CVE-2017-16560

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

CVE-2017-16560

SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes...

CVE-2017-16560

The SanDisk Secure Access 3.01 vault may decrypt and copy encrypted files to a temporary folder, leaving plaintext copies on disk indefinitely in certain scenarios (e.g., when editing a file or after a crash). This stems from temporary plaintext files retained on disk. Affected product: SanDisk S...

kb-es.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-es.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

kb-he.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-he.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

kb-ko.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-ko.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

kb-jp.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-jp.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

kb.sandisk.com XSS vulnerability

Vulnerable URL: https://kb.sandisk.com/ci/fattach/get/1483683/1494123081/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check kb.sandisk.com S...

shop.sandisk.com Open Redirect vulnerability

Vulnerable URL: http://shop.sandisk.com/store/sdiskuk/enGB/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

kb-cn.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-cn.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

kb-ru.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-ru.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:23 GMT Vulnerability type:| XSS...

kb-it.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-it.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:23 GMT Vulnerability type:| XSS...

kb-fr.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-fr.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:23 GMT Vulnerability type:| XSS...

kb-es.sandisk.com XSS vulnerability

Vulnerable URL: http://kb-es.sandisk.com/app/error/errorid/404/url/%2522%253E%253Cimg%2520src%253D1%2520onerror%253Dprompt%2528'openbugbounty'%2529%253E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:22 GMT Vulnerability type:| XSS...

careers.sandisk.com XSS vulnerability

Vulnerable URL: https://careers.sandisk.com/apply/talentcommunity/subscribe/?slp=/talentcommunity/profile/%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 18.08.2016 Latest check for patch:| 18.08.2016 11:06 GMT Vulnerability type:| XSS Vulnerability...

Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US

No description provided...

Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility

Lenovo Security Advisory: LEN-5595 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity:Medium Scope of Impact: Lenovo Summary Description: SanDisk’s firmware used to erase the data on these SSDs did not meet Lenovo’s specifications and it was...

SanDisk Memory Zone - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application SanDisk Memory Zone published at the 'play' market has multiple vulnerabilities...

World’s First 200GB microSD Card Arrives

There isn't any troll in the title. The "World's Largest microSD" card sized at 200GB is now officially available for purchasing from Amazon and number of retailers. So, Is your 16GB, or 32GB, or even 64GB smartphone not enough to store all your data in one place? Order a Sandisk's new...

Design/Logic Flaw

SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time...