# CVEs published 2014-02-11

11 CVEs were published on February 11, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1413](https://cve.now/CVE-2013-1413.md): Multiple cross-site scripting (XSS) vulnerabilities in synetics i-doit open 0.9.9-7, i-doit pro 1.0 and earlier, and i-doit pro 1.0.2 when t (no CVSS)
- [CVE-2013-1980](https://cve.now/CVE-2013-1980.md): Buffer overflow in the get\_dsmp function in loaders/masi\_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2013-2639](https://cve.now/CVE-2013-2639.md): Cross-site scripting (XSS) vulnerability in CTERA Cloud Storage OS before 3.2.29.0, 3.2.42.0, and earlier allows remote attackers to inject (no CVSS)
- [CVE-2013-3294](https://cve.now/CVE-2013-3294.md): Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2013-3933](https://cve.now/CVE-2013-3933.md): Cross-site scripting (XSS) vulnerability in the JoomShopping (com\_joomshopping) component before 4.3.1 for Joomla! allows remote attackers t (no CVSS)
- [CVE-2014-0980](https://cve.now/CVE-2014-0980.md): Buffer overflow in Poster Software PUBLISH-iT 3.6d allows remote attackers to execute arbitrary code via a crafted PUI file. (no CVSS)
- [CVE-2014-1237](https://cve.now/CVE-2014-1237.md): Cross-site scripting (XSS) vulnerability in synetics i-doit pro before 1.2.4 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2014-1401](https://cve.now/CVE-2014-1401.md): Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2014-1459](https://cve.now/CVE-2014-1459.md): SQL injection vulnerability in dg-admin/index.php in doorGets CMS 5.2 and earlier allows remote authenticated administrators to execute arbi (no CVSS)
- [CVE-2013-5012](https://cve.now/CVE-2013-5012.md): Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authent (no CVSS)
- [CVE-2013-5013](https://cve.now/CVE-2013-5013.md): Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-02-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.