Sign in Sign up
JA · EN · FR
SecPulse

Java

💬 Programming Languages 🏢 Vendors Related 183
slug: java

Explanation

Javaは銀行・証券・保険など大企業の業務システムで広く使われている老舗プログラミング言語です。 Androidアプリも基本的にJavaまたはKotlin (Java互換) で書かれています。 脆弱性の文脈では、デシリアライゼーション攻撃やライブラリ (Log4j等) の脆弱性が世界的な事件を起こしてきました。
📌 Example
Log4Shell (CVE-2021-44228) は Apache Log4j という Javaのログライブラリの脆弱性で、世界中のWebサーバーが数日でハッキングされる「インターネット史上最悪レベル」の事件となった。

🔖 Related tags

C237 PHP41 JavaScript41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1 Rootio Linux419 Microsoft386 Jre178 Java Min178 Linux130 Apple99 Cisco89 Adobe78 Google77 Apache47

🛡 Vulnerabilities tagged with this 856

ID Title
CVE-2023-48795 Vulnerability in russh (CVE-2023-48795)
CVE-2023-42917 KEV [KEV] Out-of-Bounds Write in Apple java (CVE-2023-42917)
CVE-2023-43856 Vulnerability in iteachyou (CVE-2023-43856)
CVE-2023-41993 KEV [KEV] Vulnerability in Apple java (CVE-2023-41993)
CVE-2022-47966 KEV [KEV] Vulnerability in Zoho manageengine (CVE-2022-47966)
CVE-2022-21626 Vulnerability in c (CVE-2022-21626)
CVE-2022-21624 Unsafe Deserialization in c (CVE-2022-21624)
CVE-2022-34169 Vulnerability in apache (CVE-2022-34169)
CVE-2022-21952 Vulnerability in dos (CVE-2022-21952)
CVE-2013-0431 KEV [KEV] Vulnerability in Oracle java-runtime-environment-jre (CVE-2013-0431)
CVE-2015-1916 Vulnerability in dos (CVE-2015-1916)
CVE-2018-7795 Cross-Site Scripting (XSS) in schneider-electric (CVE-2018-7795)
CVE-2012-4681 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-4681)
CVE-2012-1723 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-1723)
CVE-2012-0507 KEV [KEV] Vulnerability in Oracle java-se (CVE-2012-0507)
CVE-2022-23437 Vulnerability in apache (CVE-2022-23437)
CVE-2021-44832 Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832)
CVE-2021-40690 Information Disclosure in apache (CVE-2021-40690)
CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVE-2020-17521 Vulnerability in apache (CVE-2020-17521)
CVE-2020-11113 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
CVE-2020-10969 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
CVE-2020-10673 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
CVE-2019-10086 Unsafe Deserialization in apache (CVE-2019-10086)
CVE-2018-1258 Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth...
CVE-2017-8046 Vulnerability in spring (CVE-2017-8046)
CVE-2013-4578 Vulnerability in oracle (CVE-2013-4578)
CVE-2014-3630 XXE (XML External Entity) in dos (CVE-2014-3630)
CVE-2017-5641 Unsafe Deserialization in apache (CVE-2017-5641)
CVE-2017-17745 Cross-Site Scripting (XSS) in tp-link (CVE-2017-17745)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →