Your string has the ' character in it which sql server takes as a string begin and end deliminator. You will have to use '' (double in your string).
Use the following line instead :
com.CommandText="UPDATE notification SET notice = '" + ta1.Value.Replace("\'","\'\'") + "' where id='" + va + "'";