slug: java

Explanation

Javaは銀行・証券・保険など大企業の業務システムで広く使われている老舗プログラミング言語です。 Androidアプリも基本的にJavaまたはKotlin (Java互換) で書かれています。 脆弱性の文脈では、デシリアライゼーション攻撃やライブラリ (Log4j等) の脆弱性が世界的な事件を起こしてきました。
📌 Example
Log4Shell (CVE-2021-44228) は Apache Log4j という Javaのログライブラリの脆弱性で、世界中のWebサーバーが数日でハッキングされる「インターネット史上最悪レベル」の事件となった。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,447

Image ID Title
CVE-2022-21624 Unsafe Deserialization in Oracle Java SE, Oracle GraalVM Enterprise Edition (CVE-2022-21624)
CVE-2022-34169 Vulnerability in Oracle Apache (CVE-2022-34169)
CVE-2022-21952 Vulnerability in SUSE Manager Server (CVE-2022-21952)
CVE-2013-0431 KEV [KEV] Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-0431)
CVE-2015-1916 Vulnerability in IBM Java (CVE-2015-1916)
CVE-2018-7795 Cross-Site Scripting (XSS) in Schneider Electric's PowerLogic (CVE-2018-7795)
CVE-2018-2811 Vulnerability in Oracle Jdk (CVE-2018-2811)
CVE-2012-4681 KEV [KEV] Vulnerability in Oracle Java SE (CVE-2012-4681)
CVE-2012-1723 KEV [KEV] Vulnerability in Oracle Java SE (CVE-2012-1723)
CVE-2012-0507 KEV [KEV] Vulnerability in Oracle Java SE (CVE-2012-0507)
CVE-2022-23437 Vulnerability in Apache Weblogic Server (CVE-2022-23437)
CVE-2021-44832 Vulnerability in org.apache.logging.log4j:log4j-core (CVE-2021-44832)
CVE-2021-40690 Information Disclosure in Apache Weblogic Server (CVE-2021-40690)
CVE-2021-39152 Unsafe Deserialization in Oracle Xstream (CVE-2021-39152)
CVE-2021-39150 Unsafe Deserialization in com.thoughtworks.xstream:xstream (CVE-2021-39150)
CVE-2021-39153 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-39153)
CVE-2021-39139 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-39139)
CVE-2021-37714 Vulnerability in Oracle Jsoup (CVE-2021-37714)
CVE-2021-32751 OS Command Injection in Gradle (CVE-2021-32751)
CVE-2021-29505 Code Injection in com.thoughtworks.xstream:xstream (CVE-2021-29505)
CVE-2021-29428 Vulnerability in Gradle (CVE-2021-29428)
CVE-2021-29429 Vulnerability in Gradle (CVE-2021-29429)
CVE-2021-21347 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-21347)
CVE-2021-21348 Vulnerability in com.thoughtworks.xstream:xstream (CVE-2021-21348)
CVE-2021-21349 Unsafe Deserialization in com.thoughtworks.xstream:xstream (CVE-2021-21349)
CVE-2021-21351 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-21351)
CVE-2021-21350 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-21350)
CVE-2021-21341 Vulnerability in com.thoughtworks.xstream:xstream (CVE-2021-21341)
CVE-2021-21342 Unsafe Deserialization in com.thoughtworks.xstream:xstream (CVE-2021-21342)
CVE-2021-21344 Unrestricted File Upload in com.thoughtworks.xstream:xstream (CVE-2021-21344)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details