A vulnerability is a vector of attack in software.
For instance:
All public vulnerabilities can be found in the vulnerability database