https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-35931.htmlhttps://patchthecve.com/cve/CVE-2022-35931.htmlWed, 17 Jun 2026 04:52:32 +0000LOW 2.7: Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, 23.0.7, and 24.0.3 the random password generator may, in very rare cases, generate common passwords that the validator itself would block. Upgrade Nextcloud Serhttps://patchthecve.com/cve/CVE-2015-4387.htmlhttps://patchthecve.com/cve/CVE-2015-4387.htmlWed, 17 Jun 2026 00:27:12 +0000LOW 2.6: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x before 6.x-1.11 and 7.x-1.x before 7.x-1.11 for Drupal, when a site has a policy that uses the username constraint, allows remote attackers to inject arbitrary web script or HTML via a https://patchthecve.com/cve/CVE-2013-4274.htmlhttps://patchthecve.com/cve/CVE-2013-4274.htmlTue, 16 Jun 2026 23:56:55 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary https://patchthecve.com/cve/CVE-2012-5552.htmlhttps://patchthecve.com/cve/CVE-2012-5552.htmlTue, 16 Jun 2026 23:46:59 +0000MEDIUM 5.0: The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to obtain password hashes by sniffing the network, related to "client-side password history checks."https://patchthecve.com/cve/CVE-2012-1633.htmlhttps://patchthecve.com/cve/CVE-2012-1633.htmlTue, 16 Jun 2026 23:39:55 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user.https://patchthecve.com/cve/CVE-2012-1632.htmlhttps://patchthecve.com/cve/CVE-2012-1632.htmlTue, 16 Jun 2026 23:39:55 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in password_policy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter.