verifone records
11 published records for vendor verifone.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-276 Incorrect Default Permissions1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2026-0750No exploit | Payment bypass in Commerce Payboxverifone · commerce paybox · CWE-347 | High8.7 | — | 0.3% | Jan 28, 2026 |
33Monitor | CVE-2019-10060No exploit | The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execuverifone · verix multi-app conductor · CWE-119 | High8.1 | — | 1.6% | Mar 25, 2019 |
31Monitor | CVE-2019-14719No exploit | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manverifone · mx900 firmware · CWE-77 | High7.8 | — | 0.8% | Oct 23, 2020 |
31Monitor | CVE-2019-14712No exploit | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.verifone · verix os | High7.8 | — | 0.3% | Oct 23, 2020 |
31Monitor | CVE-2019-14717No exploit | Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.verifone · verix os · CWE-120 | High7.8 | — | 0.3% | Oct 23, 2020 |
30Monitor | CVE-2012-4951Proof of concept | Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackverifone · vericentre web console · CWE-89 | High7.5 | — | 1.5% | Nov 15, 2012 |
28Monitor | CVE-2019-14711No exploit | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.verifone · mx900 firmware · CWE-362 | High7.0 | — | 0.2% | Oct 23, 2020 |
27Monitor | CVE-2019-14715No exploit | Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.verifone · p400 firmware · CWE-787 | Medium6.8 | — | 0.3% | Oct 23, 2020 |
26Monitor | CVE-2019-14718No exploit | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command iverifone · mx900 firmware · CWE-276 | Medium6.7 | — | 1.1% | Oct 23, 2020 |
26Monitor | CVE-2019-14716No exploit | Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).verifone · verix os | Medium6.6 | — | 0.3% | Oct 23, 2020 |
22Monitor | CVE-2019-14713No exploit | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.verifone · mx900 firmware | Medium5.5 | — | 0.3% | Oct 23, 2020 |
- CVE-2026-075034Monitor
Payment bypass in Commerce Paybox
HighCVSS 8.7No exploitEPSS 0%verifone · commerce payboxJan 28, 2026
- CVE-2019-1006033Monitor
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execu
HighCVSS 8.1No exploitEPSS 1%verifone · verix multi-app conductorMar 25, 2019
- CVE-2019-1471931Monitor
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file man
HighCVSS 7.8No exploitEPSS 0%verifone · mx900 firmwareOct 23, 2020
- CVE-2019-1471231Monitor
Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.
HighCVSS 7.8No exploitEPSS 0%verifone · verix osOct 23, 2020
- CVE-2019-1471731Monitor
Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.
HighCVSS 7.8No exploitEPSS 0%verifone · verix osOct 23, 2020
- CVE-2012-495130Monitor
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attack
HighCVSS 7.5Proof of conceptEPSS 1%verifone · vericentre web consoleNov 15, 2012
- CVE-2019-1471128Monitor
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
HighCVSS 7.0No exploitEPSS 0%verifone · mx900 firmwareOct 23, 2020
- CVE-2019-1471527Monitor
Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
MediumCVSS 6.8No exploitEPSS 0%verifone · p400 firmwareOct 23, 2020
- CVE-2019-1471826Monitor
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command i
MediumCVSS 6.7No exploitEPSS 1%verifone · mx900 firmwareOct 23, 2020
- CVE-2019-1471626Monitor
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).
MediumCVSS 6.6No exploitEPSS 0%verifone · verix osOct 23, 2020
- CVE-2019-1471322Monitor
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
MediumCVSS 5.5No exploitEPSS 0%verifone · mx900 firmwareOct 23, 2020