# CVEs published 2014-12-30

4 CVEs were published on December 30, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-4630](https://cve.now/CVE-2014-4630.md): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate (no CVSS)
- [CVE-2014-4634](https://cve.now/CVE-2014-4634.md): Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain priv (no CVSS)
- [CVE-2011-2727](https://cve.now/CVE-2011-2727.md): The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms\_plugin\_api\_link.inc.php scripts in Tribal Tribiq CMS (no CVSS)
- [CVE-2013-3295](https://cve.now/CVE-2013-3295.md): Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-12-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.