress Plugin Testimonial Slider (CVE-2022-50947)
CVE-2022-50949 Cross-Site Scripting (XSS) in WordPress Plugin Videos sync PDF (CVE-2022-50949)
CVE-2021-47947 Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated...
CVE-2021-47950 Cross-Site Scripting (XSS) in Advanced Guestbook (CVE-2021-47950)
CVE-2021-47951 Cross-Site Scripting (XSS) in WordPress Picture Gallery (CVE-2021-47951)
CVE-2022-50943 Cross-Site Scripting (XSS) in moodle (CVE-2022-50943)
CVE-2021-47929 Cross-Site Scripting (XSS) in Filterable Portfolio Gallery (CVE-2021-47929)
CVE-2021-47931 Cross-Site Scripting (XSS) in Exponent CMS (CVE-2021-47931)
CVE-2021-47922 Cross-Site Scripting (XSS) in Slider by Soliloquy (CVE-2021-47922)
CVE-2021-47924 Cross-Site Scripting (XSS) in Ultimate Product Catalog (CVE-2021-47924)
CVE-2021-47926 Cross-Site Scripting (XSS) in Contact Form to Email (CVE-2021-47926)
CVE-2021-47927 Cross-Site Scripting (XSS) in WordPress Plugin WP Symposium Pro (CVE-2021-47927)
CVE-2021-47907 Cross-Site Scripting (XSS) in Rocket LMS (CVE-2021-47907)
CVE-2021-47910 Cross-Site Scripting (XSS) in AccessPress Social Icons (CVE-2021-47910)
CVE-2026-6735 Cross-Site Scripting (XSS) in libphp (CVE-2026-6735)
CVE-2026-42605 Path Traversal in azuracast/azuracast (CVE-2026-42605)
CVE-2026-41311 Vulnerability in liquidjs (CVE-2026-41311)
CVE-2026-44458 Vulnerability in hono (CVE-2026-44458)
CVE-2026-44459 Vulnerability in hono (CVE-2026-44459)
CVE-2026-44966 Vulnerability in velocityjs (CVE-2026-44966)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details