Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C237 Java183 PHP41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1

🛡 Vulnerabilities tagged with this 2,644

ID Title
CVE-2026-2445 Cross-Site Scripting (XSS) in wso2 (CVE-2026-2445)
CVE-2026-9833 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9833)
CVE-2026-57857 Cross-Site Scripting (XSS) in wordpress (CVE-2026-57857)
CVE-2026-12228 Cross-Site Scripting (XSS) in lollms (CVE-2026-12228)
CVE-2026-16150 Code Injection in CVE-2026-16150 (CVE-2026-16150)
CVE-2025-71396 Vulnerability in dos (CVE-2025-71396)
CVE-2025-71393 Vulnerability in surrealdb (CVE-2025-71393)
CVE-2026-9585 Cross-Site Scripting (XSS) in CVE-2026-9585 (CVE-2026-9585)
CVE-2026-9588 Cross-Site Scripting (XSS) in CVE-2026-9588 (CVE-2026-9588)
CVE-2026-9656 Information Disclosure in wordpress (CVE-2026-9656)
CVE-2026-62387 Vulnerability in CVE-2026-62387 (CVE-2026-62387)
CVE-2026-63397 Vulnerability in @genql/cli (CVE-2026-63397)
CVE-2026-55629 Path Traversal in whistle (CVE-2026-55629)
CVE-2026-53597 Code Injection in @prompty/core (CVE-2026-53597)
CVE-2026-15099 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15099)
CVE-2026-12869 Cross-Site Scripting (XSS) in wordpress (CVE-2026-12869)
CVE-2026-14987 Cross-Site Scripting (XSS) in wordpress (CVE-2026-14987)
CVE-2026-50289 OS Command Injection in systeminformation (CVE-2026-50289)
CVE-2026-50272 Vulnerability in dd-trace (CVE-2026-50272)
CVE-2026-55445 Authentication Bypass in @whyour/qinglong (CVE-2026-55445)
CVE-2026-55652 Authentication Bypass in CVE-2026-55652 (CVE-2026-55652)
CVE-2026-55234 Wekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in server/permissions/cards.js, server/permissions/lists.js, and server/permissions/swimlanes.js authorize ag...
CVE-2026-53446 SSRF (Server-Side Request Forgery) in CVE-2026-53446 (CVE-2026-53446)
CVE-2026-53447 Vulnerability in CVE-2026-53447 (CVE-2026-53447)
CVE-2026-52892 Vulnerability in CVE-2026-52892 (CVE-2026-52892)
CVE-2026-52893 Authentication Bypass in CVE-2026-52893 (CVE-2026-52893)
CVE-2026-53444 Privilege Escalation in CVE-2026-53444 (CVE-2026-53444)
CVE-2026-53445 Vulnerability in CVE-2026-53445 (CVE-2026-53445)
CVE-2026-52891 OS Command Injection in CVE-2026-52891 (CVE-2026-52891)
CVE-2026-52890 Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method with attacker-controlled...

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →