Which type of vulnerability cannot be discovered in the course of a typical vulnerability assessment?
buffer overflow
zero-day vulnerability
file permissions
cross-site scripting