Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2026-38473 Cross-Site Scripting (XSS) in GazellePW (GazellePosterWall) commit (CVE-2026-38473)
CVE-2026-74932 Cross-Site Scripting (XSS) in WP Fastest Cache (WordPress plugin) (CVE-2026-74932)
CVE-2026-55609 Vulnerability in consciousness-explorer (CVE-2026-55609)
CVE-2026-79773 Path Traversal in Winter CMS (CVE-2026-79773)
CVE-2026-55553 Information Disclosure in urllib (CVE-2026-55553)
CVE-2026-79670 Unrestricted File Upload in Ech0 (CVE-2026-79670)
CVE-2026-79663 Cross-Site Scripting (XSS) in Ech0 (CVE-2026-79663)
CVE-2026-18547 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18547)
CVE-2026-16231 Cross-Site Scripting (XSS) in Hbs Project (CVE-2026-16231)
CVE-2026-18100 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18100)
CVE-2026-16601 Unrestricted File Upload in WordPress (CVE-2026-16601)
CVE-2026-78638 Path Traversal in peerigon unzip-crx and unzip-crx-3 (CVE-2026-78638)
CVE-2026-78637 Vulnerability in Fdawgs node-poppler (CVE-2026-78637)
CVE-2026-56704 Cross-Site Scripting (XSS) in Adminer (CVE-2026-56704)
CVE-2026-77384 Vulnerability in libp2p (CVE-2026-77384)
CVE-2026-54049 Cross-Site Scripting (XSS) in org.sakaiproject.conversations:sakai-conversations-impl (CVE-2026-54049)
CVE-2026-71503 Cross-Site Scripting (XSS) in Dolibarr (CVE-2026-71503)
CVE-2026-76837 Baserow interpolates a user's display name into the rich-text mention markup without HTML...
CVE-2026-78391 Cross-Site Scripting (XSS) in RansomLook (CVE-2026-78391)
CVE-2026-78414 Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before...
CVE-2026-39915 Vulnerability in TIM Flow (CVE-2026-39915)
CVE-2026-17033 An authenticated attacker with Editor access or alert.instances.external:write can submit an...
CVE-2026-76842 The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths...
CVE-2026-76845 Vulnerability in adm-zip (CVE-2026-76845)
CVE-2026-78337 Unrestricted File Upload in Roskus Prospero Flow CRM (CVE-2026-78337)
CVE-2026-76172 Vulnerability in fast-uri (CVE-2026-76172)
CVE-2026-75931 Vulnerability in fast-uri (CVE-2026-75931)
CVE-2026-75975 Vulnerability in fast-uri (CVE-2026-75975)
CVE-2026-75899 Vulnerability in fast-uri (CVE-2026-75899)
CVE-2026-78213 Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability....

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details