Pipe boots and penetration flashing
Every vent stack, flue and fan is a hole cut through a watertight surface on purpose. The rubber collar around it is the single most common failure we photograph, and it is cheap to replace with the roof already open.