Nobody has reported more number of security vulnerabilities (or even bugs) against Oracle RDBMS [The exact number is too high to be meaningful, though :-)]. It will be _some_ time, before anybody comes even close to it. There are chances, it may never happen at all !!
However, I am almost done with my share of bug-hunts and security tools and now as a member of DB Security Development team, I am giving myself a taste of my own medicine and having fun fixing some of my own bugs !! I am also looking at ways in which these security vulnerabilities can be nipped in the bud besides doing research on new ideas/products related to Database Security.
Accolades/Special mention include
* (U...