Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,124
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10256 PHP5978 Java1447 Python981 C++498 C#359 Rust225 Ruby201 Go105 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,139

Image ID Title
CVE-2026-78179 Code Injection in rexrainbow phaser3-rex-notes (CVE-2026-78179)
CVE-2026-78178 Code Injection in jQWidgets (CVE-2026-78178)
CVE-2026-78208 Vulnerability in exceljs-hardened (CVE-2026-78208)
CVE-2026-78209 Vulnerability in exceljs-hardened (CVE-2026-78209)
CVE-2026-78206 Vulnerability in exceljs-hardened (CVE-2026-78206)
CVE-2026-4671 Vulnerability in justhtml (CVE-2026-4671)
CVE-2026-5388 Vulnerability in justhtml (CVE-2026-5388)
CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated,...
CVE-2026-76789 Cross-Site Scripting (XSS) in WordPress (CVE-2026-76789)
CVE-2026-16260 Cross-Site Scripting (XSS) in Post Grid, Slider & Carousel Ultimate (WordPress plugin) (CVE-2026-16260)
CVE-2026-53529 Cross-Site Scripting (XSS) in LeafWiki (CVE-2026-53529)
CVE-2026-69231 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2026-69231)
CVE-2026-69232 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2026-69232)
CVE-2026-69234 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2026-69234)
CVE-2026-69236 Cross-Site Scripting (XSS) in Esri Portal for ArcGIS (CVE-2026-69236)
CVE-2026-77811 Cross-Site Scripting (XSS) in Amazon OpenSearch Dashboards (CVE-2026-77811)
CVE-2026-77414 Code Injection in jsonata (CVE-2026-77414)
CVE-2026-63135 Cross-Site Scripting (XSS) in yourls/yourls (CVE-2026-63135)
CVE-2026-77413 Code Injection in jsonata (CVE-2026-77413)
CVE-2026-63421 Vulnerability in @keystone-6/core (CVE-2026-63421)
CVE-2026-61824 Cross-Site Scripting (XSS) in defuddle (CVE-2026-61824)
CVE-2026-55850 Cross-Site Scripting (XSS) in Element Web (CVE-2026-55850)
CVE-2026-70656 Vulnerability in Checkmate (CVE-2026-70656)
CVE-2026-75933 Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts...
CVE-2026-74866 Vulnerability in @fastify/busboy (CVE-2026-74866)
CVE-2026-18409 Cross-Site Scripting (XSS) in WPForms Pro (WordPress plugin) (CVE-2026-18409)
CVE-2026-72843 The customer update route in EverShop is declared with "access": "public" in packages/evershop...
CVE-2026-72860 The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues...
CVE-2026-49436 Cross-Site Scripting (XSS) in LinkAce (CVE-2026-49436)
CVE-2026-72861 The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details