Verifone

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-0750 1Verifone 1Commerce Paybox Jun 17, 2026 Jan 28, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7...Show more Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5.Show less
CVE-2019-14719 1Verifone 1Mx900 Firmware Jun 17, 2026 Oct 23, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow multiple arbitrary command injections, as demonstrated by the file manager.
CVE-2019-14718 1Verifone 1Mx900 Firmware Jun 17, 2026 Oct 23, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have Insecure Permissions, with resultant svc_netcontrol arbitrary command injection and privilege escalation.
CVE-2019-14717 1Verifone 1Verix Os Jun 17, 2026 Oct 23, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Verifone Verix OS on VerixV Pinpad Payment Terminals with QT000530 have a Buffer Overflow via the Run system call.
CVE-2019-14716 1Verifone 1Verix Os Jun 17, 2026 Oct 23, 2020 N/A· v4 6.6 MEDIUM· v3 4.6 MEDIUM· v2 Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode (aka VerixV shell.out).
CVE-2019-14715 1Verifone 4P200 Firmware P400 FirmwareVx 805 Firmware+1 more Jun 17, 2026 Oct 23, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation.
CVE-2019-14713 1Verifone 1Mx900 Firmware Jun 17, 2026 Oct 23, 2020 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 allow installation of unsigned packages.
CVE-2019-14712 1Verifone 1Verix Os Jun 17, 2026 Oct 23, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Verifone VerixV Pinpad Payment Terminals with QT000530 allow bypass of integrity and origin control for S1G file generation.
CVE-2019-14711 1Verifone 1Mx900 Firmware Jun 17, 2026 Oct 23, 2020 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 Verifone MX900 series Pinpad Payment Terminals with OS 30251000 have a race condition for RBAC bypass.
CVE-2019-10060 1Verifone 1Verix Multi App Conductor Jun 17, 2026 Mar 26, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able t...Show more The Verix Multi-app Conductor application 2.7 for Verifone Verix suffers from a buffer overflow vulnerability that allows attackers to execute arbitrary code via a long configuration key value. An attacker must be able to download files to the device in order to exploit this vulnerability.Show less
CVE-2012-4951 1Verifone 1Vericentre Web Console Apr 29, 2026 Nov 15, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or...Show more Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the (1) TerminalId, (2) ModelName, or (3) ApplicationName parameter.Show less