VE
Vendor
Verifone
9 products with CVEs on record
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-0750
CP
Commerce Paybox
Verifone
7.5
0%
Jan 28Payment bypass in Commerce Paybox
CVE-2019-14719
MF
Mx900 Firmware
Verifone
7.8
1%
Oct 23Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager
CVE-2019-14718
MF
Mx900 Firmware
Verifone
6.7
1%
Oct 23Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation
CVE-2019-14717
VO
Verix OS
Verifone
7.8
0%
Oct 23Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call
CVE-2019-14716
VO
Verix OS
Verifone
6.6
0%
Oct 23Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out)
CVE-2019-14715
PF
P400 Firmware
Verifone
6.8
0%
Oct 23Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation
CVE-2019-14713
MF
Mx900 Firmware
Verifone
5.5
0%
Oct 23Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages
CVE-2019-14712
VO
Verix OS
Verifone
7.8
0%
Oct 23Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation
CVE-2019-14711
MF
Mx900 Firmware
Verifone
7.0
0%
Oct 23Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass
CVE-2019-10060
VM
Verix Multi-app Conductor
Verifone
8.1
2%
Mar 26The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long…
CVE-2012-4951
VW
Vericentre Web Console
Verifone
–
2%
Nov 15Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands…