Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,130

Image ID Title
CVE-2026-36392 Cross-Site Scripting (XSS) in FairSketch Rise CRM (CVE-2026-36392)
CVE-2022-26962 Cross-Site Scripting (XSS) in Italtel NFV (CVE-2022-26962)
CVE-2026-88060 Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-88060)
CVE-2026-88056 SSRF (Server-Side Request Forgery) in @angular/platform-server (CVE-2026-88056)
CVE-2026-88057 Cross-Site Scripting (XSS) in @angular/core (CVE-2026-88057)
CVE-2026-88058 Cross-Site Scripting (XSS) in @angular/platform-server (CVE-2026-88058)
CVE-2026-88059 Information Disclosure in @angular/common (CVE-2026-88059)
CVE-2026-88055 AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during…
CVE-2026-88869 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site...
CVE-2026-88867 WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07ee78eaf330c1,...
CVE-2026-88038 cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before…
CVE-2026-88859 Vulnerability in Evolution (CVE-2026-88859)
CVE-2026-0308 Cross-Site Scripting (XSS) in Palo Alto Networks PAN-OS software enables (CVE-2026-0308)
CVE-2026-71803 Cross-Site Scripting (XSS) in money-pos (CVE-2026-71803)
CVE-2026-71802 Cross-Site Scripting (XSS) in REBUILD (CVE-2026-71802)
CVE-2026-54694 Vulnerability in SkillTree (CVE-2026-54694)
CVE-2026-18147 Cross-Site Scripting (XSS) in FreeIPA (CVE-2026-18147)
CVE-2026-87813 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-87813)
CVE-2026-87812 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-87812)
CVE-2026-87814 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-87814)
CVE-2026-87811 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-87811)
CVE-2026-87794 Vulnerability in bestzip (CVE-2026-87794)
CVE-2025-7062 A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p...
CVE-2026-80340 Information Disclosure in Payment Plugins for PayPal WooCommerce (WordPress plugin) (CVE-2026-80340)
CVE-2026-80339 Information Disclosure in Payment Plugins for Stripe WooCommerce (WordPress plugin) (CVE-2026-80339)
CVE-2026-53938 Vulnerability in OpenIDC/cjose (CVE-2026-53938)
CVE-2026-53939 Vulnerability in OpenIDC/cjose (CVE-2026-53939)
CVE-2026-86076 Code Injection in n8n (CVE-2026-86076)
CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button...
CVE-2026-84197 In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details