Hundreds of NHS patients have been harmed due to errors that should never have occurred, including operations on the wrong body part and medical objects being left inside them, new data shows.