Vulnerability scanning is the activity of scanning for known vulnerabilities in systems such as operating systems and web applications. Typically, these vulnerabilities are listed by the Common Vulnerabilities and Exposures (CVE). Penetration testing is the activity of attempting break into a computer system and find unknown vulnerabilities that could be exploited by hackers.