Which type of vulnerability cannot be discovered in the course of a typical vulnerability assessment?
zero-day vulnerability
buffer overflow
cross-site scripting
file permissions