JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 4,141

Image ID Title
CVE-2026-34776 Out-of-Bounds Read in Electron (CVE-2026-34776)
CVE-2026-34777 Vulnerability in Electron (CVE-2026-34777)
CVE-2026-34769 Vulnerability in Electron (CVE-2026-34769)
CVE-2026-34771 Use-After-Free in Electron (CVE-2026-34771)
CVE-2026-34766 Vulnerability in Electron (CVE-2026-34766)
CVE-2026-34767 Vulnerability in Electron (CVE-2026-34767)
CVE-2026-34768 Vulnerability in Electron (CVE-2026-34768)
CVE-2026-34770 Use-After-Free in Electron (CVE-2026-34770)
CVE-2026-26058 Path Traversal in Zulip (CVE-2026-26058)
CVE-2026-35214 Path Traversal in Budibase (CVE-2026-35214)
CVE-2026-65912 Cross-Site Scripting (XSS) in dompurify (CVE-2026-65912)
CVE-2026-47099 Cross-Site Scripting (XSS) in telejson (CVE-2026-47099)
CVE-2026-35466 Cross-Site Scripting (XSS) in Cmu (CVE-2026-35466)
CVE-2026-30251 Cross-Site Scripting (XSS) in Interzen Consulting S.r.l ZenShare Suite (CVE-2026-30251)
CVE-2026-30252 Cross-Site Scripting (XSS) in Interzen Consulting S.r.l ZenShare Suite (CVE-2026-30252)
CVE-2026-35053 Vulnerability in OneUptime (CVE-2026-35053)
CVE-2026-34752 Vulnerability in Haraka is a Node.js mail server. Prior to (CVE-2026-34752)
CVE-2026-34601 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In xmldom…
CVE-2026-34598 Cross-Site Scripting (XSS) in YesWiki (CVE-2026-34598)
CVE-2026-34526 SSRF (Server-Side Request Forgery) in SillyTavern (CVE-2026-34526)
CVE-2026-5346 SSRF (Server-Side Request Forgery) in huimeicloud hm_editor (CVE-2026-5346)
CVE-2026-34821 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34821)
CVE-2026-34822 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34822)
CVE-2026-34823 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34823)
CVE-2026-34974 Cross-Site Scripting (XSS) in phpMyFAQ (CVE-2026-34974)
CVE-2026-34816 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34816)
CVE-2026-34817 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34817)
CVE-2026-34818 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34818)
CVE-2026-34819 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34819)
CVE-2026-34820 Cross-Site Scripting (XSS) in Endian Firewall (CVE-2026-34820)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details