Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,130

Image ID Title
CVE-2026-85191 Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs &...
CVE-2026-85189 Cross-Site Scripting (XSS) in Modals (CVE-2026-85189)
CVE-2025-63842 A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for...
CVE-2026-90602 Cross-Site Scripting (XSS) in Anil-matcha Open-Generative-AI (CVE-2026-90602)
CVE-2026-90582 Vulnerability in evanchiu serverless-todo (CVE-2026-90582)
CVE-2025-64059 Cross-Site Scripting (XSS) in Grav (CVE-2025-64059)
CVE-2026-90529 Cross-Site Scripting (XSS) in DataEase (CVE-2026-90529)
CVE-2026-90776 Vulnerability in nodemailer (CVE-2026-90776)
CVE-2026-90772 Cross-Site Scripting (XSS) in Amundsen frontend (CVE-2026-90772)
CVE-2026-90494 Path Traversal in restify node-restify (CVE-2026-90494)
CVE-2026-90491 Vulnerability in sanjevirau gsubs (CVE-2026-90491)
CVE-2026-87888 Cross-Site Scripting (XSS) in YayPricing (WordPress plugin) (CVE-2026-87888)
CVE-2026-89268 Cross-Site Scripting (XSS) in QloApps (CVE-2026-89268)
CVE-2026-81911 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81911)
CVE-2026-79035 Cross-Site Scripting (XSS) in Zeta Marketing Platform (ZMP) (CVE-2026-79035)
CVE-2026-89255 Cross-Site Scripting (XSS) in LoginControl plugin (CVE-2026-89255)
CVE-2026-89253 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site...
CVE-2026-89239 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...
CVE-2026-89243 Cross-Site Scripting (XSS) in UserGroups::setGroup_name (CVE-2026-89243)
CVE-2026-89240 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...
CVE-2026-87776 Vulnerability in compression (CVE-2026-87776)
CVE-2026-87123 Vulnerability in hbs (CVE-2026-87123)
CVE-2026-87859 Vulnerability in morgan (CVE-2026-87859)
CVE-2026-87908 multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not…
CVE-2026-85678 Cross-Site Scripting (XSS) in AI Builder (WordPress plugin) (CVE-2026-85678)
CVE-2026-85677 Cross-Site Scripting (XSS) in Gutenverse News (WordPress plugin) (CVE-2026-85677)
CVE-2026-83545 Cross-Site Scripting (XSS) in CoolClock (WordPress plugin) (CVE-2026-83545)
CVE-2026-14565 Cross-Site Scripting (XSS) in advanced-customized-prompts (WordPress plugin) (CVE-2026-14565)
CVE-2025-15695 Cross-Site Scripting (XSS) in WordPress (CVE-2025-15695)
CVE-2026-18562 Cross-Site Scripting (XSS) in HUSKY – Products Filter Professional for WooCommerce (WordPress plugin) (CVE-2026-18562)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details