Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,141

Image ID Title
CVE-2026-4300 Cross-Site Scripting (XSS) in Robo Gallery (WordPress plugin) (CVE-2026-4300)
CVE-2026-4655 Cross-Site Scripting (XSS) in Element Pack Addons for Elementor (WordPress plugin) (CVE-2026-4655)
CVE-2026-32289 Cross-Site Scripting (XSS) in stdlib (CVE-2026-32289)
CVE-2026-39846 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-39846)
CVE-2026-34781 Vulnerability in Electron (CVE-2026-34781)
CVE-2026-34765 Vulnerability in Electron (CVE-2026-34765)
CVE-2026-39400 Cross-Site Scripting (XSS) in Cronicle (CVE-2026-39400)
CVE-2026-39380 Cross-Site Scripting (XSS) in Stock Locations configuration feature (CVE-2026-39380)
CVE-2026-39381 Authorization Flaw in Parseplatform (CVE-2026-39381)
CVE-2026-39363 Information Disclosure in Vitejs (CVE-2026-39363)
CVE-2026-39364 Vulnerability in Vitejs (CVE-2026-39364)
CVE-2026-39365 Path Traversal in Vitejs (CVE-2026-39365)
CVE-2026-39367 Cross-Site Scripting (XSS) in WWBN AVideo (CVE-2026-39367)
CVE-2026-39344 Cross-Site Scripting (XSS) in ChurchCRM (CVE-2026-39344)
CVE-2025-14944 Vulnerability in Backup Migration (WordPress plugin) (CVE-2025-14944)
CVE-2025-15611 SSRF (Server-Side Request Forgery) in Popup Box (WordPress plugin) (CVE-2025-15611)
CVE-2026-35404 Open Redirect in Openedx (CVE-2026-35404)
CVE-2026-22675 Cross-Site Scripting (XSS) in OCS Inventory NG Server (CVE-2026-22675)
CVE-2026-35390 Cross-Site Scripting (XSS) in Webmail (CVE-2026-35390)
CVE-2026-35185 Vulnerability in Psu (CVE-2026-35185)
CVE-2026-35200 Vulnerability in Parseplatform (CVE-2026-35200)
CVE-2018-25248 Cross-Site Scripting (XSS) in MyBB Downloads Plugin (CVE-2018-25248)
CVE-2018-25249 Cross-Site Scripting (XSS) in MyBB My Arcade Plugin (CVE-2018-25249)
CVE-2026-34780 Vulnerability in Electron (CVE-2026-34780)
CVE-2026-34778 Vulnerability in Electron (CVE-2026-34778)
CVE-2026-34779 OS Command Injection in Electron (CVE-2026-34779)
CVE-2026-34774 Use-After-Free in Electron (CVE-2026-34774)
CVE-2026-34772 Use-After-Free in Electron (CVE-2026-34772)
CVE-2026-34773 Vulnerability in Electron (CVE-2026-34773)
CVE-2026-34775 Vulnerability in Electron (CVE-2026-34775)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details