slug: java

Explanation

Javaは銀行・証券・保険など大企業の業務システムで広く使われている老舗プログラミング言語です。 Androidアプリも基本的にJavaまたはKotlin (Java互換) で書かれています。 脆弱性の文脈では、デシリアライゼーション攻撃やライブラリ (Log4j等) の脆弱性が世界的な事件を起こしてきました。
📌 Example
Log4Shell (CVE-2021-44228) は Apache Log4j という Javaのログライブラリの脆弱性で、世界中のWebサーバーが数日でハッキングされる「インターネット史上最悪レベル」の事件となった。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,448

Image ID Title
CVE-2026-14759 Buffer Overflow in radareorg radare2 (CVE-2026-14759)
CVE-2026-14686 Vulnerability in HdrHistogram (CVE-2026-14686)
CVE-2026-14685 Vulnerability in HdrHistogram (CVE-2026-14685)
CVE-2026-14684 Vulnerability in HdrHistogram (CVE-2026-14684)
CVE-2026-14683 Vulnerability in HdrHistogram (CVE-2026-14683)
CVE-2026-14621 Vulnerability in FederatedAI FATE (CVE-2026-14621)
CVE-2026-12252 Code Injection in nltk (CVE-2026-12252)
CVE-2026-54617 Path Traversal in pro.gravit.launcher:launchserver-api (CVE-2026-54617)
CVE-2026-54704 Vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54704)
CVE-2026-54712 Vulnerability in io.opentelemetry.javaagent:opentelemetry-javaagent (CVE-2026-54712)
CVE-2026-55153 Vulnerability in com.mchange:mchange-commons-java (CVE-2026-55153)
CVE-2026-14265 Unsafe Deserialization in Amazon AWS Advanced JDBC Wrapper (CVE-2026-14265)
CVE-2026-55688 Vulnerability in org.asynchttpclient:async-http-client (CVE-2026-55688)
CVE-2026-13773 SSRF (Server-Side Request Forgery) in IBM WebSphere Extreme Scale (CVE-2026-13773)
CVE-2026-58138 Code Injection in Orkes Conductor (CVE-2026-58138)
CVE-2026-48791 Vulnerability in dev.sigstore:sigstore-java (CVE-2026-48791)
CVE-2026-12856 Vulnerability in vscode-java extension (CVE-2026-12856)
CVE-2026-13528 Path Traversal in YunaiV/zhijiantianya ruoyi-vue-pro (CVE-2026-13528)
CVE-2026-13503 Path Traversal in antlr ANTLR4 (CVE-2026-13503)
CVE-2026-13500 Vulnerability in antlr ANTLR4 (CVE-2026-13500)
CVE-2026-13502 Vulnerability in antlr ANTLR4 (CVE-2026-13502)
CVE-2026-13501 Vulnerability in antlr ANTLR4 (CVE-2026-13501)
CVE-2026-57527 Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization...
CVE-2026-45794 Unsafe Deserialization in org.openidentityplatform.openam:openam-push-notification (CVE-2026-45794)
CVE-2026-13006 ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and...
CVE-2026-54512 Vulnerability in com.fasterxml.jackson.core:jackson-databind (CVE-2026-54512)
CVE-2026-56120 Vulnerability in io.openremote:openremote-manager (CVE-2026-56120)
CVE-2026-56784 Vulnerability in OpenRemote Manager (CVE-2026-56784)
CVE-2026-46495 Unsafe Deserialization in org.openidentityplatform.opendj:opendj-server-legacy (CVE-2026-46495)
CVE-2026-44795 Vulnerability in io.spinnaker.rosco:rosco-core (CVE-2026-44795)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details