Connexion Inscription
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Liées 4,123
slug: javascript

Explication

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Exemple
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Étiquettes liées

C10251 PHP5972 Java1446 Python979 C++498 C#358 Rust224 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnérabilités associées 4,124

Image ID Titre
CVE-2026-110130 Vulnérabilité dans Dockhand (CVE-2026-110130)
CVE-2026-104937 Vulnérabilité dans Shopware (CVE-2026-104937)
CVE-2026-100133 XSS (Cross-Site Scripting) dans Adobe Commerce (CVE-2026-100133)
CVE-2026-110101 XSS (Cross-Site Scripting) dans Koillection (CVE-2026-110101)
CVE-2026-55562 XSS (Cross-Site Scripting) dans Cronicle (CVE-2026-55562)
CVE-2026-104250 XSS (Cross-Site Scripting) dans unstructured (CVE-2026-104250)
CVE-2026-109960 XSS (Cross-Site Scripting) dans Froxlor (CVE-2026-109960)
CVE-2026-107832 fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that…
CVE-2026-109761 Use-After-Free dans Firefox (CVE-2026-109761)
CVE-2026-109748 Use-After-Free dans Firefox (CVE-2026-109748)
CVE-2026-109749 Use-After-Free dans Firefox (CVE-2026-109749)
CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in...
CVE-2026-109729 Use-After-Free dans Firefox (CVE-2026-109729)
CVE-2026-109720 JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in...
CVE-2026-109716 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in...
CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in...
CVE-2026-109721 Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was...
CVE-2026-109715 Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in...
CVE-2026-78557 XSS (Cross-Site Scripting) dans Industrial Edge App Publisher (CVE-2026-78557)
CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace...
CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated...
CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before...
CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files...
CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported...
CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals...
CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace...
CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files. ...
CVE-2026-109149 Vulnérabilité dans beautifier js-beautify (CVE-2026-109149)
CVE-2026-96535 Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when...
CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into translation...

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus