The root cause.

Each entry takes a real, publicly disclosed vulnerability and explains the underlying flaw — not just the CVSS score and a patch link, but the actual mechanism that made it possible, and what fixing it really means.