A vulnerability researcher has attacked Oracle for failing to tackle a number of flaws in its software products.