A web server is software that handles HTTP traffic from client-side web browsers. It responds to clients with the requested web pages or other files.
Web servers use port 80 for HTTP traffic and port 443 for HTTPS traffic.
Web applications can be particularly vulnerable because they have a large attack surface. The Open Worldwide Application Security Project (OWASP) maintains a list of the top 10 web application security risks at any given time.