JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,570

ID Title
CVE-2026-50699 Cross-Site Scripting (XSS) in CVE-2026-50699 (CVE-2026-50699)
CVE-2026-13163 Open Redirect in c (CVE-2026-13163)
CVE-2026-9183 Information Disclosure in wordpress (CVE-2026-9183)
CVE-2026-10091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10091)
CVE-2026-54639 Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users have: direct usage of `c...
CVE-2026-56785 Cross-Site Scripting (XSS) in CVE-2026-56785 (CVE-2026-56785)
CVE-2026-53662 Cross-Site Scripting (XSS) in CVE-2026-53662 (CVE-2026-53662)
CVE-2026-52816 Vulnerability in gogs.io/gogs (CVE-2026-52816)
CVE-2026-44960 Cross-Site Scripting (XSS) in CVE-2026-44960 (CVE-2026-44960)
CVE-2026-44956 Cross-Site Scripting (XSS) in CVE-2026-44956 (CVE-2026-44956)
CVE-2026-52807 Cross-Site Scripting (XSS) in gogs.io/gogs (CVE-2026-52807)
CVE-2026-11772 Cross-Site Scripting (XSS) in CVE-2026-11772 (CVE-2026-11772)
CVE-2026-56762 Vulnerability in CVE-2026-56762 (CVE-2026-56762)
CVE-2026-12866 Code Injection in CVE-2026-12866 (CVE-2026-12866)
CVE-2026-52798 Cross-Site Scripting (XSS) in gogs.io/gogs (CVE-2026-52798)
CVE-2026-56698 Cross-Site Scripting (XSS) in nuxt (CVE-2026-56698)
CVE-2026-48167 Cross-Site Scripting (XSS) in filament/infolists (CVE-2026-48167)
CVE-2026-48931 Vulnerability in nodejs (CVE-2026-48931)
CVE-2026-11994 Cross-Site Scripting (XSS) in CVE-2026-11994 (CVE-2026-11994)
CVE-2026-8059 Cross-Site Scripting (XSS) in ibm (CVE-2026-8059)
CVE-2026-50178 Cross-Site Scripting (XSS) in angular (CVE-2026-50178)
CVE-2026-49241 Cross-Site Scripting (XSS) in angular (CVE-2026-49241)
CVE-2026-11943 Cross-Site Scripting (XSS) in CVE-2026-11943 (CVE-2026-11943)
CVE-2026-11942 Cross-Site Scripting (XSS) in CVE-2026-11942 (CVE-2026-11942)
CVE-2026-11372 Cross-Site Scripting (XSS) in ibm (CVE-2026-11372)
CVE-2025-33128 Cross-Site Scripting (XSS) in ibm (CVE-2025-33128)
CVE-2026-12580 Cross-Site Scripting (XSS) in csharp (CVE-2026-12580)
CVE-2023-45795 Cross-Site Scripting (XSS) in CVE-2023-45795 (CVE-2023-45795)
CVE-2026-56393 Cross-Site Scripting (XSS) in CVE-2026-56393 (CVE-2026-56393)
CVE-2026-56397 Cross-Site Scripting (XSS) in CVE-2026-56397 (CVE-2026-56397)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →