This paper addresses some common aspects of vulnerability management. First risk management is briefly described from a general perspective. Next frequently occurring vulnerabilities in the broad categories of software vulnerabilities, physical vulnerabilities and client vulnerabilities are discussed. Software vulnerabilities include those of software and web portals. Physical vulnerabilities contain the topics of security against intruders and naturally occurring disasters. Finally client vulnerabilities covers both internal and external clients in relation to bad passwords, potential for infection from a virus, and social engineering.