Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:20:37 +0000 cnvd-2021-18239 https://cve.radiocsirt.org/vuln/cnvd-2021-18239 cnvd-2021-18239 https://cve.radiocsirt.org/vuln/cnvd-2021-18239 EUVD-2026-41087 https://cve.radiocsirt.org/vuln/euvd-2026-41087 EUVD-2026-41087 https://cve.radiocsirt.org/vuln/euvd-2026-41087 fkie_cve-2020-12119 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12119 <p>Ledger Live before 2.7.0 does not handle Bitcoin&#39;s Replace-By-Fee (RBF). It increases the user&#39;s balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.</p> <p>Ledger Live before 2.7.0 does not handle Bitcoin&#39;s Replace-By-Fee (RBF). It increases the user&#39;s balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12119 GHSA-gmgx-9fpg-9q58 https://cve.radiocsirt.org/vuln/ghsa-gmgx-9fpg-9q58 <p>Ledger Live before 2.7.0 does not handle Bitcoin&#39;s Replace-By-Fee (RBF). It increases the user&#39;s balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.</p> <p>Ledger Live before 2.7.0 does not handle Bitcoin&#39;s Replace-By-Fee (RBF). It increases the user&#39;s balance with the value of an unconfirmed transaction as soon as it is received (before the transaction is confirmed) and does not decrease the balance when it is canceled. As a result, users are exposed to basic double spending attacks, amplified double spending attacks, and DoS attacks without user consent.</p> https://cve.radiocsirt.org/vuln/ghsa-gmgx-9fpg-9q58 gsd-2020-12119 https://cve.radiocsirt.org/vuln/gsd-2020-12119 gsd-2020-12119 https://cve.radiocsirt.org/vuln/gsd-2020-12119