Oracle has released fixes for 41 serious vulnerabilities in various versions of their database. One of the vulnerabilities allows data to be changed with no record of the changes being logged.

http://www.oracle.com/technology/dep...pujan2009.html