It is worth studying common weaknesses in code:

https://cwe.mitre.org/