Vulnerability vs. exploit

A vulnerability is a weakness in a system, its security procedures, or its implementation that could be triggered or taken advantage of by a threat. An exploit is the actual code, tool, or technique an attacker uses to take advantage of that weakness. In short: the vulnerability is the open door, the exploit is what's used to walk through it.