CVE-2018-4478

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges...

CVE-2019-18216

The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which reduces the value of a protection mechanism in which booting from a USB device is prohibited. Attackers who have physical laptop access can exhaust...

CVE-2020-7590

A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Affected devices use a hard-coded password to protect the onboard database. This could allow ...

CVE-2020-12309

Insufficiently protected credentialsin subsystem in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-1073

Panasonic IR Control Hub IR Blaster versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device...

EUVD-2018-11474

Malware in sbrugna...

EUVD-1999-1374

Malware in sbrugna...

EUVD-2017-18427

Malware in sbrugna...

EUVD-2020-2587

Malware in sbrugna...

EUVD-2019-1963

Malware in sbrugna...

EUVD-2019-3021

Malware in sbrugna...

EUVD-2001-0157

Malware in sbrugna...

EUVD-2020-19769

Malware in sbrugna...

EUVD-2021-19792

Malware in sbrugna...

EUVD-2024-41158

Malicious code in bioql PyPI...

EUVD-2023-32308

Malicious code in bioql PyPI...

EUVD-2022-25223

Malicious code in bioql PyPI...

EUVD-2025-10428

Malicious code in bioql PyPI...

CVE-2025-27460 CVE-2025-27460

The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an attacker with physical access to the device to use an alternative operating system to interact with the hard drives, completely circumventing the Windows login. The attacker ca...

CVE-2025-49487

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services WFBSS agent could have allowed an attacker with physical access to a machine to execute arbitrary code on affected installations. An attacker must have had physical access to the target system in...