which one is more secure java or .net

Java and .NET and nearly identical. The only important difference is that the Java license says that an implementation must implement all of the Java standard, and nothing else. In other words, no implementation can create a community of Java applications that don't work with other implementations. Microsoft created .NET because they needed something like Java without this license provision, so that they could avoid platform independence.