verifone kayıtları
verifone üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-276 Incorrect Default Permissions1
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-0750İstismar yok | Payment bypass in Commerce Payboxverifone · commerce paybox · CWE-347 | Yüksek8,7 | — | %0,3 | 28 Oca 2026 |
33İzleyin | CVE-2019-10060İstismar yok | The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execuverifone · verix multi-app conductor · CWE-119 | Yüksek8,1 | — | %1,7 | 25 Mar 2019 |
31İzleyin | CVE-2019-14719İstismar yok | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manverifone · mx900 firmware · CWE-77 | Yüksek7,8 | — | %0,9 | 23 Eki 2020 |
31İzleyin | CVE-2019-14712İstismar yok | Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.verifone · verix os | Yüksek7,8 | — | %0,3 | 23 Eki 2020 |
31İzleyin | CVE-2019-14717İstismar yok | Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.verifone · verix os · CWE-120 | Yüksek7,8 | — | %0,3 | 23 Eki 2020 |
30İzleyin | CVE-2012-4951Kavram kanıtı | Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackverifone · vericentre web console · CWE-89 | Yüksek7,5 | — | %1,5 | 15 Kas 2012 |
28İzleyin | CVE-2019-14711İstismar yok | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.verifone · mx900 firmware · CWE-362 | Yüksek7,0 | — | %0,2 | 23 Eki 2020 |
27İzleyin | CVE-2019-14715İstismar yok | Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.verifone · p400 firmware · CWE-787 | Orta6,8 | — | %0,3 | 23 Eki 2020 |
26İzleyin | CVE-2019-14718İstismar yok | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command iverifone · mx900 firmware · CWE-276 | Orta6,7 | — | %1,2 | 23 Eki 2020 |
26İzleyin | CVE-2019-14716İstismar yok | Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).verifone · verix os | Orta6,6 | — | %0,3 | 23 Eki 2020 |
22İzleyin | CVE-2019-14713İstismar yok | Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.verifone · mx900 firmware | Orta5,5 | — | %0,3 | 23 Eki 2020 |
- CVE-2026-075034İzleyin
Payment bypass in Commerce Paybox
YüksekCVSS 8,7İstismar yokEPSS %0verifone · commerce paybox28 Oca 2026
- CVE-2019-1006033İzleyin
The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execu
YüksekCVSS 8,1İstismar yokEPSS %2verifone · verix multi-app conductor25 Mar 2019
- CVE-2019-1471931İzleyin
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file man
YüksekCVSS 7,8İstismar yokEPSS %1verifone · mx900 firmware23 Eki 2020
- CVE-2019-1471231İzleyin
Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.
YüksekCVSS 7,8İstismar yokEPSS %0verifone · verix os23 Eki 2020
- CVE-2019-1471731İzleyin
Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.
YüksekCVSS 7,8İstismar yokEPSS %0verifone · verix os23 Eki 2020
- CVE-2012-495130İzleyin
Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attack
YüksekCVSS 7,5Kavram kanıtıEPSS %2verifone · vericentre web console15 Kas 2012
- CVE-2019-1471128İzleyin
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
YüksekCVSS 7,0İstismar yokEPSS %0verifone · mx900 firmware23 Eki 2020
- CVE-2019-1471527İzleyin
Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
OrtaCVSS 6,8İstismar yokEPSS %0verifone · p400 firmware23 Eki 2020
- CVE-2019-1471826İzleyin
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command i
OrtaCVSS 6,7İstismar yokEPSS %1verifone · mx900 firmware23 Eki 2020
- CVE-2019-1471626İzleyin
Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).
OrtaCVSS 6,6İstismar yokEPSS %0verifone · verix os23 Eki 2020
- CVE-2019-1471322İzleyin
Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
OrtaCVSS 5,5İstismar yokEPSS %0verifone · mx900 firmware23 Eki 2020